last executing test programs: 15.987609645s ago: executing program 0 (id=305): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100"], 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x400000}, 0x1c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/87, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000500)) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 13.396325801s ago: executing program 1 (id=319): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb0180c2000000ffffffff"], 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x3e309000) (async) syz_usb_connect(0x5, 0x78, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8e, 0xe5, 0x21, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 12.877691829s ago: executing program 2 (id=323): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x814}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}}, 0x0) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0xfc, 0x0, 0x0, 0x0, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x1, 0x20, {0x7}}}}}}}]}}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100000a0a030000000000000000000200000009000100"], 0x154}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100000a0a030000000000000000000200000009000100"], 0x154}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000300)=',', 0x1}], 0x1) ioctl$LOOP_SET_STATUS(r6, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1]}) r9 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x83, 0x1, "04"}, 0x0, &(0x7f0000000300)={0x20, 0x85, 0x3, "ac8c8c"}}) (async) syz_usb_control_io$uac1(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x83, 0x1, "04"}, 0x0, &(0x7f0000000300)={0x20, 0x85, 0x3, "ac8c8c"}}) 12.033407312s ago: executing program 1 (id=327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x14}, @TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x40}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) 11.859812213s ago: executing program 0 (id=328): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYRESDEC=r0, @ANYRES8=r2, @ANYRES64=r1], 0x0) 11.859396783s ago: executing program 2 (id=329): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x62a141, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800fc093016b221ca00000100000000"], 0x1) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000008ec0)=ANY=[@ANYBLOB="12011001a300e5bafa5900000000d3e798330962000067a2000000"], 0x0) 9.009563354s ago: executing program 3 (id=331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x20, 0x7, 0x7}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x9}, 0x8) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000005) 8.72424483s ago: executing program 0 (id=332): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x87, 0x80000000}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000140)={0x4, 0x0, "77d497a3980d321708cd213c26a465378801408310f9a26047ef1b86bcc3574f", 0x7, 0x4, 0x2a0, 0x8, 0x130}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8.721653683s ago: executing program 3 (id=333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001"], 0x50, 0x4004c}}], 0x1, 0x4) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) splice(r3, 0x0, r9, 0x0, 0x39000, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) stat(0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r10, 0xfffffffffffffffe, {0x2, 0x0, 0x2}, 0xff}, 0x18) connect$unix(r0, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e) (async) io_uring_enter(r8, 0x7f7d, 0xe639, 0x7e, &(0x7f0000000040)={[0x7]}, 0x8) 8.616081934s ago: executing program 2 (id=334): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x2, 0x22000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100, '\x00', 0x109a7}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0xa, 0x7d, {0x7d, 0x1, "df09d8a512b2dfd2aa65cbb90b81aec5b9a78685a72faa38046afd473d9b6a459dbe99f9ff4a7334947c1727f602e86242c323501a37e1e2e6446950d98803b52b41b53111d01513837fe65d59ca01a858c418124c3c6c4c037577aa91c827ef1629497aea860019ac30e124487749a0163a0da3b5174444ce77a2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f00000001c0)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6d701e33f7c61c542af6e9aa85e7b05d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x70, 0x1, 0x101, 0xf, 0x3, [0xffc0c0]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x2, 0x8, "02a64ea1", "adf67535"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x2, 0x2, 0xff, 0x5, 0x1315, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x17, 0x7a, "0d42c0906d8209b5b9e314826a27faf3cc059237afec72e12620b8e892f3f3463a2a6678f40cabbc7a8c3307a15805c4d2871e089f5d138af63259210feab83a145b70988b79d31aaa8d6200bb5798a20b5216ed25f5c290b5778151d43c0a828335c4086569e281e1b4d0d9c01bf4a9e9cffc00bd8f383e86ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x80, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x11}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, 'P/'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @random="f3b4657e1712"}, &(0x7f0000000600)={0x40, 0x19, 0x2, "ae23"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$uac1(r3, &(0x7f0000000780)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0xab, {0xab, 0x21, "45ab143eaeb4314122bbde40a6c2020c1022894d3c1cad83f57dcd55a466d0620a5d58face3df76ac5c544e3a19c02f3e5db1aa3503678c2c748976458bbf0dfdcffc5b1be2efa942df13d25c3916b537b9723efd4b981b97134e7e5adf31a84582ef15f072ae6b3688e749cdeb5ce21701d7c5d7ef6fe226c196f1059490f23245a535716e1c1b756df102f2b1954dc63344259a6e59c30ed41ca57e8e54593ac430aa0159051bc1a"}}, &(0x7f0000000900)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "5cbac77795909ba9b6101b5eb194c7f47395c60a84a93427d147db4ce89c1c83be196137f132c36e144f0f04f6b126ec9a9ed57142db4ebd6e"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000a80)={0x20, 0x8, 0x74, "709957de5f05342f98f75525ad970c6d78391a6565adb5126866507232de0d2d47ddc0156a3baadbbaa6466e2c603d2191df89e1a0958ceaad327413229bcada0383f6da7e472f6cdd956808851c8a0616315d997bb0da8a589ef61b4655f4d25c7aa987c73492952b8763f372833781035fafb4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'J'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, ' 7^'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "ac76a4"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "dbcd44"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "3a98c3"}}) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x2}, 0x0) 8.59376939s ago: executing program 1 (id=335): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r3, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x8, {0x2, 0xfffd, @multicast2}, 'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5206a0700fe00000000850000007d000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212cad88e8b687a2446049577c75b76b775c1e80dbc4ba3ce2e95c02301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.432243502s ago: executing program 4 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x236, &(0x7f0000000340)={0x0, 0xf691, 0x1, 0x0, 0x2b2, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x200}, 0x2a, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x9) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f00000000c0)) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) 8.2853377s ago: executing program 3 (id=337): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000000)={0x18, r7, 0xfffffffffffffffb, 0xffffffffffffff81}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r9, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r10, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000008c0)={0x4, @vbi={0x7, 0x4e8a, 0x32067681, 0x47425247, [0x3, 0x3b], [0xd, 0x81], 0x1}}) 7.436697533s ago: executing program 4 (id=338): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9babfd2914c492f58e32475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ee99a1f93a6cebd52f22eb93bcedf37f4cc3982b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4844903619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b69eafd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f1a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a87e1b121adb5812ee1769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf803defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d7ea9ce9b0b9d2c2e2ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90cfc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25ad27b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a13103", 0x1000}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224ff00000080000904000201030001000921f3ff000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x301840) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.313498621s ago: executing program 0 (id=339): syz_open_dev$sg(0x0, 0x0, 0x8002) setitimer(0x2, &(0x7f0000000580)={{0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r2, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\x00\x00@\x00', @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x2400c080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5d, 0xff, 0x87}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x5, 0xa}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0xfb, 0xc, 0x8, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0xc4, &(0x7f0000000480)=@string={0xc4, 0x3, "7d2c3cebe2ca769dcba40778bb9ac034472dee56cdc7f56998f02b5cfd6164898ac0d0c5067903c3515779705a8ad52317e0186d15c2d2539f6f30ddcecb5636566d5091e60867dc20f9a57bb11dd44ed53c106eb0a8f8ae00b751c9752670cd96e15c392a49736405bc56a5775144a9a65f7c940a1a7730ee74d58bae7c22fc31542b0e50c97ca2b3fa80f78588f94035209025da125815e8c021ad90deffe898d46c891b06899ddd9d3ff1662a75f12cd2b5e7655b4d74a1e4f6fe98bf65d5084e"}}, {0xc8, &(0x7f00000005c0)=@string={0xc8, 0x3, "e50630ced257bad94b929f8a4031414cda9885f4e74fa71f8fbf1dbb94fe9e7994cfe9df1bdc117c527ef600a16952922ee6019e482f972d127eacff5036e7805159dec98cc56871fe2a9f5c0f74e96ab328fdd83c11a72e2010fa97463f4f58c3dabb73597aa4ff7770d760b2d473d5f1f92652408cfbbe8a3d310d31c1a389dedf899812ee38e7b98b62cca87fdeec61c65d492703895605e2544ba87a1a11a8f613c442b5af9f605c762e0ba74ac7bb8c6be8ea1f13332800e76323fed73b45c14435ac74"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "b7cf14dcd4c618930f2e35fb38ddb618f07b8fbfb44db2e64c48f14f4f35225e1f8ed0257d10e0a2921e0bbc6d0d80d1b76d39f004b0109003da35e34e9333303217d73e123f273b7fcb9514a545c665ca1c326e8baca4523f4660b8c9160485e9b14590635a1012ae3f2fdb1fa137a819c6b400b819020d7764db60237549fe3b4617d0eff60fa6c57c7f0b7005ff837ec57bee3d2d25fc795f10839d74fbc7b1f964ebd0b7c726d3e69cfaf251ba9faa7d32ef248404b7a7491b7be124"}}]}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) socket$netlink(0x10, 0x3, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.064317636s ago: executing program 2 (id=340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x30200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)='B', 0x1}], 0x1}}], 0x1, 0x0) write$sequencer(r2, &(0x7f0000000140)=[@l={0x92, 0x7, 0xe0, 0x1f, 0x7, 0x80, 0x800}, @l={0x92, 0x0, 0xd0, 0xe, 0x4, 0x81, 0x7}, @e={0xff, 0xa, 0xf, 0x81, @SEQ_CONTROLLER=0xfe, 0x8, 0x8, 0xc0}], 0x18) 5.9175752s ago: executing program 2 (id=341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 5.85523718s ago: executing program 3 (id=342): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="62f789f1a8ad4300005400000006060303000000000000000000000001050001000700006574000000000c00078008000640000000020900020073797a30000000000500050002000000050004000000000000000000"], 0x54}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'dvmrp1\x00'}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x9, 0x2, 0x0, 0x515f3157, 0x12, "7800000000000000000000f400"}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0xb1, 0x6, &(0x7f0000000140)={0xe, "633c1f7ec95baa192c9628b889077936c897a7bc6d3cb6bffcf83a3f7c133af330"}}) 5.356237577s ago: executing program 4 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16, @ANYRES64=r0], 0x24}}, 0x0) socketpair(0x28, 0x800, 0x28, &(0x7f0000000040)) 5.309138273s ago: executing program 4 (id=344): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f7f30320480b11303802010203010902a10001000000000904ca0005468967000905090000000809070725018006810009"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x200, 0x70bd28, 0x8, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x57e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 5.166815086s ago: executing program 1 (id=345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001d040000000000001c000000000000007504000001ed0a0064000000170000000c040000000000007b0a00fe000c00006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29fa9ec35866a96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x14}, @TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x40}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) 4.132270359s ago: executing program 0 (id=346): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000014}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket(0x15, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0xfffffffffffffc86, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) rt_sigqueueinfo(0x0, 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x82, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 3.534342686s ago: executing program 3 (id=347): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0xffffff0c) (async) read(r0, 0x0, 0xffffff0c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) write(r1, &(0x7f0000000180)="898d9544a5b4522743134cb47b589f954b4e3ffdc84d211340c14b8c5df439c55316022e86a3a4bb5aa2f2359e5ecc2c220617a86a7fbb6f4b006a69bde0fd76d3c5235c526b5ceaafca12f9353102d9e0adc3836a09ca0b8beb0b1d27219a1b699d2c1cae5a9114a1bf8e4ebd56b235592249b8f1751a4711aaaab1a0ad3abb2f2bdd5ed44bf4a06b7f61ee0d14ee81180c1462334d05b947150273281ffa800389e71dc8cdc321c0b1294396f27ab62ed687a6a5a42c2fbf026bbbda441ce4f5344d45f7d354efce330797dea5dd6bb6c1ad10c9cd027d6b44237ccd0935e6a60099aa2690ededee7ff714db3e35fb63451057", 0xf4) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472796c6f636b206d0a93"], 0xc) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x4000000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x12b240, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000f103"], 0x10040) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 3.484854639s ago: executing program 2 (id=348): r0 = socket$qrtr(0x2a, 0x2, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xab020010) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0xc0c00, 0x0) lseek(r4, 0x24, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000001600)=""/4089, 0x5, 0x200000000000049a) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000080)={0x18}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f3000"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @local}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) 3.208197528s ago: executing program 4 (id=349): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x87, 0x80000000}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000140)={0x4, 0x0, "77d497a3980d321708cd213c26a465378801408310f9a26047ef1b86bcc3574f", 0x7, 0x4, 0x2a0, 0x8, 0x130}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.830780948s ago: executing program 1 (id=350): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x0, @empty, @empty, 0x8006, 0x10, 0x5f1, 0x7fff}}) 1.39637297s ago: executing program 4 (id=351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204"], 0x14}}, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000540), 0x10000000000002be, 0x0, 0x0) r9 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1b, 0x0, "99aed94cb0b35c64fb781b79363b6fb8a279443e8522854bec7fabec4372cd962a8f57216a5d981041890c6fdb1fd901c2a073dbe6dbc04a3f122251b9ca5327885f62686ff3857d13997543ff74265e"}, 0xd8) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8001}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c34060100c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e5e7111238865d27b4e82dcc94700ddd1878b088736009d15f9fa"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8888}, 0x8880) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) r12 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r12}], 0x1, 0x0) ioctl$TCFLSH(r11, 0x5608, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x300}) 1.335518617s ago: executing program 0 (id=352): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x8, 0x4000, 0x0, 0x0}, {0xe425, 0x2000, 0x0, 0x0}], 0x3}) 1.168007342s ago: executing program 1 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) setsockopt(r2, 0xfffffffa, 0x9, &(0x7f00000004c0)="22a3f7213ab5e80e6cb980de2bb74a4cfaab3cd1dfae48783f3ebc37f2ed5986d8132cb31cba375cb2cf33d64bb06616a1b05e8c4a7ae3f9bc89020856eb0e17d5c1ae2bea68c8a938c572c6f4ea7934ddae9be79bd781d929d65d1b0de882ff682b98c337f364a2209923594e0fec04086ff4cfd9d2258ecba6020c5dd92430272bbace9147f55e89eda00f9f6c59", 0x8f) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0x6, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x464}}, 0x0) 0s ago: executing program 3 (id=354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x3) syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x4, "4336d88b1a56"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x3, "6087e8b56f82e3abae"}, @as_header={0x7, 0x24, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) (async) accept$alg(r1, 0x0, 0x0) (async) sendfile(r2, r0, 0x0, 0x3) (async) syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x4, "4336d88b1a56"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x3, "6087e8b56f82e3abae"}, @as_header={0x7, 0x24, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) (async) kernel console output (not intermixed with test programs): 128.056227][ T1209] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 128.094785][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 128.102423][ T24] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 128.152903][ T1209] usb 3-1: USB disconnect, device number 8 [ 128.163230][ T24] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 128.195145][ T24] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 128.231572][ T24] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 128.271345][ T6302] batadv0: entered promiscuous mode [ 128.283770][ T24] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 128.295642][ T6302] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.306890][ T6302] batadv0: left promiscuous mode [ 128.313294][ T24] usb 5-1: USB disconnect, device number 11 [ 128.353703][ T24] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 128.380294][ T24] pl2303 5-1:0.122: device disconnected [ 128.399177][ T975] usb 2-1: USB disconnect, device number 6 [ 128.452984][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.517953][ T1209] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.617831][ T10] usb 4-1: device descriptor read/64, error -71 [ 128.692859][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 128.704382][ T1209] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.721375][ T1209] usb 3-1: config 0 has no interface number 0 [ 128.730113][ T1209] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 128.749722][ T1209] usb 3-1: config 0 interface 1 has no altsetting 0 [ 128.760842][ T1209] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 128.772049][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.783711][ T1209] usb 3-1: Product: syz [ 128.787920][ T1209] usb 3-1: Manufacturer: syz [ 128.813751][ T1209] usb 3-1: SerialNumber: syz [ 128.832819][ T1209] usb 3-1: config 0 descriptor?? [ 128.853076][ T975] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 128.862607][ T6315] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.863067][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.879451][ T6315] xt_HMARK: spi-set and port-set can't be combined [ 128.896792][ T6315] netlink: 'syz.4.96': attribute type 33 has an invalid length. [ 128.973021][ T5824] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 129.011761][ T975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 129.019744][ T10] usb 4-1: device descriptor read/64, error -71 [ 129.032335][ T975] usb 2-1: can't read configurations, error -61 [ 129.102676][ T1209] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 129.122405][ T1209] cx231xx 3-1:0.1: Failed to read PCB config [ 129.132514][ T1209] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 129.134968][ T10] usb usb4-port1: attempt power cycle [ 129.165018][ T1209] usb 3-1: USB disconnect, device number 9 [ 129.173473][ T975] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 129.194233][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.210050][ T5824] usb 1-1: not running at top speed; connect to a high speed hub [ 129.229640][ T5824] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 129.242045][ T5824] usb 1-1: config 3 has no interface number 0 [ 129.267211][ T5824] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 129.268087][ T6326] FAULT_INJECTION: forcing a failure. [ 129.268087][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 129.300389][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.2.99 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 129.300419][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.300431][ T6326] Call Trace: [ 129.300439][ T6326] [ 129.300448][ T6326] dump_stack_lvl+0x189/0x250 [ 129.300485][ T6326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.300514][ T6326] ? __pfx__printk+0x10/0x10 [ 129.300536][ T6326] ? __pfx___might_resched+0x10/0x10 [ 129.300556][ T6326] ? fs_reclaim_acquire+0x7d/0x100 [ 129.300591][ T6326] should_fail_ex+0x414/0x560 [ 129.300618][ T6326] should_failslab+0xa8/0x100 [ 129.300646][ T6326] __kmalloc_cache_noprof+0x70/0x3d0 [ 129.300678][ T6326] ? tcf_exts_init_ex+0x110/0x750 [ 129.300706][ T6326] tcf_exts_init_ex+0x110/0x750 [ 129.300739][ T6326] cls_cgroup_change+0x26f/0x540 [ 129.300771][ T6326] ? __pfx_cls_cgroup_change+0x10/0x10 [ 129.300810][ T6326] tc_new_tfilter+0xdc7/0x15b0 [ 129.300867][ T6326] ? __pfx_tc_new_tfilter+0x10/0x10 [ 129.300930][ T6326] ? __pfx_tc_new_tfilter+0x10/0x10 [ 129.300956][ T6326] rtnetlink_rcv_msg+0x7cc/0xb70 [ 129.300983][ T6326] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 129.301005][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.301033][ T6326] ? ref_tracker_free+0x63a/0x7d0 [ 129.301053][ T6326] ? __copy_skb_header+0xa7/0x550 [ 129.301092][ T6326] netlink_rcv_skb+0x219/0x490 [ 129.301116][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.301142][ T6326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.301186][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.301209][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.301238][ T6326] netlink_unicast+0x75b/0x8d0 [ 129.301272][ T6326] netlink_sendmsg+0x805/0xb30 [ 129.301306][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.301334][ T6326] ? aa_sock_msg_perm+0x94/0x160 [ 129.301358][ T6326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.301381][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.301406][ T6326] __sock_sendmsg+0x21c/0x270 [ 129.301430][ T6326] ____sys_sendmsg+0x505/0x830 [ 129.301463][ T6326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.301499][ T6326] ? import_iovec+0x74/0xa0 [ 129.301531][ T6326] ___sys_sendmsg+0x21f/0x2a0 [ 129.301561][ T6326] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.301628][ T6326] ? __fget_files+0x2a/0x420 [ 129.301660][ T6326] ? __fget_files+0x3a0/0x420 [ 129.301697][ T6326] __x64_sys_sendmsg+0x19b/0x260 [ 129.301729][ T6326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.301775][ T6326] ? do_syscall_64+0xba/0x210 [ 129.301805][ T6326] do_syscall_64+0xf6/0x210 [ 129.301832][ T6326] ? clear_bhb_loop+0x60/0xb0 [ 129.301856][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.301875][ T6326] RIP: 0033:0x7f94dc98e969 [ 129.301893][ T6326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.301909][ T6326] RSP: 002b:00007f94dd855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.301929][ T6326] RAX: ffffffffffffffda RBX: 00007f94dcbb5fa0 RCX: 00007f94dc98e969 [ 129.301943][ T6326] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 129.301955][ T6326] RBP: 00007f94dd855090 R08: 0000000000000000 R09: 0000000000000000 [ 129.301967][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.301978][ T6326] R13: 0000000000000000 R14: 00007f94dcbb5fa0 R15: 00007f94dccdfa28 [ 129.302008][ T6326] [ 129.630166][ T5824] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 129.644034][ T5824] usb 1-1: config 3 interface 106 has no altsetting 0 [ 129.665804][ T5824] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 129.675543][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.689226][ T975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 129.707994][ T975] usb 2-1: can't read configurations, error -61 [ 129.714827][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.738201][ T5824] usb 1-1: Product: syz [ 129.744278][ T975] usb usb2-port1: attempt power cycle [ 129.749901][ T5824] usb 1-1: Manufacturer: syz [ 129.757312][ T5824] usb 1-1: SerialNumber: syz [ 129.772428][ T10] usb 4-1: device descriptor read/8, error -71 [ 129.798959][ T6308] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 129.821930][ T6308] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 130.022952][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.049617][ T10] usb 4-1: device descriptor read/8, error -71 [ 130.123004][ T975] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 130.163365][ T10] usb usb4-port1: unable to enumerate USB device [ 130.175681][ T975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.184247][ T975] usb 2-1: can't read configurations, error -61 [ 130.323628][ T975] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 130.371758][ T975] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.379813][ T975] usb 2-1: can't read configurations, error -61 [ 130.394102][ T975] usb usb2-port1: unable to enumerate USB device [ 130.500966][ T5849] cgroup: fork rejected by pids controller in /syz2 [ 130.584604][ T5824] kobil_sct 1-1:3.106: KOBIL USB smart card terminal converter detected [ 130.619134][ T5824] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 130.659436][ T5824] usb 1-1: USB disconnect, device number 10 [ 130.697685][ T5824] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 130.726194][ T5824] kobil_sct 1-1:3.106: device disconnected [ 130.905058][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 130.936462][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.072251][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.166199][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.194690][ T5892] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.272278][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.391329][ T5892] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.417655][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.444891][ T5892] usb 1-1: Product: syz [ 131.463346][ T5892] usb 1-1: Manufacturer: syz [ 131.474696][ T5892] usb 1-1: SerialNumber: syz [ 131.512174][ T5892] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.577302][ T1209] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.652426][ T1109] bridge_slave_1: left allmulticast mode [ 131.700535][ T1109] bridge_slave_1: left promiscuous mode [ 131.729316][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.869737][ T1109] bridge_slave_0: left allmulticast mode [ 131.895490][ T1109] bridge_slave_0: left promiscuous mode [ 131.902363][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.990917][ T6366] xt_connbytes: Forcing CT accounting to be enabled [ 132.023947][ T6366] Cannot find set identified by id 0 to match [ 132.046867][ T5957] usb 1-1: USB disconnect, device number 11 [ 132.076527][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.085442][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.095123][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.114984][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.171293][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.282559][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.494484][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.528482][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 132.536137][ T5928] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.547557][ T5928] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 132.569840][ T5928] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 132.622918][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.639940][ T5928] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 132.653980][ T10] usb 5-1: device descriptor read/64, error -71 [ 132.679961][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.699241][ T1209] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 132.707641][ T30] audit: type=1326 audit(1748322573.736:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.729765][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.737535][ T30] audit: type=1326 audit(1748322573.736:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.764673][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.772624][ T5928] usb 2-1: config 0 descriptor?? [ 132.798044][ T1209] ath9k_htc: Failed to initialize the device [ 132.810096][ T30] audit: type=1326 audit(1748322573.736:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.840661][ T30] audit: type=1326 audit(1748322573.736:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.841435][ T5957] usb 1-1: ath9k_htc: USB layer deinitialized [ 132.862635][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.883042][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892387][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.907144][ T30] audit: type=1326 audit(1748322573.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.932750][ T30] audit: type=1326 audit(1748322573.746:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.932910][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.968877][ T30] audit: type=1326 audit(1748322573.746:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12318e969 code=0x7ffc0000 [ 132.995957][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 133.010993][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.025626][ T30] audit: type=1326 audit(1748322573.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb12318d1d7 code=0x7ffc0000 [ 133.042889][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.054411][ T30] audit: type=1326 audit(1748322573.746:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb12319010a code=0x7ffc0000 [ 133.091063][ T30] audit: type=1326 audit(1748322573.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12318d2d0 code=0x7ffc0000 [ 133.119099][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.130249][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.184670][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.201512][ T24] usb 4-1: invalid MIDI out EP 0 [ 133.218999][ T5928] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 133.231335][ T10] usb 5-1: device descriptor read/64, error -71 [ 133.280290][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.325525][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.340850][ T1109] bond0 (unregistering): Released all slaves [ 133.343537][ T5957] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.347823][ T10] usb usb5-port1: attempt power cycle [ 133.361953][ T6377] delete_channel: no stack [ 133.468730][ T5928] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -71 [ 133.524512][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.526375][ T5928] usb 2-1: USB disconnect, device number 11 [ 133.565952][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 133.578902][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 133.665394][ T5957] usb 1-1: config 22 has too many interfaces: 115, using maximum allowed: 32 [ 133.722402][ T5957] usb 1-1: config 22 has an invalid descriptor of length 0, skipping remainder of the config [ 133.733226][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 133.770447][ T24] usb 4-1: USB disconnect, device number 10 [ 133.789194][ T10] usb 5-1: device descriptor read/8, error -71 [ 133.806612][ T5957] usb 1-1: config 22 has 0 interfaces, different from the descriptor's value: 115 [ 133.880168][ T5957] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 133.947617][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.993921][ T5957] usb 1-1: Product: syz [ 133.998151][ T5957] usb 1-1: Manufacturer: syz [ 134.032970][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 134.051840][ T5957] usb 1-1: SerialNumber: syz [ 134.109036][ T10] usb 5-1: device descriptor read/8, error -71 [ 134.211467][ T5844] Bluetooth: hci2: command tx timeout [ 134.331723][ T10] usb usb5-port1: unable to enumerate USB device [ 134.533738][ T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 134.742918][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 134.761418][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.936521][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 135.133031][ T47] usb 2-1: can't read configurations, error -71 [ 135.172115][ T1109] hsr_slave_0: left promiscuous mode [ 135.201153][ T1109] hsr_slave_1: left promiscuous mode [ 135.216515][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.240808][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.321916][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.350723][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.395273][ T5957] usb 1-1: USB disconnect, device number 12 [ 135.521029][ T1109] dummy0: left allmulticast mode [ 135.537702][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 135.563490][ T1109] veth1_macvtap: left promiscuous mode [ 135.587210][ T1109] veth0_macvtap: left promiscuous mode [ 135.623523][ T1109] veth1_vlan: left promiscuous mode [ 135.951798][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 136.022960][ T6411] netlink: 'syz.1.121': attribute type 9 has an invalid length. [ 136.284694][ T5844] Bluetooth: hci2: command tx timeout [ 136.499009][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 136.673323][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 136.691242][ T10] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 136.717404][ T10] usb 1-1: config 0 has no interface number 0 [ 136.735750][ T10] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 136.751690][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.770133][ T10] usb 1-1: Product: syz [ 136.775641][ T10] usb 1-1: Manufacturer: syz [ 136.780279][ T10] usb 1-1: SerialNumber: syz [ 136.799509][ T10] usb 1-1: config 0 descriptor?? [ 136.879294][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 136.981272][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 137.026742][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 137.532628][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 137.552367][ T6410] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 137.595632][ T6411] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 137.615764][ T6411] macvlan2: entered allmulticast mode [ 137.621394][ T6411] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 137.953706][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.128'. [ 137.980297][ T6439] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 138.122301][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.135431][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.174461][ T5957] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 138.341835][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.357537][ T5957] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 138.358849][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.366010][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 138.380711][ T5844] Bluetooth: hci2: command tx timeout [ 138.383298][ T6374] bridge_slave_0: entered allmulticast mode [ 138.401192][ T6374] bridge_slave_0: entered promiscuous mode [ 138.412457][ T5957] usb 5-1: config 0 has no interface number 0 [ 138.443698][ T5957] usb 5-1: config 0 interface 98 has no altsetting 0 [ 138.462286][ T5957] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 138.472445][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.485540][ T5957] usb 5-1: Product: syz [ 138.489770][ T5957] usb 5-1: Manufacturer: syz [ 138.494649][ T5957] usb 5-1: SerialNumber: syz [ 138.505314][ T5957] usb 5-1: config 0 descriptor?? [ 138.566644][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.588106][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.603606][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 138.617096][ T6374] bridge_slave_1: entered allmulticast mode [ 138.618927][ T5892] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 138.645950][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 138.650796][ T6374] bridge_slave_1: entered promiscuous mode [ 138.694179][ T5892] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.762253][ T5892] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 138.911983][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.950029][ T5892] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.984088][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.003124][ T5892] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 139.019128][ T5892] usb 4-1: Product: syz [ 139.037038][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.053818][ T5892] usb 4-1: Manufacturer: syz [ 139.056094][ T10] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40) [ 139.073569][ T5892] usb 4-1: SerialNumber: syz [ 139.095996][ T10] usb 1-1: Forcing UVC version to 1.0a [ 139.102753][ T5892] usb 4-1: config 0 descriptor?? [ 139.116642][ T10] usb 1-1: No valid video chain found. [ 139.142092][ T5892] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.158170][ T10] usb 1-1: USB disconnect, device number 13 [ 139.177934][ T5892] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.213968][ T6459] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[6459] [ 139.237743][ T6459] dns_resolver: Unsupported server list version (0) [ 139.692379][ T5824] usb 4-1: USB disconnect, device number 11 [ 139.705019][ T6374] team0: Port device team_slave_0 added [ 139.748054][ T5824] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 139.871302][ T6374] team0: Port device team_slave_1 added [ 139.934609][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 140.024387][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 140.446872][ T5844] Bluetooth: hci2: command tx timeout [ 140.523072][ T5824] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 140.543523][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.667862][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.683533][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.709629][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.736604][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 140.754076][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 140.772449][ T5824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.781116][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 140.789704][ T10] usb 1-1: config 0 has no interface number 0 [ 140.801016][ T5824] usb 4-1: config 6 has an invalid interface number: 79 but max is 0 [ 140.812884][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.846931][ T5824] usb 4-1: config 6 has no interface number 0 [ 140.853859][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.876400][ T5824] usb 4-1: config 6 interface 79 has no altsetting 0 [ 140.901347][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 140.920074][ T5824] usb 4-1: New USB device found, idVendor=05ac, idProduct=5cc9, bcdDevice=7d.e7 [ 140.931491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.939650][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.953055][ T10] usb 1-1: Product: syz [ 140.957298][ T10] usb 1-1: Manufacturer: syz [ 140.962076][ T5824] usb 4-1: Product: syz [ 140.969844][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.977969][ T10] usb 1-1: SerialNumber: syz [ 140.983287][ T5824] usb 4-1: Manufacturer: syz [ 140.994182][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.020120][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.031517][ T5824] usb 4-1: SerialNumber: syz [ 141.046164][ T10] usb 1-1: config 0 descriptor?? [ 141.084814][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 141.098257][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 141.113452][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.249518][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 141.379315][ T6374] hsr_slave_0: entered promiscuous mode [ 141.411567][ T6374] hsr_slave_1: entered promiscuous mode [ 141.480591][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 143.104091][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 143.126365][ T10] em28xx 1-1:0.132: board has no eeprom [ 143.154094][ T6478] em28xx 1-1:0.132: failed to trigger write to i2c address 0x28 (error=-5) [ 143.195565][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 143.238224][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 143.265439][ T5957] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 143.309603][ T6498] geneve2: entered promiscuous mode [ 143.449240][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 143.486433][ T10] usb 1-1: USB disconnect, device number 14 [ 143.494124][ T5824] usb 4-1: USB disconnect, device number 12 [ 143.611513][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 144.082251][ T5957] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 144.100500][ T5957] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 144.108704][ T47] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 144.123618][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 144.124517][ T47] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 144.160814][ T5957] usb 5-1: USB disconnect, device number 16 [ 144.346269][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 144.441486][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 144.479165][ T9] usb 1-1: Decoder not found [ 144.496114][ T6518] team0: Cannot enslave team device to itself [ 144.507318][ T9] em28xx 1-1:0.132: failed to create media graph [ 144.546960][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 144.617349][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 144.726453][ T10] em28xx 1-1:0.132: Closing input extension [ 144.856426][ T10] em28xx 1-1:0.132: Freeing device [ 145.369728][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 145.510997][ T6374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.533553][ T6374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.543615][ T975] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.558231][ T6374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.577021][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 145.596194][ T6374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.605114][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.629982][ T10] usb 1-1: Product: syz [ 145.703528][ T10] usb 1-1: Manufacturer: syz [ 145.710053][ T10] usb 1-1: SerialNumber: syz [ 145.722388][ T10] usb 1-1: config 0 descriptor?? [ 145.731441][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 145.768367][ T975] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 145.784921][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 145.838842][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.930234][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.947677][ T975] usb 4-1: config 0 descriptor?? [ 145.981763][ T975] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 145.989192][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.003576][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.004689][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.034405][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.041597][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.082325][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.090157][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.499879][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.516010][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.534080][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 146.553605][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.672108][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.740512][ T24] usb 5-1: config 0 has no interfaces? [ 146.777406][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 146.788161][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.883855][ T975] gspca_sonixj: reg_r err -110 [ 146.888766][ T975] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 146.916994][ T24] usb 5-1: Product: syz [ 146.928678][ T24] usb 5-1: Manufacturer: syz [ 146.990852][ T24] usb 5-1: SerialNumber: syz [ 146.996173][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.007104][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.065662][ T24] usb 5-1: config 0 descriptor?? [ 147.382170][ T6374] veth0_vlan: entered promiscuous mode [ 147.601076][ T6374] veth1_vlan: entered promiscuous mode [ 147.777437][ T6374] veth0_macvtap: entered promiscuous mode [ 147.784654][ T10] gspca_sunplus: reg_r err -110 [ 147.806943][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 147.853109][ T6374] veth1_macvtap: entered promiscuous mode [ 148.039427][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.121715][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.243961][ T6374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.303124][ T6374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.322826][ T6374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.348304][ T6374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.382344][ T24] usb 4-1: USB disconnect, device number 13 [ 149.124348][ T6566] netlink: 44 bytes leftover after parsing attributes in process `syz.3.147'. [ 149.180280][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.188821][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.238634][ T9] usb 1-1: USB disconnect, device number 15 [ 149.445323][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.501858][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.589796][ T5957] usb 5-1: USB disconnect, device number 17 [ 149.691060][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.746447][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.772347][ T6581] FAULT_INJECTION: forcing a failure. [ 149.772347][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 149.822642][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.0.150 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 149.822670][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.822683][ T6581] Call Trace: [ 149.822691][ T6581] [ 149.822700][ T6581] dump_stack_lvl+0x189/0x250 [ 149.822739][ T6581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.822772][ T6581] ? __pfx__printk+0x10/0x10 [ 149.822794][ T6581] ? __pfx___might_resched+0x10/0x10 [ 149.822814][ T6581] ? fs_reclaim_acquire+0x7d/0x100 [ 149.822849][ T6581] should_fail_ex+0x414/0x560 [ 149.822877][ T6581] should_failslab+0xa8/0x100 [ 149.822907][ T6581] kmem_cache_alloc_noprof+0x73/0x3c0 [ 149.822932][ T6581] ? radix_tree_node_alloc+0x7e/0x3a0 [ 149.822963][ T6581] radix_tree_node_alloc+0x7e/0x3a0 [ 149.822995][ T6581] idr_get_free+0x2b3/0xa70 [ 149.823054][ T6581] idr_alloc_u32+0x159/0x2d0 [ 149.823086][ T6581] ? __pfx_idr_alloc_u32+0x10/0x10 [ 149.823118][ T6581] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 149.823154][ T6581] tcf_idr_check_alloc+0x5de/0x7b0 [ 149.823185][ T6581] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 149.823217][ T6581] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 149.823257][ T6581] ? __nla_parse+0x40/0x60 [ 149.823286][ T6581] tcf_police_init+0x235/0x13c0 [ 149.823317][ T6581] ? __pfx_tcf_police_init+0x10/0x10 [ 149.823341][ T6581] ? is_bpf_text_address+0x292/0x2b0 [ 149.823369][ T6581] ? is_bpf_text_address+0x26/0x2b0 [ 149.823401][ T6581] ? kernel_text_address+0xa5/0xe0 [ 149.823439][ T6581] ? __lock_acquire+0xaac/0xd20 [ 149.823475][ T6581] ? tc_action_load_ops+0x18a/0x4e0 [ 149.823499][ T6581] tcf_action_init_1+0x2a5/0x6d0 [ 149.823528][ T6581] ? __pfx_tcf_action_init_1+0x10/0x10 [ 149.823548][ T6581] ? _raw_read_unlock+0x28/0x50 [ 149.823570][ T6581] ? tc_action_load_ops+0x214/0x4e0 [ 149.823587][ T6581] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 149.823612][ T6581] ? tcf_exts_init_ex+0x110/0x750 [ 149.823665][ T6581] tcf_exts_validate_ex+0x2dd/0x530 [ 149.823700][ T6581] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 149.823738][ T6581] ? __kasan_kmalloc+0x93/0xb0 [ 149.823764][ T6581] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 149.823790][ T6581] ? tcf_exts_init_ex+0x110/0x750 [ 149.823823][ T6581] tcf_exts_validate+0x42/0x60 [ 149.823853][ T6581] cls_cgroup_change+0x395/0x540 [ 149.823886][ T6581] ? __pfx_cls_cgroup_change+0x10/0x10 [ 149.823927][ T6581] tc_new_tfilter+0xdc7/0x15b0 [ 149.823987][ T6581] ? __pfx_tc_new_tfilter+0x10/0x10 [ 149.824054][ T6581] ? __pfx_tc_new_tfilter+0x10/0x10 [ 149.824081][ T6581] rtnetlink_rcv_msg+0x7cc/0xb70 [ 149.824110][ T6581] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 149.824134][ T6581] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.824162][ T6581] ? ref_tracker_free+0x63a/0x7d0 [ 149.824184][ T6581] ? __copy_skb_header+0xa7/0x550 [ 149.824230][ T6581] netlink_rcv_skb+0x219/0x490 [ 149.824257][ T6581] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.824284][ T6581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.824330][ T6581] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.824355][ T6581] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.824386][ T6581] netlink_unicast+0x75b/0x8d0 [ 149.824420][ T6581] netlink_sendmsg+0x805/0xb30 [ 149.824456][ T6581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.824486][ T6581] ? aa_sock_msg_perm+0x94/0x160 [ 149.824512][ T6581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.824535][ T6581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.824561][ T6581] __sock_sendmsg+0x21c/0x270 [ 149.824586][ T6581] ____sys_sendmsg+0x505/0x830 [ 149.824622][ T6581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.824661][ T6581] ? import_iovec+0x74/0xa0 [ 149.824694][ T6581] ___sys_sendmsg+0x21f/0x2a0 [ 149.824726][ T6581] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.824794][ T6581] ? __fget_files+0x2a/0x420 [ 149.824820][ T6581] ? __fget_files+0x3a0/0x420 [ 149.824859][ T6581] __x64_sys_sendmsg+0x19b/0x260 [ 149.824891][ T6581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.824939][ T6581] ? do_syscall_64+0xba/0x210 [ 149.824970][ T6581] do_syscall_64+0xf6/0x210 [ 149.824999][ T6581] ? clear_bhb_loop+0x60/0xb0 [ 149.825025][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.825044][ T6581] RIP: 0033:0x7fb12318e969 [ 149.825062][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.825079][ T6581] RSP: 002b:00007fb123f80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.825100][ T6581] RAX: ffffffffffffffda RBX: 00007fb1233b5fa0 RCX: 00007fb12318e969 [ 149.825114][ T6581] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 149.825127][ T6581] RBP: 00007fb123f80090 R08: 0000000000000000 R09: 0000000000000000 [ 149.825139][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.825151][ T6581] R13: 0000000000000000 R14: 00007fb1233b5fa0 R15: 00007fb1234dfa28 [ 149.825183][ T6581] [ 150.593017][ T5957] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 150.885789][ T5957] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 150.943074][ T5957] usb 5-1: config 0 has no interface number 0 [ 151.008822][ T5957] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 151.442424][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.452901][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.479991][ T5957] usb 5-1: Product: syz [ 151.520445][ T5957] usb 5-1: Manufacturer: syz [ 151.603011][ T10] usb 2-1: device descriptor read/64, error -71 [ 151.603203][ T5957] usb 5-1: SerialNumber: syz [ 151.894998][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 151.903096][ T975] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.068466][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 152.073900][ T10] usb 2-1: device descriptor read/64, error -71 [ 152.097585][ T975] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.112942][ T975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.143929][ T975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.166612][ T975] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.182651][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.199651][ T10] usb usb2-port1: attempt power cycle [ 152.300440][ T975] usb 1-1: Product: syz [ 152.309496][ T975] usb 1-1: Manufacturer: syz [ 152.325062][ T975] usb 1-1: SerialNumber: syz [ 152.642966][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 152.662706][ T5957] usb 5-1: config 0 descriptor?? [ 152.682118][ T10] usb 2-1: device descriptor read/8, error -71 [ 152.803457][ T5824] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.938902][ T975] usb 1-1: 0:2 : does not exist [ 152.944948][ T5824] usb 3-1: device descriptor read/64, error -71 [ 152.952172][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 153.018985][ T10] usb 2-1: device descriptor read/8, error -71 [ 153.025363][ T5957] xr_serial 5-1:0.46: More than one union descriptor, skipping ... [ 153.139931][ T6611] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 153.147402][ T10] usb usb2-port1: unable to enumerate USB device [ 153.156994][ T6611] PKCS7: Only support pkcs7_signedData type [ 153.192923][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.363142][ T5824] usb 3-1: device descriptor read/64, error -71 [ 153.451113][ T5957] usb 5-1: USB disconnect, device number 18 [ 153.479207][ T5824] usb usb3-port1: attempt power cycle [ 153.857667][ T5824] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.056771][ T975] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 154.072728][ T5824] usb 3-1: device descriptor read/8, error -71 [ 154.134131][ T975] usb 1-1: USB disconnect, device number 16 [ 154.355335][ T5824] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 154.413250][ T5824] usb 3-1: device descriptor read/8, error -71 [ 154.540887][ T5824] usb usb3-port1: unable to enumerate USB device [ 154.554687][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.676720][ T6653] No such timeout policy "syz0" [ 154.944496][ T5957] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 155.122964][ T5957] usb 5-1: device descriptor read/64, error -71 [ 155.640084][ T5893] IPVS: starting estimator thread 0... [ 155.713118][ T5824] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.755875][ T6670] IPVS: using max 28 ests per chain, 67200 per kthread [ 155.763238][ T5962] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 155.770997][ T5957] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.872870][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 155.889072][ T5824] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.914832][ T5824] usb 3-1: config 0 has no interface number 0 [ 155.922899][ T5957] usb 5-1: device descriptor read/64, error -71 [ 155.931574][ T5962] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 155.950815][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.965390][ T5824] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.974818][ T975] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 155.987618][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.996044][ T5962] usb 1-1: config 0 descriptor?? [ 156.018046][ T5824] usb 3-1: Product: syz [ 156.027933][ T5824] usb 3-1: Manufacturer: syz [ 156.045101][ T5962] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 156.052439][ T5824] usb 3-1: SerialNumber: syz [ 156.061865][ T5957] usb usb5-port1: attempt power cycle [ 156.095105][ T5824] usb 3-1: config 0 descriptor?? [ 156.123631][ T5824] smsc95xx v2.0.0 [ 156.152970][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 156.185375][ T975] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 156.211949][ T975] usb 2-1: config 0 has no interface number 0 [ 156.228826][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 156.228845][ T30] audit: type=1326 audit(1748322597.266:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.0.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12318e969 code=0x7fc00000 [ 156.232970][ T5962] gp8psk: usb in 128 operation failed. [ 156.255789][ T975] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 156.352316][ T975] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.355060][ T5962] gp8psk: usb in 137 operation failed. [ 156.368067][ T5824] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 156.392097][ T975] usb 2-1: config 0 interface 41 has no altsetting 0 [ 156.410767][ T5824] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.452999][ T5962] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 156.456971][ T5824] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 156.475109][ T975] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.489498][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.501690][ T975] usb 2-1: Product: syz [ 156.512405][ T5824] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 156.513390][ T5962] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 156.530678][ T975] usb 2-1: Manufacturer: syz [ 156.530701][ T975] usb 2-1: SerialNumber: syz [ 156.544228][ T975] usb 2-1: config 0 descriptor?? [ 156.577896][ T5824] usb 3-1: USB disconnect, device number 14 [ 156.578320][ T6672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.599691][ T6672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.695790][ T5962] usb 1-1: USB disconnect, device number 17 [ 156.822226][ T6672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.840119][ T6672] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.923076][ T5824] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.957469][ T6712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.964802][ T6712] IPv6: NLM_F_CREATE should be set when creating new route [ 156.972065][ T6712] IPv6: NLM_F_CREATE should be set when creating new route [ 156.979354][ T6712] IPv6: NLM_F_CREATE should be set when creating new route [ 156.997104][ T6712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.105592][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.122922][ T5824] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.162194][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'. [ 157.208698][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.254781][ T5824] usb 3-1: config 0 descriptor?? [ 157.278767][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 157.663372][ T5957] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 157.690041][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.698777][ T5824] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.712331][ T5824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.890310][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.902269][ T6722] gretap0: entered promiscuous mode [ 157.930072][ T6722] gretap0: left promiscuous mode [ 157.935900][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.968101][ T5957] usb 5-1: config 0 has no interfaces? [ 157.980894][ T5957] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.990203][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.998441][ T5957] usb 5-1: Product: syz [ 158.007339][ T5957] usb 5-1: Manufacturer: syz [ 158.020603][ T5957] usb 5-1: SerialNumber: syz [ 158.070471][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 158.128143][ T6726] tap0: tun_chr_ioctl cmd 1074812118 [ 158.134278][ T5957] usb 5-1: config 0 descriptor?? [ 158.324285][ T5824] pwc: recv_control_msg error -71 req 04 val 1000 [ 158.356184][ T5824] pwc: recv_control_msg error -71 req 04 val 1300 [ 158.365576][ T5824] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.412549][ T975] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 158.450635][ T5824] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.468974][ T975] usb 2-1: USB disconnect, device number 18 [ 158.484072][ T5824] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.493010][ T5957] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 158.495150][ T5824] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.538218][ T5824] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.555747][ T5824] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.583240][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.600420][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.617766][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.635528][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.654986][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 158.664211][ T5957] usb 4-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 158.682382][ T5957] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.692224][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.719305][ T5957] usb 4-1: config 1 has no interface number 1 [ 158.725944][ T5824] pwc: Registered as video103. [ 158.747986][ T5957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.768261][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.773008][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 158.799531][ T5957] usb 4-1: Product: syz [ 158.819889][ T5957] usb 4-1: Manufacturer: syz [ 158.860799][ T5957] usb 4-1: SerialNumber: syz [ 158.881873][ T5824] usb 3-1: USB disconnect, device number 15 [ 159.197523][ T5957] usb 4-1: USB disconnect, device number 14 [ 159.270991][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.435308][ T5894] usb 5-1: USB disconnect, device number 22 [ 159.486902][ T5824] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 159.537904][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 159.575827][ T6743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.583342][ T6743] IPv6: NLM_F_CREATE should be set when creating new route [ 159.590614][ T6743] IPv6: NLM_F_CREATE should be set when creating new route [ 159.597930][ T6743] IPv6: NLM_F_CREATE should be set when creating new route [ 159.633467][ T6743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.652975][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 159.668697][ T5824] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 159.691696][ T5824] usb 3-1: config 0 has no interface number 0 [ 159.705179][ T5824] usb 3-1: config 0 interface 119 has no altsetting 0 [ 159.750130][ T5824] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 159.780200][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.818018][ T5824] usb 3-1: Product: syz [ 159.822260][ T5824] usb 3-1: Manufacturer: syz [ 159.864900][ T5824] usb 3-1: SerialNumber: syz [ 159.898305][ T5824] usb 3-1: config 0 descriptor?? [ 160.125595][ T6763] capability: warning: `syz.3.182' uses deprecated v2 capabilities in a way that may be insecure [ 160.163103][ T5957] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 160.185200][ T5824] usb 3-1: USB disconnect, device number 16 [ 160.307857][ T5957] usb 2-1: device descriptor read/64, error -71 [ 160.552951][ T5957] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 160.603008][ T5893] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 160.702934][ T5957] usb 2-1: device descriptor read/64, error -71 [ 160.777902][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 160.802975][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.816419][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.833221][ T5957] usb usb2-port1: attempt power cycle [ 160.845112][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.868267][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 160.877289][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 160.887827][ T6787] tc_dump_action: action bad kind [ 160.940345][ T5893] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.969997][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.978149][ T5893] usb 5-1: Product: syz [ 160.982357][ T5893] usb 5-1: Manufacturer: syz [ 160.987386][ T5893] usb 5-1: SerialNumber: syz [ 160.992947][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 161.003533][ T5893] usb 5-1: config 0 descriptor?? [ 161.026955][ T5893] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.046179][ T24] usb 4-1: config 64 has an invalid interface number: 162 but max is 0 [ 161.054664][ T5893] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 161.092545][ T24] usb 4-1: config 64 has no interface number 0 [ 161.102382][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6a05, bcdDevice=58.fc [ 161.123634][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.132246][ T24] usb 4-1: Product: syz [ 161.149843][ T24] usb 4-1: Manufacturer: syz [ 161.158219][ T24] usb 4-1: SerialNumber: syz [ 161.203047][ T5957] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 161.223720][ T5957] usb 2-1: device descriptor read/8, error -71 [ 161.490752][ T5957] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 161.533772][ T5957] usb 2-1: device descriptor read/8, error -71 [ 161.553013][ T24] usb 4-1: USB disconnect, device number 15 [ 161.617575][ T5893] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 161.634089][ T5893] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 161.673240][ T5957] usb usb2-port1: unable to enumerate USB device [ 161.783771][ T6805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.791055][ T6805] IPv6: NLM_F_CREATE should be set when creating new route [ 161.798441][ T6805] IPv6: NLM_F_CREATE should be set when creating new route [ 161.805740][ T6805] IPv6: NLM_F_CREATE should be set when creating new route [ 161.843917][ T6805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.859940][ T5893] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 161.887320][ T5893] em28xx 5-1:0.0: No AC97 audio processor [ 161.934540][ T5893] usb 5-1: USB disconnect, device number 23 [ 161.978575][ T5893] em28xx 5-1:0.0: Disconnecting em28xx [ 161.996997][ T5893] em28xx 5-1:0.0: Freeing device [ 162.593151][ T5893] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 162.752018][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.774182][ T5893] usb 3-1: not running at top speed; connect to a high speed hub [ 162.794621][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.807743][ T5893] usb 3-1: config 116 has an invalid interface number: 102 but max is 3 [ 162.821192][ T5893] usb 3-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 162.831743][ T6838] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.844382][ T6838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.864631][ T5893] usb 3-1: config 116 has 1 interface, different from the descriptor's value: 4 [ 162.882687][ T5893] usb 3-1: config 116 has no interface number 0 [ 162.892580][ T5893] usb 3-1: config 116 interface 102 altsetting 4 endpoint 0x3 has invalid maxpacket 2377, setting to 64 [ 162.906719][ T5893] usb 3-1: config 116 interface 102 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 162.920399][ T5893] usb 3-1: config 116 interface 102 has no altsetting 0 [ 162.939108][ T5893] usb 3-1: New USB device found, idVendor=048d, idProduct=9006, bcdDevice=1f.09 [ 162.948508][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.959515][ T5893] usb 3-1: Product: 㣗祕嬟栰斒 [ 162.965628][ T5893] usb 3-1: Manufacturer: γ븒섿⼀ꈾ⳶㮡뀛렎岔촔摱寞㟔韢ꏱ扉塥螬ོ㦲酟亀䱜忬蘙㯩ᬥ [ 162.993224][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 163.011423][ T5893] usb 3-1: SerialNumber: 缈鮎רּ凗॒㘼胬굱숙뽮↍䠅⹧讳ꦬ紤午ᱍ斂囨꣱⚔㆓겊₏䍏༘캏凮邥墲껣鷍辇⛜⑻ᑢ鯂߻穸鮒騾䍵௟ [ 163.155346][ T10] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 163.166967][ T10] usb 1-1: config 0 has no interface number 0 [ 163.190787][ T10] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.256969][ T10] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 163.259624][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.276147][ T10] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 163.302615][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.319460][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.346756][ T6850] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 163.360511][ T10] usb 1-1: config 0 descriptor?? [ 163.388077][ T5893] usb 3-1: USB disconnect, device number 17 [ 163.403828][ T6837] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 163.445568][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input9 [ 163.524376][ T5957] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 163.614436][ T5893] usb 1-1: USB disconnect, device number 18 [ 163.623001][ T5894] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 163.688440][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.702531][ T5957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.722866][ T5957] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.744618][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.785655][ T5957] usb 5-1: SerialNumber: syz [ 163.806205][ T5894] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.838666][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.853660][ T5894] usb 2-1: Product: syz [ 163.857927][ T5894] usb 2-1: Manufacturer: syz [ 163.862594][ T5894] usb 2-1: SerialNumber: syz [ 163.879145][ T5894] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.918871][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.036396][ T5957] usb 5-1: 0:2 : does not exist [ 164.244931][ T5957] usb 5-1: USB disconnect, device number 24 [ 164.451965][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.543315][ T5893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 164.573383][ T5962] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 164.744059][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 164.773609][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 164.785080][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.797126][ T5962] usb 3-1: config 0 has no interfaces? [ 164.831538][ T5893] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 164.841735][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.878995][ T10] usb 2-1: USB disconnect, device number 23 [ 164.888750][ T5893] usb 4-1: Product: syz [ 164.905279][ T5893] usb 4-1: Manufacturer: syz [ 164.912357][ T5893] usb 4-1: SerialNumber: syz [ 164.932295][ T5893] usb 4-1: config 0 descriptor?? [ 164.981808][ T5893] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 164.990508][ T5962] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 164.995514][ T5893] cyphidcom ttyUSB0: required endpoint is missing [ 165.147346][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 165.174437][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.210440][ T6857] x_tables: ip_tables: udp match: only valid for protocol 17 [ 165.218977][ T24] ath9k_htc: Failed to initialize the device [ 165.225233][ T5962] usb 3-1: Product: syz [ 165.231377][ T5962] usb 3-1: Manufacturer: syz [ 165.237266][ T5962] usb 3-1: SerialNumber: syz [ 165.253552][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 165.303908][ T5962] usb 3-1: config 0 descriptor?? [ 167.290522][ T24] usb 3-1: USB disconnect, device number 18 [ 167.670470][ T24] usb 4-1: USB disconnect, device number 16 [ 167.694907][ T24] cypress_m8 4-1:0.0: device disconnected [ 167.852937][ T30] audit: type=1326 audit(1748322608.886:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x0 [ 168.203064][ T5893] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 168.208982][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.320746][ T6903] syz.0.221: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.362298][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.0.221 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 168.362326][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.362339][ T6903] Call Trace: [ 168.362347][ T6903] [ 168.362356][ T6903] dump_stack_lvl+0x189/0x250 [ 168.362393][ T6903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.362422][ T6903] ? __pfx__printk+0x10/0x10 [ 168.362442][ T6903] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.362463][ T6903] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.362486][ T6903] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 168.362510][ T6903] warn_alloc+0x214/0x310 [ 168.362547][ T6903] ? __pfx_warn_alloc+0x10/0x10 [ 168.362584][ T6903] ? __get_vm_area_node+0x28f/0x300 [ 168.362629][ T6903] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 168.362660][ T6903] ? __asan_memset+0x22/0x50 [ 168.362701][ T6903] ? __mutex_lock+0x330/0xe80 [ 168.362730][ T6903] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.362761][ T6903] ? __kasan_kmalloc_large+0x1a/0xa0 [ 168.362788][ T6903] ? rcu_is_watching+0x15/0xb0 [ 168.362808][ T6903] ? __v4l2_ctrl_modify_dimensions+0x443/0xb90 [ 168.362838][ T6903] ? __v4l2_ctrl_modify_dimensions+0x443/0xb90 [ 168.362866][ T6903] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 168.362895][ T6903] ? __v4l2_ctrl_modify_dimensions+0x443/0xb90 [ 168.362933][ T6903] __v4l2_ctrl_modify_dimensions+0x443/0xb90 [ 168.362967][ T6903] ? tpg_update_mv_step+0x2b1/0x520 [ 168.362994][ T6903] vivid_update_format_cap+0x134e/0x20e0 [ 168.363038][ T6903] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 168.363067][ T6903] ? vivid_get_format+0x2ad/0x2e0 [ 168.363098][ T6903] vivid_s_fmt_vid_cap+0x278b/0x57b0 [ 168.363126][ T6903] ? __lock_acquire+0xaac/0xd20 [ 168.363162][ T6903] ? __mutex_trylock_common+0x153/0x260 [ 168.363191][ T6903] ? __asan_memset+0x22/0x50 [ 168.363217][ T6903] fmt_sp2mp_func+0xcc/0x400 [ 168.363242][ T6903] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 168.363270][ T6903] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 168.363324][ T6903] ? v4l_sanitize_format+0x5d6/0x9f0 [ 168.363352][ T6903] ? video_devdata+0x6b/0xd0 [ 168.363395][ T6903] ? vidioc_s_fmt_vid_cap+0x8c/0xc0 [ 168.363428][ T6903] v4l_s_fmt+0x641/0xbf0 [ 168.363465][ T6903] __video_do_ioctl+0xc98/0xdb0 [ 168.363506][ T6903] ? __pfx___video_do_ioctl+0x10/0x10 [ 168.363552][ T6903] video_usercopy+0x86e/0x14f0 [ 168.363595][ T6903] ? __pfx___video_do_ioctl+0x10/0x10 [ 168.363632][ T6903] ? __pfx_video_usercopy+0x10/0x10 [ 168.363689][ T6903] v4l2_ioctl+0x18d/0x1e0 [ 168.363719][ T6903] ? __pfx_v4l2_ioctl+0x10/0x10 [ 168.363747][ T6903] __se_sys_ioctl+0xf9/0x170 [ 168.363773][ T6903] do_syscall_64+0xf6/0x210 [ 168.363802][ T6903] ? clear_bhb_loop+0x60/0xb0 [ 168.363827][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.363846][ T6903] RIP: 0033:0x7fb12318e969 [ 168.363864][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.363880][ T6903] RSP: 002b:00007fb123f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.363900][ T6903] RAX: ffffffffffffffda RBX: 00007fb1233b5fa0 RCX: 00007fb12318e969 [ 168.363914][ T6903] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 168.363928][ T6903] RBP: 00007fb123210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 168.363940][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.363952][ T6903] R13: 0000000000000000 R14: 00007fb1233b5fa0 R15: 00007fb1234dfa28 [ 168.363984][ T6903] [ 168.382897][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 168.387351][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 168.400227][ T6909] loop7: detected capacity change from 0 to 7 [ 168.428468][ T5893] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 168.442334][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.450284][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.474307][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 168.484316][ T6909] Dev loop7: unable to read RDB block 7 [ 168.553364][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.559159][ T6911] input: syz1 as /devices/virtual/input/input10 [ 168.572892][ T24] usb 4-1: config 0 descriptor?? [ 168.582443][ T6903] Mem-Info: [ 168.587701][ T6909] loop7: unable to read partition table [ 168.593244][ T6903] active_anon:22169 inactive_anon:0 isolated_anon:0 [ 168.593244][ T6903] active_file:13087 inactive_file:39895 isolated_file:0 [ 168.593244][ T6903] unevictable:768 dirty:129 writeback:0 [ 168.593244][ T6903] slab_reclaimable:10057 slab_unreclaimable:100153 [ 168.593244][ T6903] mapped:30244 shmem:17722 pagetables:921 [ 168.593244][ T6903] sec_pagetables:0 bounce:0 [ 168.593244][ T6903] kernel_misc_reclaimable:0 [ 168.593244][ T6903] free:1310571 free_pcp:57 free_cma:0 [ 168.610975][ T6909] loop7: partition table beyond EOD, [ 168.618347][ T5893] usb 3-1: Product: syz [ 168.682485][ T6909] truncated [ 168.699469][ T6903] Node 0 active_anon:88776kB inactive_anon:0kB active_file:52348kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120976kB dirty:516kB writeback:0kB shmem:69352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11264kB pagetables:3684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.762750][ T6909] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 168.785436][ T6903] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.941188][ T5893] usb 3-1: Manufacturer: syz [ 168.945925][ T5893] usb 3-1: SerialNumber: syz [ 168.951783][ T6903] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.995183][ T6903] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 169.001039][ T6903] Node 0 DMA32 free:1307424kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:88836kB inactive_anon:0kB active_file:52348kB inactive_file:159272kB unevictable:1536kB writepending:520kB present:3129332kB managed:2564108kB mlocked:0kB bounce:0kB free_pcp:696kB local_pcp:448kB free_cma:0kB [ 169.034254][ T5893] usb 3-1: config 0 descriptor?? [ 169.045124][ T5893] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 169.053986][ T6903] lowmem_reserve[]: 0 0 0 0 0 [ 169.054045][ T6903] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.054124][ T6903] lowmem_reserve[]: 0 0 0 0 0 [ 169.054172][ T6903] Node 1 Normal free:3920156kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 169.054231][ T6903] lowmem_reserve[]: 0 0 0 0 0 [ 169.054301][ T6903] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.155344][ T6903] Node 0 DMA32: 215*4kB (UM) 483*8kB (UME) 359*16kB (UME) 194*32kB (UME) 141*64kB (UME) 36*128kB (UME) 26*256kB (UME) 14*512kB (UME) 5*1024kB (UM) 6*2048kB (UME) 304*4096kB (UM) = 1306724kB [ 169.178584][ T6903] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.191634][ T6903] Node 1 Normal: 241*4kB (UE) 65*8kB (UME) 57*16kB (UME) 226*32kB (UME) 112*64kB (UME) 37*128kB (UME) 17*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 4*2048kB (UME) 947*4096kB (M) = 3920156kB [ 169.211069][ T6903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.249541][ T6903] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.263552][ T6903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.273396][ T6903] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.283132][ T6903] 70685 total pagecache pages [ 169.288305][ T6903] 0 pages in swap cache [ 169.292556][ T6903] Free swap = 124996kB [ 169.297152][ T6903] Total swap = 124996kB [ 169.303193][ T6903] 2097051 pages RAM [ 169.308021][ T6903] 0 pages HighMem/MovableOnly [ 169.317657][ T6903] 424366 pages reserved [ 169.329966][ T6903] 0 pages cma reserved [ 169.895993][ T5893] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 169.934849][ T5893] usb 3-1: USB disconnect, device number 19 [ 169.944536][ T975] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.992272][ T6920] bridge_slave_1: left allmulticast mode [ 170.016664][ T6920] bridge_slave_1: left promiscuous mode [ 170.026355][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.060357][ T6920] bridge_slave_0: left allmulticast mode [ 170.066387][ T6920] bridge_slave_0: left promiscuous mode [ 170.079021][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.112859][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 170.121006][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.132739][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.143906][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.157788][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.236279][ T975] usb 2-1: config 0 descriptor?? [ 170.260257][ T975] hub 2-1:0.0: USB hub found [ 170.345880][ T6926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.355934][ T6930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.459241][ T975] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 170.665027][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.712724][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.873012][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 170.896451][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 170.912016][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.913576][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.958184][ T24] usb 4-1: USB disconnect, device number 17 [ 170.984677][ T975] usb 2-1: USB disconnect, device number 24 [ 171.134348][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.232'. [ 171.143879][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 171.173358][ T5957] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 171.183587][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 171.353471][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 171.421856][ T5957] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 171.430860][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.460000][ T5957] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 171.485184][ T5957] usb 1-1: config 0 has no interface number 1 [ 171.491647][ T5957] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.566017][ T5957] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 171.577339][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.592615][ T5957] usb 1-1: Product: syz [ 171.605809][ T6948] binder: BINDER_SET_CONTEXT_MGR already set [ 171.612146][ T6948] binder: 6947:6948 ioctl 4018620d 2000000000c0 returned -16 [ 171.650957][ T5957] usb 1-1: Manufacturer: syz [ 171.666703][ T5957] usb 1-1: SerialNumber: syz [ 171.678966][ T5957] usb 1-1: config 0 descriptor?? [ 171.747919][ T5957] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 171.921366][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.933713][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.946918][ T6961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.237'. [ 171.957125][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 172.006895][ T975] IPVS: starting estimator thread 0... [ 172.040451][ T6942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.081524][ T5957] pwc: Failed to set LED on/off time (-71) [ 172.092967][ T6962] IPVS: using max 37 ests per chain, 88800 per kthread [ 172.115494][ T5957] pwc: send_video_command error -71 [ 172.126568][ T5957] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 172.140137][ T5957] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 172.163245][ T5957] usb 1-1: USB disconnect, device number 19 [ 172.342975][ T975] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 172.503609][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 172.510625][ T975] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.521921][ T975] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.536109][ T975] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.552290][ T975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.559280][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 172.567121][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 172.593836][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.617320][ T975] usb 2-1: config 0 descriptor?? [ 172.733571][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 172.741720][ T10] usb 4-1: device descriptor read/64, error -71 [ 173.194974][ T5893] usb 3-1: device descriptor read/64, error -71 [ 173.548235][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 173.613243][ T5844] Bluetooth: hci1: ACL packet for unknown connection handle 80 [ 173.632705][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 173.638878][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 173.683450][ T975] usb 2-1: USB disconnect, device number 25 [ 173.693231][ T5893] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 173.700930][ T10] usb 4-1: device descriptor read/64, error -71 [ 173.733167][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 173.813324][ T10] usb usb4-port1: attempt power cycle [ 173.835430][ T5893] usb 3-1: device descriptor read/64, error -71 [ 173.907587][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 173.929085][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 173.941203][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.952820][ T24] usb 1-1: config 0 descriptor?? [ 173.954677][ T5893] usb usb3-port1: attempt power cycle [ 174.162950][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 174.193657][ T10] usb 4-1: device descriptor read/8, error -71 [ 174.217520][ T5957] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 174.322942][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 174.343572][ T5893] usb 3-1: device descriptor read/8, error -71 [ 174.415730][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.426106][ T5957] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.435119][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.443103][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 174.454468][ T5957] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 174.464935][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.473139][ T5957] usb 5-1: Product: syz [ 174.477433][ T5957] usb 5-1: Manufacturer: syz [ 174.482076][ T5957] usb 5-1: SerialNumber: syz [ 174.487120][ T10] usb 4-1: device descriptor read/8, error -71 [ 174.498651][ T5957] usb 5-1: config 0 descriptor?? [ 174.507374][ T5957] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 174.514166][ T5957] usb 5-1: No valid video chain found. [ 174.578740][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 174.585513][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.593004][ T5893] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 174.597913][ T24] usb 1-1: USB disconnect, device number 20 [ 174.614486][ T10] usb usb4-port1: unable to enumerate USB device [ 174.625307][ T5893] usb 3-1: device descriptor read/8, error -71 [ 174.733376][ T5893] usb usb3-port1: unable to enumerate USB device [ 175.403285][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 175.456903][ T6999] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.566099][ T24] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 175.591995][ T24] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 175.652424][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 175.677000][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.708803][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.719580][ T24] usb 2-1: Product:   [ 175.749348][ T24] usb 2-1: Manufacturer: ࠬ [ 175.754617][ T24] usb 2-1: SerialNumber: Ј [ 175.789797][ T6990] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 175.797590][ T6990] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 176.104709][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 176.262937][ T5893] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 176.427620][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'. [ 176.480894][ T5893] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.489609][ T5893] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 176.516391][ T5893] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.552441][ T5893] usb 1-1: config 220 has no interface number 2 [ 176.560198][ T5893] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.587239][ T5893] usb 1-1: config 220 interface 0 has no altsetting 0 [ 176.619623][ T5893] usb 1-1: config 220 interface 76 has no altsetting 0 [ 176.627966][ T5893] usb 1-1: config 220 interface 1 has no altsetting 0 [ 176.640731][ T5893] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.660913][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.670020][ T5893] usb 1-1: Product: syz [ 176.677501][ T5893] usb 1-1: Manufacturer: syz [ 176.682251][ T5893] usb 1-1: SerialNumber: syz [ 176.833397][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 176.876706][ T24] usb 2-1: USB disconnect, device number 26 [ 176.975800][ T7012] netlink: 'syz.0.252': attribute type 5 has an invalid length. [ 177.024663][ T5893] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 177.036948][ T5893] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 177.048766][ T5893] usb 1-1: No valid video chain found. [ 177.062575][ T10] usb 5-1: USB disconnect, device number 25 [ 177.262923][ T5893] usb 1-1: selecting invalid altsetting 0 [ 177.290886][ T7026] tipc: Started in network mode [ 177.297576][ T7026] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 177.306379][ T7026] tipc: Enabled bearer , priority 10 [ 177.329108][ T5893] usb 1-1: selecting invalid altsetting 0 [ 177.340331][ T5893] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 177.373174][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 177.406467][ T5893] usb 1-1: USB disconnect, device number 21 [ 177.573336][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 177.590850][ T9] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 177.613350][ T9] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 177.622457][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.715655][ T9] usb 4-1: config 0 descriptor?? [ 177.727073][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 177.781314][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 177.813911][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 178.096533][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 178.261212][ T9] usb 4-1: USB disconnect, device number 22 [ 178.318813][ T5956] tipc: Node number set to 10070698 [ 178.770945][ T7055] netlink: 277 bytes leftover after parsing attributes in process `syz.4.261'. [ 178.824197][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 178.974338][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 178.976600][ T7061] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 178.977452][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 178.986020][ T24] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 178.986054][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.986078][ T24] usb 1-1: Product: syz [ 178.986095][ T24] usb 1-1: Manufacturer: syz [ 178.986111][ T24] usb 1-1: SerialNumber: syz [ 178.989364][ T24] usb 1-1: config 0 descriptor?? [ 178.992949][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 178.992979][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 178.995512][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.283164][ T24] usb 1-1: USB disconnect, device number 22 [ 179.653109][ T5956] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 179.804650][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.827735][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.870410][ T5956] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.889399][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.921847][ T5956] usb 5-1: SerialNumber: syz [ 180.150221][ T7065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.265'. [ 180.255244][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.279025][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.316968][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 180.456171][ T5956] usb 5-1: 0:2 : does not exist [ 180.579226][ T5956] usb 5-1: USB disconnect, device number 26 [ 180.971703][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.181613][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 181.843036][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 181.952848][ T5956] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 182.043112][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 182.106654][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.114954][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.135294][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.144000][ T24] usb 3-1: Product: syz [ 182.148285][ T24] usb 3-1: Manufacturer: syz [ 182.161900][ T5956] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.182263][ T24] usb 3-1: SerialNumber: syz [ 182.206328][ T24] usb 3-1: config 0 descriptor?? [ 182.207264][ T5956] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 182.265502][ T5893] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 182.295862][ T5956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.310079][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.498187][ T5956] usb 4-1: Product: syz [ 182.502422][ T5956] usb 4-1: Manufacturer: syz [ 182.507313][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.519980][ T5956] usb 4-1: SerialNumber: syz [ 182.576609][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 182.595028][ T7100] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.622499][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.642522][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.659941][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.670239][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.684584][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.700073][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.702480][ T5893] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.738652][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.740741][ T5893] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.759367][ T5893] usb 1-1: Manufacturer: syz [ 182.828400][ T5893] usb 1-1: config 0 descriptor?? [ 182.878129][ T5956] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 183.087015][ C1] usblp0: nonzero read bulk status received: -71 [ 183.215046][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 183.237671][ T24] usb 3-1: USB disconnect, device number 24 [ 183.303508][ T5893] rc_core: IR keymap rc-hauppauge not found [ 183.333953][ T5893] Registered IR keymap rc-empty [ 183.349540][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.413769][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.446317][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 183.490496][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 183.552166][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.604840][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.679590][ T7121] binder: 7116:7121 ioctl c0306201 2000000003c0 returned -14 [ 183.737668][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.038952][ T9] usb 4-1: USB disconnect, device number 23 [ 184.062947][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.071045][ T9] usblp0: removed [ 184.094135][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.113121][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 184.114496][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.143165][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.177052][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.214038][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.243316][ T5893] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.244709][ T5962] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 184.267822][ T5893] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 184.358869][ T5893] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.382661][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 184.391190][ T5893] usb 1-1: USB disconnect, device number 23 [ 184.394020][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 184.406379][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 184.414803][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.427417][ T5962] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.443241][ T24] usb 3-1: config 0 descriptor?? [ 184.452887][ T5962] usb 5-1: config 1 has no interface number 1 [ 184.459668][ T5962] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.499227][ T5962] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.517138][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.526325][ T5962] usb 5-1: Product: syz [ 184.533036][ T5962] usb 5-1: Manufacturer: syz [ 184.538082][ T5962] usb 5-1: SerialNumber: syz [ 184.755192][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.783340][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.812863][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.821686][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.923874][ T5962] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 184.946001][ T5962] usb 5-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 184.977541][ T5962] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 185.006215][ T5962] usb 5-1: 2:1 : invalid channels 0 [ 185.074818][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 185.099671][ T24] asix 3-1:0.0: probe with driver asix failed with error -32 [ 185.146077][ T5962] usb 5-1: USB disconnect, device number 27 [ 185.255496][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.403741][ T7152] tipc: Started in network mode [ 185.433650][ T7152] tipc: Node identity ac14142f, cluster identity 4711 [ 185.442389][ T7152] tipc: New replicast peer: 0.0.0.0 [ 185.474350][ T7152] tipc: Enabled bearer , priority 10 [ 185.551081][ T7161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.560834][ T7161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.706258][ T5962] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 185.729337][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.763057][ T5957] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 185.778986][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.791676][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.848310][ T5892] usb 3-1: USB disconnect, device number 25 [ 185.872853][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 185.887998][ T5962] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 185.916811][ T5962] usb 1-1: config 0 has no interface number 0 [ 185.924470][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 185.940523][ T5957] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.951979][ T5962] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 185.967547][ T5957] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 185.978202][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 185.985915][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.996652][ T5957] usb 2-1: can't read configurations, error -71 [ 186.003459][ T5962] usb 1-1: Product: syz [ 186.011624][ T5962] usb 1-1: Manufacturer: syz [ 186.025978][ T5962] usb 1-1: SerialNumber: syz [ 186.038402][ T5962] usb 1-1: config 0 descriptor?? [ 186.046520][ T5962] smsc95xx v2.0.0 [ 186.163069][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 186.174696][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 186.184938][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.195392][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.208498][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.217947][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.228516][ T24] usb 5-1: Product: syz [ 186.232792][ T24] usb 5-1: Manufacturer: syz [ 186.237477][ T24] usb 5-1: SerialNumber: syz [ 186.477891][ T5962] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 186.488820][ T5962] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.593867][ T10] tipc: Node number set to 2886997039 [ 186.659707][ T24] usb 5-1: 0:2 : does not exist [ 186.912439][ T30] audit: type=1326 audit(1748322627.946:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 186.947956][ T30] audit: type=1326 audit(1748322627.976:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.004866][ T30] audit: type=1326 audit(1748322627.976:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.026291][ T7188] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.071647][ T30] audit: type=1326 audit(1748322627.976:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.096220][ T30] audit: type=1326 audit(1748322627.976:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.118729][ T30] audit: type=1326 audit(1748322627.976:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.159535][ T30] audit: type=1326 audit(1748322627.976:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.189403][ T30] audit: type=1326 audit(1748322627.976:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.301655][ T7167] binder: BINDER_SET_CONTEXT_MGR already set [ 187.307946][ T30] audit: type=1326 audit(1748322627.976:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.307956][ T7167] binder: 7166:7167 ioctl 4018620d 200000000040 returned -16 [ 187.330259][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 187.360930][ T30] audit: type=1326 audit(1748322627.976:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 187.389163][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 187.464216][ T10] usb 3-1: device descriptor read/64, error -71 [ 187.702900][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 187.827462][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 187.836975][ T10] usb 3-1: device descriptor read/64, error -71 [ 187.919629][ T24] usb 5-1: USB disconnect, device number 28 [ 187.955248][ T10] usb usb3-port1: attempt power cycle [ 187.969393][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.988088][ T5962] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 188.021128][ T5962] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 188.023526][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 188.041622][ T5962] usb 1-1: USB disconnect, device number 24 [ 188.043608][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 188.064684][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 188.075388][ T9] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 188.084140][ T9] usb 4-1: Product: syz [ 188.088542][ T9] usb 4-1: Manufacturer: syz [ 188.094392][ T9] usb 4-1: SerialNumber: syz [ 188.106715][ T9] usb 4-1: config 0 descriptor?? [ 188.121621][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 188.323668][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 188.353752][ T10] usb 3-1: device descriptor read/8, error -71 [ 188.395721][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.404162][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.606736][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.654029][ T10] usb 3-1: device descriptor read/8, error -71 [ 188.746152][ T9] gspca_zc3xx: reg_w_i err -71 [ 188.827801][ T10] usb usb3-port1: unable to enumerate USB device [ 189.063030][ T5893] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 189.173113][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 189.223018][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 189.239067][ T5893] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 189.263534][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.274475][ T5893] usb 1-1: config 0 has no interface number 0 [ 189.292168][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 189.305371][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.314904][ T5893] usb 1-1: Product: syz [ 189.319274][ T5893] usb 1-1: Manufacturer: syz [ 189.328012][ T5893] usb 1-1: SerialNumber: syz [ 189.344901][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 189.352256][ T10] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 189.361045][ T10] usb 5-1: config 0 has no interface number 0 [ 189.367387][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 189.374082][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 189.383062][ T10] usb 5-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 189.396445][ T5893] usb 1-1: config 0 descriptor?? [ 189.433451][ T9] usb 4-1: USB disconnect, device number 24 [ 189.441019][ T10] usb 5-1: config 0 interface 244 has no altsetting 0 [ 189.450946][ T5893] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 189.463591][ T5893] usb 1-1: No valid video chain found. [ 189.471910][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 189.481418][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.492246][ T10] usb 5-1: Product: syz [ 189.512922][ T10] usb 5-1: Manufacturer: syz [ 189.521919][ T10] usb 5-1: SerialNumber: syz [ 189.546469][ T10] usb 5-1: config 0 descriptor?? [ 189.590326][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 189.622161][ T10] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 189.644242][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.828235][ T10] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 189.843420][ T10] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 189.860938][ T10] snd_usb_toneport 5-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 189.898170][ T7231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.906334][ T7231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.076660][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.085730][ T7234] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.312'. [ 190.095676][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.103795][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 190.140736][ T5962] usb 5-1: USB disconnect, device number 29 [ 190.339262][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.314'. [ 191.043090][ T1209] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 191.208432][ T1209] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 191.222705][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.244445][ T1209] usb 5-1: Product: syz [ 191.252688][ T1209] usb 5-1: Manufacturer: syz [ 191.267764][ T1209] usb 5-1: SerialNumber: syz [ 191.286231][ T1209] usb 5-1: config 0 descriptor?? [ 191.309903][ T1209] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 191.443413][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 191.520063][ T1209] gspca_sn9c2028: read1 error -71 [ 191.542037][ T1209] gspca_sn9c2028: read1 error -71 [ 191.567297][ T1209] gspca_sn9c2028: read1 error -71 [ 191.579512][ T1209] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 191.608645][ T10] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 191.610591][ T1209] usb 5-1: USB disconnect, device number 30 [ 191.629242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.659794][ T10] usb 2-1: Product: syz [ 191.675216][ T10] usb 2-1: Manufacturer: syz [ 191.681586][ T10] usb 2-1: SerialNumber: syz [ 191.686873][ T7266] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 191.692191][ T10] usb 2-1: config 0 descriptor?? [ 191.741422][ T10] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 191.906248][ T1209] usb 2-1: USB disconnect, device number 29 [ 191.973121][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 192.147826][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.174981][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.205829][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.233191][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.316667][ T24] usb 3-1: Product: syz [ 192.328229][ T24] usb 3-1: Manufacturer: syz [ 192.338984][ T24] usb 3-1: SerialNumber: syz [ 192.486665][ T5893] usb 1-1: USB disconnect, device number 25 [ 192.573688][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 192.579326][ T7268] netlink: 308 bytes leftover after parsing attributes in process `syz.2.323'. [ 192.590588][ T7284] netlink: 308 bytes leftover after parsing attributes in process `syz.2.323'. [ 192.680661][ T24] usb 3-1: 0:2 : does not exist [ 192.816406][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 192.831205][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.845229][ T24] usb 3-1: USB disconnect, device number 30 [ 192.856424][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.063490][ T10] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 193.075457][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 193.113037][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 193.188996][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.219036][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.251390][ T10] usb 5-1: config 0 descriptor?? [ 193.256759][ T5893] usb 1-1: device descriptor read/64, error -71 [ 193.329915][ T9] usb 2-1: config 0 has no interfaces? [ 193.415077][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 193.512969][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 193.565204][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.575283][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.639153][ T9] usb 2-1: Product: syz [ 193.643653][ T9] usb 2-1: Manufacturer: syz [ 193.648464][ T9] usb 2-1: SerialNumber: syz [ 193.652890][ T24] usb 3-1: device descriptor read/64, error -71 [ 193.675216][ T9] usb 2-1: config 0 descriptor?? [ 193.762952][ T5893] usb 1-1: device descriptor read/64, error -71 [ 193.885395][ T5893] usb usb1-port1: attempt power cycle [ 194.039465][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 194.067342][ T7300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.263039][ T5893] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 194.290449][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.304448][ T5893] usb 1-1: device descriptor read/8, error -71 [ 194.337015][ T24] usb 3-1: device descriptor read/64, error -71 [ 194.458653][ T24] usb usb3-port1: attempt power cycle [ 194.542975][ T5893] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 194.614097][ T5893] usb 1-1: device descriptor read/8, error -71 [ 194.725222][ T5893] usb usb1-port1: unable to enumerate USB device [ 194.807926][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 195.036305][ T24] usb 3-1: device descriptor read/8, error -71 [ 195.299545][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 195.349841][ T24] usb 3-1: device descriptor read/8, error -71 [ 195.463407][ T24] usb usb3-port1: unable to enumerate USB device [ 195.902134][ T5893] usb 2-1: USB disconnect, device number 30 [ 196.053026][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 196.060006][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.088709][ T10] usb 5-1: USB disconnect, device number 31 [ 196.096736][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 196.096753][ T30] audit: type=1326 audit(1748322637.126:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.272611][ T30] audit: type=1326 audit(1748322637.136:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.327826][ T30] audit: type=1326 audit(1748322637.136:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.378408][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 196.427547][ T30] audit: type=1326 audit(1748322637.136:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.453030][ T30] audit: type=1326 audit(1748322637.136:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.477024][ T30] audit: type=1326 audit(1748322637.136:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.499794][ T30] audit: type=1326 audit(1748322637.136:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.522268][ T5893] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 196.527249][ T30] audit: type=1326 audit(1748322637.136:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3fa18e969 code=0x7ffc0000 [ 196.713022][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 196.745014][ T7322] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[7322] [ 196.767242][ T5893] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 196.789782][ T7322] dns_resolver: Unsupported server list version (0) [ 196.796768][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.805990][ T5893] usb 3-1: Product: syz [ 196.810275][ T5893] usb 3-1: Manufacturer: syz [ 196.815353][ T5893] usb 3-1: SerialNumber: syz [ 196.828164][ T5893] usb 3-1: config 0 descriptor?? [ 196.849165][ T5893] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 196.872892][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 196.894828][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 196.972897][ T10] usb 4-1: config 0 has no interface number 0 [ 197.003190][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.014485][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 197.064404][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 197.077150][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.117547][ T10] usb 4-1: Product: syz [ 197.134048][ T10] usb 4-1: Manufacturer: syz [ 197.138708][ T10] usb 4-1: SerialNumber: syz [ 197.155961][ T10] usb 4-1: config 0 descriptor?? [ 197.391236][ T7319] geneve2: entered promiscuous mode [ 197.405996][ T7319] netlink: 156 bytes leftover after parsing attributes in process `syz.3.337'. [ 197.432904][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 197.593389][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 197.605078][ T24] usb 5-1: config index 0 descriptor too short (expected 65316, got 36) [ 197.619125][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 197.638671][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 197.648527][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.659733][ T1209] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.699131][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.709698][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.718696][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 197.728401][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.740148][ T24] usb 5-1: config 0 descriptor?? [ 197.819366][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 197.837335][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 197.866258][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 197.888753][ T1209] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 197.902385][ T5893] gspca_sunplus: reg_r err -71 [ 197.914579][ T1209] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 198.012253][ T1209] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 198.033339][ T5962] usb 4-1: USB disconnect, device number 25 [ 198.087590][ T1209] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 198.113495][ T5962] appletouch 4-1:0.85: input: appletouch disconnected [ 198.149835][ T1209] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 198.183890][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.204709][ T24] hid (null): unknown global tag 0xc [ 198.242316][ T24] hid (null): report_id 0 is invalid [ 198.252546][ T24] hid (null): unknown global tag 0xe [ 198.269143][ T24] hid (null): unknown global tag 0xc [ 198.280662][ T24] hid (null): unknown global tag 0xd [ 198.289097][ T24] hid (null): report_id 3636381312 is invalid [ 198.300088][ T24] hid (null): unknown global tag 0xe [ 198.310331][ T24] hid (null): invalid report_size 15733 [ 198.318821][ T24] hid (null): global environment stack underflow [ 198.331050][ T24] hid (null): invalid report_size 59091 [ 198.341222][ T24] hid (null): unknown global tag 0xe [ 198.350881][ T24] hid (null): invalid report_size 659322949 [ 198.358652][ T24] hid (null): invalid report_size 40509 [ 198.368251][ T24] hid (null): report_id 49840 is invalid [ 198.481382][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 198.534170][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.551433][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.572992][ T10] usb 5-1: USB disconnect, device number 32 [ 198.982925][ T975] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 199.139727][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 199.151469][ T975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 199.161397][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.188156][ T975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.236846][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.279519][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.308712][ T975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 199.341761][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.389445][ T975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.433591][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.514508][ T5962] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 199.563921][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.609963][ T975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 199.624789][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.810762][ T975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.868404][ T5962] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 199.879217][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.881685][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.968567][ T975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.000585][ T5962] usb 5-1: config 0 has no interface number 0 [ 200.017939][ T5962] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 200.034040][ T5835] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 200.050164][ T5962] usb 5-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.075718][ T975] usb 4-1: string descriptor 0 read error: -22 [ 200.082076][ T975] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.091924][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.110460][ T975] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.216645][ T5835] usb 2-1: config 0 has no interfaces? [ 200.342974][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.360428][ T5962] usb 5-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 200.385316][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.393128][ T975] usb 1-1: USB disconnect, device number 30 [ 200.398033][ T5962] usb 5-1: Product: syz [ 200.409341][ T5957] usb 4-1: USB disconnect, device number 26 [ 200.418405][ T5962] usb 5-1: Manufacturer: syz [ 200.451351][ T5962] usb 5-1: SerialNumber: syz [ 200.485340][ T5962] usb 5-1: config 0 descriptor?? [ 200.505274][ T5962] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 200.559951][ T5835] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.589776][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.618202][ T5835] usb 2-1: Product: syz [ 200.618273][ T5962] dw2102: su3000_power_ctrl: 1, initialized 0 [ 200.622415][ T5835] usb 2-1: Manufacturer: syz [ 200.622433][ T5835] usb 2-1: SerialNumber: syz [ 200.655029][ T5835] usb 2-1: config 0 descriptor?? [ 200.669663][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 200.720856][ T5962] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 200.904317][ T5962] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 200.944650][ T5962] usb 5-1: USB disconnect, device number 33 [ 201.079673][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.090819][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.152186][ T7357] futex_wake_op: syz.2.348 tries to shift op by 32; fix this program [ 201.248044][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.272627][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.312938][ T975] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 201.662962][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 201.671281][ T975] usb 4-1: device descriptor read/all, error -61 [ 201.803036][ T975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 201.933086][ T975] usb 4-1: device descriptor read/64, error -71 [ 202.043927][ T975] usb usb4-port1: attempt power cycle [ 202.203177][ T5893] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 202.217492][ T5893] usb 3-1: USB disconnect, device number 35 [ 202.383240][ T975] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 202.404377][ T975] usb 4-1: device descriptor read/8, error -71 [ 202.650944][ T1209] usb 2-1: USB disconnect, device number 31 [ 202.668717][ T5893] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 202.691911][ T7364] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[7364] [ 202.744956][ T7364] dns_resolver: Unsupported server list version (0) [ 203.021202][ T975] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 203.189616][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 203.198449][ T975] usb 4-1: device descriptor read/8, error -71 [ 203.230387][ T5893] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 203.240281][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.249387][ T5893] usb 3-1: Product: syz [ 203.255313][ T5893] usb 3-1: Manufacturer: syz [ 203.260036][ T5893] usb 3-1: SerialNumber: syz [ 203.314568][ T975] usb usb4-port1: unable to enumerate USB device [ 203.379324][ T5893] usb 3-1: config 0 descriptor?? [ 203.643652][ T975] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 203.894458][ T5893] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 036 [ 204.131822][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 204.408785][ T975] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.416959][ T975] usb 1-1: config 0 has no interface number 0 [ 204.425096][ T7360] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 204.453556][ T975] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 204.462680][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.474606][ T975] usb 1-1: Product: syz [ 204.478829][ T975] usb 1-1: Manufacturer: syz [ 204.564220][ T975] usb 1-1: SerialNumber: syz [ 204.642293][ T47] usb 5-1: [UEAGLE-ATM] firmware is not available [ 204.663275][ T975] usb 1-1: config 0 descriptor?? [ 204.716154][ T975] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 204.929686][ T975] usb 1-1: selecting invalid altsetting 1 [ 204.980323][ T975] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 204.981894][ T7375] ------------[ cut here ]------------ [ 204.991142][ T975] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.993714][ T7375] usb 3-1: BOGUS control dir, pipe 80002480 doesn't match bRequestType c1 [ 205.004750][ T975] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 205.090168][ T975] usb 1-1: media controller created [ 205.162918][ T7360] 0: entered promiscuous mode [ 205.229560][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.273673][ T7375] WARNING: CPU: 0 PID: 7375 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1112/0x1870 [ 205.283731][ T7375] Modules linked in: [ 205.287861][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.0.352 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 205.297717][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.307929][ T7375] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 205.312860][ T1209] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 205.313604][ T7375] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 a0 87 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 df db 6e fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 205.340950][ T7375] RSP: 0018:ffffc9000b9f7870 EFLAGS: 00010246 [ 205.347077][ T7375] RAX: 4f2cdc75ccb63200 RBX: ffff888050bd3900 RCX: 0000000000080000 [ 205.355216][ T7375] RDX: ffffc9000c089000 RSI: 000000000003552b RDI: 000000000003552c [ 205.363445][ T7375] RBP: 1ffff110069147f4 R08: ffffffff8f7f3577 R09: 1ffffffff1efe6ae [ 205.371465][ T7375] R10: dffffc0000000000 R11: fffffbfff1efe6af R12: ffff8880348a3fa0 [ 205.379935][ T7375] R13: dffffc0000000000 R14: 0000000080002480 R15: ffff88802fb24ba0 [ 205.388334][ T7375] FS: 00007fb123f806c0(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 205.397464][ T7375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.404215][ T7375] CR2: 0000200000263030 CR3: 00000000313dc000 CR4: 00000000003526f0 [ 205.412229][ T7375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.420286][ T7375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.428325][ T7375] Call Trace: [ 205.431638][ T7375] [ 205.434654][ T7375] usb_start_wait_urb+0x114/0x4c0 [ 205.439735][ T7375] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 205.445368][ T7375] ? __kmalloc_noprof+0x29b/0x4f0 [ 205.450431][ T7375] usb_control_msg+0x232/0x3e0 [ 205.455376][ T7375] osif_xfer+0x21a/0x5e0 [ 205.459653][ T7375] __i2c_transfer+0x871/0x2170 [ 205.464496][ T7375] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.469744][ T7375] ? __pfx___i2c_transfer+0x10/0x10 [ 205.475074][ T7375] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 205.480939][ T7375] ? i2c_transfer+0x120/0x3a0 [ 205.486016][ T7375] i2c_transfer+0x25b/0x3a0 [ 205.490553][ T7375] ? __pfx_i2c_transfer+0x10/0x10 [ 205.495689][ T7375] ? _copy_from_user+0x94/0xb0 [ 205.500489][ T7375] i2cdev_ioctl_rdwr+0x460/0x740 [ 205.505506][ T7375] i2cdev_ioctl+0x64b/0x7f0 [ 205.510033][ T7375] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 205.515151][ T7375] ? __fget_files+0x3a0/0x420 [ 205.519937][ T7375] ? __fget_files+0x2a/0x420 [ 205.524601][ T7375] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.529566][ T7375] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 205.534688][ T7375] __se_sys_ioctl+0xf9/0x170 [ 205.539323][ T7375] do_syscall_64+0xf6/0x210 [ 205.544052][ T7375] ? clear_bhb_loop+0x60/0xb0 [ 205.548779][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.554818][ T7375] RIP: 0033:0x7fb12318e969 [ 205.559269][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.579481][ T7375] RSP: 002b:00007fb123f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.588272][ T7375] RAX: ffffffffffffffda RBX: 00007fb1233b5fa0 RCX: 00007fb12318e969 [ 205.596370][ T7375] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000006 [ 205.604407][ T7375] RBP: 00007fb123210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 205.612396][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.620449][ T7375] R13: 0000000000000000 R14: 00007fb1233b5fa0 R15: 00007fb1234dfa28 [ 205.628479][ T7375] [ 205.631507][ T7375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.638791][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.0.352 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 205.648600][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.658683][ T7375] Call Trace: [ 205.662414][ T7375] [ 205.665349][ T7375] dump_stack_lvl+0x99/0x250 [ 205.669961][ T7375] ? __asan_memcpy+0x40/0x70 [ 205.674577][ T7375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.679799][ T7375] ? __pfx__printk+0x10/0x10 [ 205.684415][ T7375] panic+0x2db/0x790 [ 205.688347][ T7375] ? __pfx_panic+0x10/0x10 [ 205.692809][ T7375] __warn+0x31b/0x4b0 [ 205.696807][ T7375] ? usb_submit_urb+0x1112/0x1870 [ 205.701851][ T7375] ? usb_submit_urb+0x1112/0x1870 [ 205.706900][ T7375] report_bug+0x2be/0x4f0 [ 205.711243][ T7375] ? usb_submit_urb+0x1112/0x1870 [ 205.716292][ T7375] ? usb_submit_urb+0x1112/0x1870 [ 205.721327][ T7375] ? usb_submit_urb+0x1114/0x1870 [ 205.726381][ T7375] handle_bug+0x84/0x160 [ 205.730638][ T7375] exc_invalid_op+0x1a/0x50 [ 205.735700][ T7375] asm_exc_invalid_op+0x1a/0x20 [ 205.740588][ T7375] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 205.746245][ T7375] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 a0 87 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 df db 6e fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 205.765868][ T7375] RSP: 0018:ffffc9000b9f7870 EFLAGS: 00010246 [ 205.771950][ T7375] RAX: 4f2cdc75ccb63200 RBX: ffff888050bd3900 RCX: 0000000000080000 [ 205.779933][ T7375] RDX: ffffc9000c089000 RSI: 000000000003552b RDI: 000000000003552c [ 205.787917][ T7375] RBP: 1ffff110069147f4 R08: ffffffff8f7f3577 R09: 1ffffffff1efe6ae [ 205.795914][ T7375] R10: dffffc0000000000 R11: fffffbfff1efe6af R12: ffff8880348a3fa0 [ 205.803946][ T7375] R13: dffffc0000000000 R14: 0000000080002480 R15: ffff88802fb24ba0 [ 205.812369][ T7375] usb_start_wait_urb+0x114/0x4c0 [ 205.817426][ T7375] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 205.822997][ T7375] ? __kmalloc_noprof+0x29b/0x4f0 [ 205.828058][ T7375] usb_control_msg+0x232/0x3e0 [ 205.832855][ T7375] osif_xfer+0x21a/0x5e0 [ 205.837143][ T7375] __i2c_transfer+0x871/0x2170 [ 205.842011][ T7375] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.847260][ T7375] ? __pfx___i2c_transfer+0x10/0x10 [ 205.852912][ T7375] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 205.858305][ T7375] ? i2c_transfer+0x120/0x3a0 [ 205.863016][ T7375] i2c_transfer+0x25b/0x3a0 [ 205.867539][ T7375] ? __pfx_i2c_transfer+0x10/0x10 [ 205.872584][ T7375] ? _copy_from_user+0x94/0xb0 [ 205.877376][ T7375] i2cdev_ioctl_rdwr+0x460/0x740 [ 205.882358][ T7375] i2cdev_ioctl+0x64b/0x7f0 [ 205.886968][ T7375] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 205.892005][ T7375] ? __fget_files+0x3a0/0x420 [ 205.896693][ T7375] ? __fget_files+0x2a/0x420 [ 205.901296][ T7375] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.906246][ T7375] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 205.911277][ T7375] __se_sys_ioctl+0xf9/0x170 [ 205.915877][ T7375] do_syscall_64+0xf6/0x210 [ 205.920395][ T7375] ? clear_bhb_loop+0x60/0xb0 [ 205.925100][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.931013][ T7375] RIP: 0033:0x7fb12318e969 [ 205.935434][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.955063][ T7375] RSP: 002b:00007fb123f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.963488][ T7375] RAX: ffffffffffffffda RBX: 00007fb1233b5fa0 RCX: 00007fb12318e969 [ 205.971472][ T7375] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000006 [ 205.979449][ T7375] RBP: 00007fb123210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 205.987432][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.995426][ T7375] R13: 0000000000000000 R14: 00007fb1233b5fa0 R15: 00007fb1234dfa28 [ 206.003415][ T7375] [ 206.006747][ T7375] Kernel Offset: disabled [ 206.011137][ T7375] Rebooting in 86400 seconds..