last executing test programs: 3m26.980231717s ago: executing program 3 (id=114): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x5, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x7, 0x15}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x0, 0x1, 0x5, 0xff, 0x2}, 0x4b, &(0x7f0000000440)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x6, 0xff00, 0x8000, [0x3f30, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "82e6635594c9c61255b4191bc0d48c4d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x6, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37811c108e813dab5d527d347d2fed7e"}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xe2698d9dc13c012b, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xb0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x15, 0x8f}}, [{{0x9, 0x5, 0x82, 0x2, 0x3f7, 0x0, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa, 0x8, 0x3, 0x8}, 0x26, &(0x7f0000000540)=ANY=[@ANYBLOB="050f26000403100b03100b10100a47c10000000f00bbe9000000000b100102000000039a000997b851422ac321344f806140036fd10cc7b2b6cbcffae7492217bf65961e263909a751a6716f19c6a4c1c57370f029646e7408f2deff4936f919"], 0x5, [{0x66, &(0x7f0000000100)=@string={0x66, 0x3, "486827dac93957439cdcfa79be487825edcf5e179ab4535e4d5fed8862477a322dd5fcb27cbac74ef104fc68408839998c34373256970fa444bc2eb34195048ccc86118858f5609069efd9cb6dd5c66b21e8066f7604c5c8cbd98cc620dd6ccbf6fece87"}}, {0x67, &(0x7f0000000180)=@string={0x67, 0x3, "90f28007451673d21af35b869199ce9c88d6387f21d5f0e08303bebc49c30fcc45e3f4d4fe86178bf55cfe82ec3ad6a67512967d3f8543a34b484733ccd47d9cc61f6f70e0805a6a9abda4049f4c11f3866fb170820f5af8aaffac38d0192289c40cecee66"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x9e, &(0x7f0000000280)=@string={0x9e, 0x3, "753e992062e1e453d935a6cb4fe9759f42102869f3002fe2fca2530362e346ce7190e601cadf72f34f1b1981ced97defc62e481f715f8915b426a71b81c6c646d543ec2fb192c89f191bc18f70a09f554ec097acfb201ee5d005b8c06f0771b7e20c2003965c635c613bb8686e280c49a9f26c12410cc69789aebfdcd2a7327330873972b14e91258f465d6db13b13cea5f68fa3b75210a352ef81ac"}}]}) 3m25.36295068s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x20}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0xffffffff00000000, {0x3, 0x0, 0x1000000001000004, 0x5, 0x203fe, 0x6, {0x86, 0xfffffffffffffffd, 0xb, 0xfe2b25c, 0x7ffffffffff, 0x6a, 0x3, 0x4, 0x0, 0xc000, 0xb, r2, 0x0, 0x8, 0xe0000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) fcntl$setlease(r4, 0x400, 0x3) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000280)) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {0x77359400}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000300)={0x7, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x9fb}) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="880100002100080026bd7000fddbdf25fc010000000000000000000000000001000000000000000000000000000000004e2300004e2000030200a0802f000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x2004c000}, 0x1) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000380)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7999], 0x0, 0x800, 0x1}}, 0x40) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x48000) 3m24.90271967s ago: executing program 3 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3, 0x733}, {r3, 0x4100}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1000, 0x0, 0x0, 0x1, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, 0x0}, 0x1000}], 0x7800, 0x0, 0x0}) 3m24.414592215s ago: executing program 3 (id=122): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4028af11, &(0x7f0000000080)) ioctl$TIOCEXCL(r0, 0x540c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = memfd_secret(0x80000) ioctl$KDSETLED(r4, 0x4b32, 0xe90d) 3m23.121380159s ago: executing program 3 (id=126): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xa1000009, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0xffffffff, 0x400000}, 0x14}, 0x1, 0x620b}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) 3m22.710004596s ago: executing program 3 (id=128): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x80000001, 0x381b1c76) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}, {0x6a6}]}) 3m21.79534018s ago: executing program 32 (id=128): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x80000001, 0x381b1c76) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}, {0x6a6}]}) 9.715788581s ago: executing program 5 (id=879): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x540b, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x22, 0x2, 0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5001fcff1000130700000000fcdbdf2520010000000000000000000000000001ac14143d000000000000000000000000000040004c210002000000005c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) pipe(&(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="32353ff2042b"}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r8, 0x0, 0x40080) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 7.615658838s ago: executing program 2 (id=894): brk(0x7a) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x40000) brk(0xc5a0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) brk(0x3) r1 = dup(r0) ioctl$TIOCSIG(r1, 0x40045436, 0x5) r2 = fsopen(&(0x7f0000000440)='zonefs\x00', 0x1) brk(0xd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000004c0)=0x1) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0x202201) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000540)={{0x0, 0x9, 0x29, 0x5}, 'syz1\x00', 0x7}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000005c0)={'vlan0\x00'}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000640)={{0xf801, 0x5, 0x8974, 0xfff}, 'syz1\x00', 0x44}) syz_genetlink_get_family_id$team(&(0x7f00000006c0), r4) bind$isdn(r4, &(0x7f0000000700)={0x22, 0x0, 0x2, 0xc5, 0x14}, 0x6) sendmsg$alg(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="768a344474092b8f8a0f37590db1cb48067b435abed5b3a05882ba81d0deebba5e9496a2f82840cda08c84e10461545d40359a103fc307ddffba50103a9ae301f1dd774a79c293bc800be8a995cad0bb12b1d0fe93552a5c6fb988d505ef10c3d3029537ebe575bef3d8806167d3163763dbe906dd40e10a5d7b6abbf0a259942b0334378864cdd535b8034292394a70380b0142cd6f0c65ff2a3b7a624a91110b9ce0f346896bacddb3177ce7", 0xad}], 0x1, &(0x7f0000000840)=[@iv={0x110, 0x117, 0x2, 0xf7, "511c28bbb65d40b2410e9edc7ecd7515227c773c170ca2ab34eb31fad17018bf38692cc9157f838ae10ebd7e8b355bd57a2a951ae7da9620f7061a2e7831557c122030963655e74648e0723a4996a797a671741af8980d7b0ff6aa6c2e74f1da087958ec4fd0879e1f9c5b813a86170832c03778eda4aa758bfd760ac509fb5a96ef67b3d2b63e3d41b8b3440cb3dcfc56d59706c1aafe977db7798179beec75697c0e6dcd10c2e308dab3d9aa61ca8e0cfddbb5a25e469572ece823d964d3dfdd686961244b56f8b7d6cf7f7dd9eff4a750cb7339272b7080a19ce22d6ee06b20b164adac76c5526cfe08d14c60fab0e8bb4adc187d46"}, @assoc={0x18, 0x117, 0x4, 0xc}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x68}, @iv={0xb0, 0x117, 0x2, 0x96, "aace24132732f400d58e0ad3bf910ccd78202f3aaec1b02159b2b317ef8682d0e27e8c387d6dcd8dda769f2091e13f16c41064a1cbf3dcfdbb7992f574a43704a8f8f246c1d5df7871e4f8d439b48a783579f47ff9428ee9f72ff559749615772fa225b3d28b10046394eac642bb5638a0d4e454f5b5203ab7ead26719a9704bb98f28d798e56fd15ba29e0f982f6bddecb5fe961f03"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x9958}], 0x1250}, 0x24044011) recvmmsg(r4, &(0x7f0000001e40)=[{{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)=""/182, 0xb6}, {&(0x7f0000001c80)=""/185, 0xb9}, {&(0x7f0000001d40)=""/24, 0x18}], 0x4, &(0x7f0000001dc0)=""/123, 0x7b}}], 0x1, 0x3, &(0x7f0000001e80)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000001ec0)) sendmsg(r4, &(0x7f0000003480)={&(0x7f0000001f00)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x1, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)="e2b7cd0737bc53420de031088f8323fa97021987fb74876eca89113d0e119fafdd8fedd9926d427e50c1c5a9facb68e1d6e5749fccab5401dd2c0bd329e343d09ccae9847c78e48f234fdded21292f91cfe3453f8b2b714f5b6a1fc113ad951f1dca686b28f0abc974773b7ed28fa206844bdfc2b49c89de972cdb9dd651517b7b6d487d367fff8c10309bd614eddf58466143da2d595d4304c7ae5824e55970952f69bbb93a59e3938d3393534ee44a7301dde1e55f9108d0e0bd6ac72ff39bc2fdbde042cbf1b5c0f6", 0xca}, {&(0x7f0000002080)="7357fb3357f2c4a24d6671b4a10458bcc611128b3eb8ca7cd4acff264fc4c628c67e9049bca47737c4441b0cad", 0x2d}, {&(0x7f00000020c0)="1118ab89e676734b6f73a972beb9310ba6a4d0705f443fe206721971b958c657c1127741e987a0af4de4ea410d50c87f669ce9f1750ab54b0df7287009b343572aa84eb7426739688f29461d39b9d8088b06124ee1366e766ef94210729b7c8ca7a666f21e039e1061e41be37122c4d19dd901329b6c383e09d4056a7d9738e30ff02cf8312139978b693d9d7772002a4661dd5346adda59fde94e", 0x9b}, {&(0x7f0000002180)="c80824d59a2264dce4db04df36e165e1665e03c094d76597d86451ef0ec0df8fd0cf2b79d8725ef8bac16b435116180736bf907d0dc95388cd1e2e7c57b059e621f34b96fdc6aa2a0deb858b1d7a375b638ad5e77f5607ae19f0bf56f361480370410afc55db6291395ab3c2f468b23bf40bb7f21649f204cd26d7618061d9bf9fe90939ea4843d82496a69fad03f80afbb58eb084d29592d61638edd9d7c139a65b7cb6dda875128e418f8736c1e011360ab4bfdbd0ae4cd7e88a6d747ae28eed475056e9ca1be86d2acab00623", 0xce}, {&(0x7f0000002280)="ffafa13d690ba5ff1297cfaea4f4ae31d6714db6901f75ffa5808724c72f2692044bf0c6126dd0ede4ec", 0x2a}, {&(0x7f00000022c0)="a84b9be36e17fea83dca29533e8d0c9e4862f0f238b5a57e68a3670f4d543ba00127f513f322de5e3fd0bfc8101a6386fc5d615f7131fe245220ad564b49da7df1b5de88100cf97b12d1be4c1dbb8c884b2ffa0fd2a3dd5f0985576748c890e4288f7f48e3457dafbfc2", 0x6a}], 0x6, &(0x7f00000023c0)=[{0x88, 0x112, 0x94f3, "99ecbc93d4261c0223fe53b51307d34699188d22770b28ed1340056c413a077b71fc17534e0850c6c2c6a13bc28b5f0fabc33714289b88616cd90cff9a4ded495286aa94e3ae98ad48226048c1472298475c33df3233149993eb21c6480f5bca749de322c07c08d3ec1227e326f1ac554df68211bbf5"}, {0x1010, 0x29, 0x2, "0c9da9f72d7b737ebcac9aa8097aa6397d0d32ab8023805426ea8165dfdfab41984c819d7f39c5ee98989ea8c38206b3c8f46937acc2c5f893ecf4557acb780fc89c1684e11e354170509d2a2f458bb739c088e752eff2e024e9ee603f28ec2bbc356c26015714371fe56dc6413bee615c467faaf5c58eee8309771de2469827b8435963c91065ab8238ffc7ce4f7305e1dc3dd2abdc5ddb93a00c1c089bd4f175156f3d7c5e2c1b39a93ecb176c48f300fd19918aa96bda9ba946f74371a450cf01b7995c2b0bc96b692fe8612b8647fd147a13461ea3a3643b39aa3bc614486fa9dc95b9f2d3fea3ccd5690a2134f170144ae61aca78bd629c96fa78b9c7c38d3acf59d2f49b18aa4d5003b33e29165094d36ad83fb27d337b876b5756518fc4ea81ac8e0e10c8a47cd34b80c84cd60b4953a4defa63c49d3ad607b46982194b98a20e2c5bf39b6ae0a38574efca1e8f4fc0deb408b0398d6117b09800336fa3c608f2909d8bd54f3be8979d0a523f6949420a6f6447066fd58aeb2ee5a3feafb0821fab1dbaa2e1a6e7d65cb3056037d3a7e0602772c51cb4362319eefdca502bb6bbc361bae5ec9f99872eda5a200f30a2f789ab583ceddc869ed59dc4af3cc98dfdb91a29b3bee126f6b705d8f89a72ec382e3882caf0c0d986a0a5a11f34b9a84f396221c6a1b7f14cb10e0cad60fdcb54a0e1dfe63fa83917a4129ca5ed886899ee6a913a8403d75985d7c87386c54ef7f45a5608f1b74cea50a0887c9dfa28b71970ecfba093c449b379ee98ebf7cab4dfa2a8a4b3c6431c5bdc92c173ef6b1321e6ce4fd6c51dfcf860becf0fcea95e03e9898a0ec41ed02049b0d7bc3947ee5927876de52809202a3f3ab07dd671891611f2b2c0d0a1c776494bea8cebe7c2443452e09e0e7d4e6e35996cf218e82ee171164e8fd6fb61a2d5c2cefd4d5788fe9568e215bade6668a5a6368ad91208abb542dfcfdbffd9af1b0516567b57a34e9de378215ba3c8d9c3fe20f6bb7383c34809acbc36fe093c4f2c913cf4d5b54893e30503ef88a7d613ab82fc718b532c963db567add4f9e8850082c3d03b47b2cdfc188f7d735183ed059ca3071af34359452de3cafa1aca2a2897753e5eab230024c171209fae15d7e88591180d6fd6bc135037d93d000fc8c15e41c88d83a6b3a04b71892f4d3d8fcd03d5bed686dd99a430ec6dbf95b6c0234b09df277c539f0134d85ec7d20e4a5f006b8fa31f2d0ca5bae96d9360767bcefe9bfe83009727d9972f941c228fc3205733df8fc5bda8f9f01a751632b7f04ee5059526148ad40c802e335b6f516cf3521dbd2b0b90afcef6442c6a77669b144afd93cca2a6378b911bb7729de3015a6f609986c60896a4534dac46d2ad7dc2add178da1fa07eebea53a40c5bbc42b06364e3d435dcbb59ffb93a13a296d3ddfcadb32d4fb5e67c2955013503d343a50fb365c7c4f30b09eaf5161c48ee479c42653105d30d6c0d030e0ac1b120a223c20961768de3a5ca15824aa74054b6f61c3f396847d1f883b5082826ee0f1c76225b0d1c2d658699dff4aaa0d460d935bb8b3d57c5f16fd32833c3c6446d7f34aa1158d61cd7a9a7f2eb2548187396c6fdfa9447bd901a08464eaeb646da6514b9f566b363a240cb8d5d73b077fe228494469ff2b0ac8bf8cfb537720e9276bf5eb3aff429fe135f1a454d037bb80143af8b64ac8533171db41e4d4d95b6a04c91216f1ce2b398e94c62bc7fe9e72fece65a475bcbfb5b764361cbfbb50747e9b5c5baa6bc90b7cc7ac04e06ae307f10adb1bc6bd3ca459d6fba98a07c473c0a68d6c0bcd805f7c54b0555dbe41ed95afc8b0a091662d6842b4598dff50cec6892fed9b4c81c1719ca390d13fd014d335fb7df17bf21c7aace050bf17d530039f38ecb8c94de0fadeb63dc220f740f9e39f29654cffa629f295d67fc23c16576d8c2a5309b1e379cb7f32dde906f9516a9e87003f91dfc6b18138bd35eef5c1c571508031d79a36b3f1f8baec60e9bc3558182ea5916428c3c168dc1ed07cb265a531c26d04951bbe43d75cc28cfb6c2c93dda2b47c9004837790d1f11c51801af3f2f84da91d9d20621b2aec311849ee890a46fb40a8c3019e07fde0fad088620c6ea0d1873f44c90b877fdb2a5562cef4beccf30909d37fbad1cbe571b24d22d6bdcc8fc82993ce19c240f06185c8708fca362620f9188e10278f2bfe67848ba9512d111ac0629d1d78c6a8d73ce9a3a0ad9f9554707016d6f4668d03fb1b098428b15f47a7ac6630818ad875131fce7a6bb1b427b5a3903ec98dff6521a1f519eb95b48db044c944079b0ea6b5ea8dc09c7793e082c3aaac1b4dfff329258200a5ffde79fe811ee63bacb2815e6795c907d50d516fd597368457abde284be1f629eb04fe0af2280e7b66121c73c86b197abe1183f1d79efa803b93aa70360d32214f702f170f3345cc22593a88c16fc4486ec14f49a2020b5d8f98828253e944e430712f4d51a8d8c90f7dc31329cccc0b99bbaa46bc401c82a868f2965b5df9e3f15cd44efb77d48b19777595fd45e921761fb149f4d5a2fe9bac6a764eea877188516fbf8ddeb9d8261daeed25fa302f0ddcc6c23498b9cd24172d45d8460f4b195890d1481c2bb75f5994f505e6254ae5fe03918ea80fca894f5c45c9ad3a76293203941a63e58c77dfdcfac16ab5ca7d0be1e5f2f922d1f6fbcd7d4f0a6b6be90955522f674b8d5b2e14c66f10f00211e1eae49b616f955381f284fd907271d112fe4c4e8bd4f8b54efcd81beb0b6b76eabb17fd880e8e3da23873e144957c746004fdbd46d1d869329cfbeac4943260e14fe5d8906bf302015efc5e32b0547a466b85fda3fac639e0824ec7ac017389d1d548011301a4d7efea7578cefe9e689e50b5f50017695535646eb2ef2bac987dfcd8d26318a67c35d905b0e138e17f1f3d5e6a66f0dddadcb4b464c7e4de7cc8fa32b12bd6a7b910fe275f2268e0f0951c1b8b401029985e7c9004ccf4cc4e22526440f2fde79cd10be227ec93e1caae17975fa86a50bafac514c6496760ac5a3b1c222a9b64b8664761867acbd2eb87cc44831071f98ace28b710ffb80af14d79d578f66bb20a5f292fdfe349b1516989975adbe2ea7dc895124367fc342608c891dc7d5552f81a709ecd35c6a12ff4aaffe1418f998ce46812f1a1e10d1054e2c8a869622fc85c5bb27deb7a8410dadfc104becc18a5836fb682174a8561dba6412d342852721818de20bdd5fc8877ecd7701f9e67c6e463a2e09239acafec902854ef80430cffa59a6bf5006b1cc794fc0c183f3affb6ceaa657539a7a2ce68df5065b480666d5f089db9bc254f9c065bdb89e4e6158c2417f42b2df29c9adbd85ba7c2c8929af4c7edfea0f62912715dec157e176f02670928010e1a018be81c7d0296f60d157103ff4dcaffc20c19c8fadbf2b18257536d6bc699d9bfb25a00ed3cdda600b813f10d104ac153921ec1f194adbb1baf542f15f52e2faf54fb083f6aa67c29ca1e6ebf7dee2576399cd2f5c1f9dd32d515320972f033ad01eaadf9142386954a51a72d6d1dda1675b7023ff3e6bd4ddd22cad37ded9c65fbcf7b2264541f9a98085d5704992ba85017e4ccf22ceda16ef024b92c294ce7339fea5f7e9dcc19ff5844f7761ebe1cb4ea5d7f26b7f975a9eb906f0027614c6cbd6d9c780b313c4ea31ced15d9b3ee1e4456835b3bfe70e8ac26b4af3d360724e4177edd3eccd5f001ace6f2b99690ed50d0d8731117fdf6f9a7a7199b497415fb43c0f4cbfa4d480817fa60f28d294eda52836dd071c2b1c9e5dbe41c37b8bc3ecae4d173bbc2708ea29fc4a79a6edbcde5410d6666047d4818ce01ec88f3b6066fb4ff8c4a9c27817c0ba9e6e8cdc6fc5aa099cb5176feded4a826ee8a7fa155bf0d8126a2437a46abbcc555ebcb79466dbe6b0dae54be0172a6d5680f17904b20089ba5f10c670cf2ae1d2f4ef5ff931a57155ec1e83faa5bc55338cf2470f1f46212452508120dbd5a7fcd49318233812bef181ab0721259f6d8833f130f8d82c6d1568055d16c597be994484c2c3db22c6890b0b4ac05253427ab4b8f945f618aabbdae1689c6ccd48a9bb5bde3fc54370d44f5b13992e24f209f69832115a5c068b62e07a391659cb774b8011902076bf03fbba10be26d9d2408a54b922e3ac847ee46df21ca679f98096bd3cf180a54d9c78937f69872cdcdc734254aa4298d03c5f900f94536176ef8059b6503f2853306eb5d0320a98d19b3e864b5e3696d479fc876e802de227316a096896a509af042b90996e7a272469f159e157a239a9c010e5668bf0e92e1a6cb9126523cb4a656c190609612e7dc3cdea3f107c284fd81789c06ae69d9b378af08c153f7c65bef87fa1d5417305ab37a4b1c302c954f65ad6502293fc704a299a4ca11cd86bd9e946d78ac3fd769860a440b97501670883b58ccf95c29dd53539b97892c53b7995f1d06ae7fe90dc782f94dde5bd2c4d95ef5198e8a685ddebc1e6d8e84dc88523bc7e3340065c428c114be76ae7f67216c0a5428cf8376d7f6b39fe8a195f4465f3f7b487f06dcce1080b7d686e793a69d8949938f6587545821762b8c9cae1bc3fffa90ec4fb2a87c1b96b8c4f7413d4423552b1b0a7f96ed374f1866d74db9527a40cddeb24ebadf6cc5545f220ebc05398849777719e10de16bfabb310102158bae818d007f6a9a71a786072c40f0f2e911ec91cccec50a95905ba85c405ef8677aeb4690b84df8505e706188fd0e22f230c900ec86367ee39189ee9792fdca5b7674c0153f13ba39ffea1a693caeab0b7a6b4a5cf6b88bf9d725ee756542706b0318cebf629c77d48d9beb3ea8ec91612ac408ffb64709152ccefa4aeaef89d107637562eb8cf1bbabf045662318a80d244cbff9fa0c64ed526093071017e6081f795cf73eb2579b1301735d43a25ce8f6382cf9a2828c048d1c1d942c8957d72c2be2a004e0e789372bebe542cc236791503da3c47ab9852d9e14c526fcde4015c2c83f1314e27f6589d0aeb584988434a86d76cbaa8e9e74dfb928e997f3fbd20b07353e5e0648858587cef70a030ec0e498ec087505ff759a0b4a332c4df609cb69bb80b739b08909c8fffc08c5e06a490dc9b758d471babf0b61cba607c9e9e33b577b9bd4846dc5147a98a154231a7507b1bbfab4e08c3caec0cffe4f0b919d432689c55c8cf199aadc06edee77196ce2722811a549388552472e30d6aeb5420453a330822545496449b088549bfa472a8a158531bbcd698702f4b78620a96414297ff4407074b287138f4b70a3017ba32a4a825dff243f653ae692cf639766212ac1258bd9d2e8fed27d8b7e6155a694308eb10f5507cbf874478e9406ab91c5f1cc959f680bcc1d7be693072278d5563f1719d87268072fd4f514b413ccb3bf3a44dc3b46750bb74ccf87113d9f51609e99868f8c74121225eacaf9fdafbd345b9474809ca84a814c77775f932114d5e9427dee88d8efd106a94e8316ae490b4c7486b5a9d609d11a1dc0df9003515a5538898d308f28f6257cbe2d02a49785771c466c5c769368efb1b2d760e8335a11eb946aecd8a9f5fb2b0f555952600daab0106203b99a0e4f4551331777c62e9a9a122413af33e0f7477ae3cb10ca5c699ddfbf21a5d7c2b3a19fc2f08bf3b11ad20bfe27966327fc55ffb673cbc02b05c6c256eb8b0f7e0e277803fa379055e761ca3aa8a8dd23d9c2075c85d4db198fcd7"}], 0x1098}, 0x20004084) syz_genetlink_get_family_id$gtp(&(0x7f00000034c0), r1) add_key$user(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x2}, &(0x7f0000003580)="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", 0x1000, 0xffffffffffffffff) ppoll(&(0x7f0000004580)=[{r2, 0x1}, {r5, 0x4049}, {0xffffffffffffffff, 0x1002}], 0x3, &(0x7f00000045c0)={0x0, 0x989680}, &(0x7f0000004600)={[0x2]}, 0x8) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004640), 0x240401) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000004680)={{0xffffffffffffffff, 0x2, 0x8, 0x2, 0x5}, 0x9, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x8, 0x6ba, 0xe8c2}) write$ppp(r1, &(0x7f0000004780)="be53045e77b660a7adc672c47376879d4cff6c9d56b2c0a086eee42bd2418a276f49cddfb71544a719f32bba4467e10067d3843d655de8b87a3133063b5caa95eabdb069cb7dc2604b9c3a882fabae64a89059a7ef8ce2b4f8b7", 0x5a) 7.430621175s ago: executing program 5 (id=895): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5141, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r4, 0x10}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, 0x0) shutdown(r5, 0x0) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0xe, 0x4, "f6992d8a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, &(0x7f0000000400)={0x24, &(0x7f0000000240)={0x20, 0x24, 0xe7, {0xe7, 0xf, "5125d13636ab1aa17825cbf106a63d91590d3ee3117b1f8d95b97f84ab2bbceee5aa0dfb85e2eee8df2f0afeb47b81e67cdc16e1fff1bd8535961bc1954e69e6d841a5d8ee92d66f77ae8e60eaf3dccd4d192a0112424ab7f001753e6880ad5068920c9d4c9891f5feccc1a9b50617a658facb61d74fb1a69c7f5bdc6af52e5730820c03fc61509f6471ed898f6378f8f765aabdb120d61517c10f7c60226fe39757ce5742edf8e684ddb5c61f1d39c74d86e97462f521577c6b91359182181c0ceac5d2ab53d9ad0d607418b2767848ecd5ee9ad3dcad6e332627f182c33ff41b00f43bc7"}}, &(0x7f0000000140)={0x0, 0x3, 0x67, @string={0x67, 0x3, "1464c097f39109e8e4a6e7498de111c08932039413b7faba1a8689be0756436fe2f6681a7e1a973fcfc9a956f17aa9b0b184c2b014da085c3e7e5a110a198888f736618f65fd725699accd3a6d78e31758e9d565733c087828b5cd3267e50d84ac4364f9ab"}}, &(0x7f00000001c0)={0x0, 0x22, 0x10, {[@main=@item_012={0x2, 0x0, 0xa, '^v'}, @global=@item_4={0x3, 0x1, 0x6, "e0f7a127"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_4={0x3, 0x1, 0xa, "a98e5577"}, @local=@item_012={0x1, 0x2, 0x5, "ea"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb0, 0x6, 0x1, {0x22, 0x6c8}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0x17, 0x82, "eb9b2c463227416701b5f8a69d160b676cf03b7179aea19f23f8f0a65ca338fbe58d218d0bbe4fab852687ec011faec56a0998b790c0c0377b2696b05e309a89f3c4925bf82ff9cbe9bf898caefcd231be59367268cf602280d1cbdc1216203eded7a21c0c7d80dc5d817f3e9849f1d12e82b1ffe96d773fe34c2f8ac040a13f4d04"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000600)={0x20, 0x1, 0x55, "7050d9122961674a61e8da9c347c9d562ca7a83b53ac2823a17f995745bd40cf72f64cfc8b522479f42707c4eaae15641d48fdafe6119e676ad26e8c5aa6863aa1790605614b103bfba9b74d7dac34e825103bf44c"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x2}}) 7.345844248s ago: executing program 2 (id=896): socket(0x10, 0x2, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) (async) r1 = syz_open_procfs(0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffea, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x6c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) (async) lseek(r1, 0x2000, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x80e03) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r7 = dup2(r6, r5) write$UHID_DESTROY(r7, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000900000000000000000000000000000000080004", @ANYRES32=r4, @ANYRESDEC=r3], 0x38}}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000008008000501c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00001771453800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000030, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYRES8=r7, @ANYRESHEX=r4, @ANYRES16=r10, @ANYRES16=0x0, @ANYBLOB="957f885540e78942f2f7714d88d24eeaec58105445328297e22651954ad9f66b286cde116af65eed83b5684dd817c6f02a516a8dd0c0791615295b1dfc7b1ebe7ae69593aa3534a02eaf10e0e1bf47c462c098ad179153db7d23548a09c7a94ec6c32290b6633635c56a6c144b9d"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x12, r11, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "2c4a2ba6", {0x3, 0x100, 0x0, 0xf9, 0x4, 0x4, 0x28}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000640)={0x80000000, &(0x7f0000000280), &(0x7f00000006c0)}) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, 0xffffffffffffffff) 7.164333057s ago: executing program 2 (id=897): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect(0x4, 0x354, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 6.471700671s ago: executing program 2 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000080000000000100000a5c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140ab08000140000000031c0008800c00014000000000000001ff0c000240000000000000ae60140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840) close(0x3) keyctl$clear(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x28}, 0x40c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000300)='k', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2008002) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 5.451935557s ago: executing program 0 (id=906): syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) (async) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) (async) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000ce050c5528c0bdd14a492c8f1c7b80177ae0560e3b9d50f28ba26c7f1b05f949bdc592be0cb7c53a052e469f421dd5cad5adca6b60c1f70747f67a9ae1d002000000d6670a124f4d6566a01861bf3337971e7548eb433bb0ae8054d031329a3c941291544583c433b491c8409af360efd4b92ac97da352c036ce33d8c415ddf5d52ba9d37fb66e21b57c45b92a54f17d4e95f0f077c90ac3bc043bb6c58bb7a1bc6f992caeb2d0d4a566327e7ba9e1", @ANYRES32=0x0, @ANYBLOB="0db202002e3a05001400030065727370616e3000000000000000000024000e000200000000000000000000800000000000000000000000000300158000000000050021001900000014000300627269646765300000000000000000001400350076657468305f746f5f7465616d000000"], 0x88}}, 0x40005) 5.415030444s ago: executing program 2 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x5a, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010102ab62584080c80e76fc350102030109024800010e0ea09f736bf25aa0948b9232090415fb0101036702052406000105240000020d240f01f8ffffff020009000006241a060000092106005a0122460d09050a02200001"], &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)=ANY=[@ANYBLOB="000001e30000"], 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b10902"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x38414262}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf7, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb0}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) close(0x3) socket$kcm(0x1e, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfd, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 4.588763269s ago: executing program 0 (id=909): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x7, 0x6486e8b0, 0x0, 0x0, 0x0, 0xfffffff7, 0xfc71, 0x4daa79b6, 0x8, 0x3, 0x453d, 0x5, 0x9, 0x0, 0x1, 0x26, {0x3f3, 0xa}, 0x4c, 0x7}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf1ff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xb}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x6}]}}]}, 0x40}}, 0x20000040) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x100100, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r6}, 0x10) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r6}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffc}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffc}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x2}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x68}}, 0x0) 4.460665188s ago: executing program 1 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x22, 0x2, 0x0, "1101b3288888d16d379d0000000000800400", 0x34324d59}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x52, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0)=0x701, 0x4) (async) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x6f69, &(0x7f0000000300)={0x0, 0x4ae8, 0x20, 0x2, 0x27f}, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_setup(0x7239, &(0x7f0000000400)={0x0, 0x5909, 0x8000, 0x2, 0x371, 0x0, r7}, &(0x7f0000000480), &(0x7f00000004c0)) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x80800, 0x1e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x3, 0x1000, 0x5, 0x5, 0xfffffe0000000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100000099ba200d05210159060102031bcc359bc67d010902120001000000000904000000dfb9af00"], 0x0) 4.363130062s ago: executing program 0 (id=911): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x80) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x641, 0x4800003e, r3, 0x0) fanotify_mark(r4, 0x1, 0x40000010, r3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x16, 0x60, 0x40, 0x586, 0x102, 0x140a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x1, 0x5f, 0xb9, 0x4d, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) 3.975690781s ago: executing program 5 (id=912): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) (rerun: 64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) (async) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @value=0x5}) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) r3 = socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x2, 0x30}, &(0x7f00000001c0)=0xc) (async) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x20, 0x5, 0x4, 0xd64, 0x4, 0x100000000, 0x2, 0x1}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) read(r6, &(0x7f0000000080)=""/186, 0xba) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000480), 0x4) 3.973983174s ago: executing program 1 (id=913): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x3cb742, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x11}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.575095359s ago: executing program 5 (id=914): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) modify_ldt$write(0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x13f, 0x4}}, 0x20) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0xa, 0x7f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45090}, 0x4) 3.27462127s ago: executing program 5 (id=915): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2e, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0xd79, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000001500)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0xb, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x2}, 0x0, 0x44}) io_uring_enter(r0, 0x64f7, 0x32aa, 0xc, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2e, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) (async) syz_io_uring_setup(0xd79, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000001500), &(0x7f0000003580)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0xb, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x2}, 0x0, 0x44}) (async) io_uring_enter(r0, 0x64f7, 0x32aa, 0xc, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) (async) syz_usb_disconnect(r3) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{0x18}, {0x18}, 0x0, 0x7}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) (async) 3.158386187s ago: executing program 1 (id=916): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x7, 0x4, 0x1}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)=0xc3a5) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180)=0x7fff, 0x4) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000000200)=@deltclass={0x14fc, 0x29, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0xb}, {0x2, 0xfff1}, {0x6, 0x7}}, [@c_cbq={{0x8}, {0x844, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x33, 0x3, 0x0, 0x9c, 0x6, 0x7f, 0x9, 0x5fe}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x7, 0xff, 0x1, 0x10001}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x2}, 0x8, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x200000, 0x81, 0xead7, 0xc11d, 0x0, 0x7, 0x8, 0x0, 0x7d97, 0x36f, 0xfff, 0x80000000, 0x1, 0x101, 0x6, 0xfa, 0x0, 0x0, 0x1, 0xb03, 0xffffffff, 0xfffffffe, 0x1, 0x101, 0x1, 0x7, 0x2, 0x7fffffff, 0xaf94, 0xe, 0xc35c, 0x5, 0x6, 0x8, 0x635b, 0x2, 0x1, 0x8eca, 0x1, 0x4, 0x4, 0x18, 0x180000, 0xb29e, 0x8, 0x2d, 0x0, 0x80000001, 0x3ede, 0x2, 0x2, 0x4, 0x8, 0xa, 0x5, 0x6, 0x3, 0x7, 0x8, 0x0, 0x5, 0x7, 0x9, 0x38e, 0x7, 0xce4, 0x5, 0x7, 0x0, 0x3, 0x2022ee49, 0xb, 0xd, 0x897f, 0x6, 0x1, 0x0, 0x3, 0x9, 0x3, 0x0, 0x4, 0x0, 0x500000, 0x4, 0x7, 0x6, 0x3, 0xffff, 0x9, 0x1, 0xfffffffe, 0x7, 0xdc20167, 0xfffffc00, 0x10000, 0x10001, 0x10000, 0xfffffffb, 0xfffffffb, 0x8, 0x7, 0x2, 0xa0e00, 0xfffff800, 0x7, 0x22d7, 0x80000001, 0x7, 0x9, 0x2, 0x7ff, 0x8, 0x8001, 0x800, 0x5, 0x0, 0xe, 0x7, 0x3, 0xcc, 0x5, 0x9, 0x3, 0x9, 0x0, 0x0, 0x4, 0x8, 0x1, 0xfffffffe, 0x0, 0x40, 0x4, 0x8, 0x4, 0x7fffffff, 0x3, 0x1d, 0x896, 0x6, 0x1, 0x1, 0x0, 0x5, 0x6, 0x4, 0x2, 0x5, 0x7fff, 0x3, 0x0, 0x7, 0x3, 0x4, 0x3, 0x8, 0x8, 0x2, 0x7, 0xa99b, 0x2, 0x7fffffff, 0x2, 0x401, 0x7, 0x4, 0x76313d50, 0x9, 0x6e89, 0xffffffff, 0xfd29, 0xc, 0x7, 0x2, 0x1, 0x7, 0x80000000, 0x5, 0x5, 0xc, 0xdb5e, 0x2, 0x4, 0x7, 0x80, 0x81, 0xa, 0x8, 0x224, 0x10001000, 0xa, 0xfffff645, 0x8, 0x4, 0x3, 0xfffffe01, 0x7, 0x4, 0x2, 0xc0e, 0x1a, 0x4, 0x5, 0x7fff, 0x4, 0xee9, 0x5, 0x8, 0x2, 0x4, 0x401, 0x6, 0x3, 0x0, 0x1, 0x613, 0x10000, 0x200, 0xe, 0xffffffff, 0x1, 0x3, 0x6, 0x7, 0x6, 0x4, 0x4, 0x5, 0x10000, 0x9, 0x5, 0xd, 0x4, 0x1, 0x9, 0x8e3, 0xb, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x4e63, 0xe, 0x4, 0x6, 0x6, 0x200, 0xffffff81, 0x401, 0xfff, 0xe566, 0x3ff, 0x4]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x9, 0x2, 0x1, 0x1000, 0x2, 0x40, 0x100000, 0x7, 0x3, 0x4, 0x401, 0x4, 0xf4, 0x8, 0x5, 0x6, 0x9, 0x80, 0x2, 0x1, 0x7, 0x4, 0x7, 0x80000000, 0x1, 0x8, 0x8, 0x5, 0xe600, 0xee59, 0xffffadc3, 0x3, 0x0, 0x9, 0xd6, 0x7f, 0x3, 0x8, 0x0, 0xce, 0x7, 0x100, 0x7, 0x0, 0x2, 0x5, 0x0, 0x5, 0x7188, 0xb, 0x0, 0x4000000, 0x0, 0x8001, 0x0, 0xc, 0x2, 0x5, 0x7, 0x10, 0x8000, 0x8000, 0x800, 0x4, 0x0, 0x9, 0x9, 0x9, 0x1, 0x3, 0x7, 0xa, 0x4, 0xb, 0x7, 0x2, 0xfffffff8, 0x0, 0x0, 0x5a98, 0xffffffff, 0xfffffffe, 0x1, 0xfffffffa, 0x0, 0x46, 0x3ff, 0x10001, 0x7, 0x10, 0x1, 0xffff, 0xdc, 0x9, 0x1ff, 0x7, 0x4, 0x1, 0x1, 0xee94, 0x9, 0x4, 0x0, 0x58cd, 0x7, 0x6, 0x5, 0x7, 0x0, 0x5, 0x95f7, 0x771, 0x3, 0x4, 0x3, 0x9, 0x8, 0x40, 0x3, 0x92a1, 0x2, 0x5, 0xa440, 0x5, 0x698d9d53, 0x10001, 0x2, 0x10, 0x0, 0x9, 0x5, 0x156, 0x4065, 0xc, 0xfffffffd, 0x3ba, 0x7, 0x200, 0x4, 0x7, 0x979b, 0x8, 0x7fff, 0x6, 0x10000, 0xc419, 0xffff, 0x5, 0x5, 0x9, 0x0, 0x6, 0x9, 0x400, 0x7, 0x5, 0xc6, 0x0, 0x0, 0x8000, 0x2, 0x8, 0x0, 0x1, 0x5, 0xff, 0x5d1, 0x8, 0x0, 0x3, 0x1, 0x6, 0x100, 0x7, 0x1000, 0x6, 0x3, 0x3a, 0x0, 0x2, 0xc, 0x8, 0x6, 0x8, 0x7, 0x2, 0x9, 0xfb7, 0x8, 0x8, 0xffff7b7a, 0x6, 0x6, 0x5c, 0x3ff, 0x0, 0x1, 0x3, 0xd545, 0x3, 0x1, 0x72, 0x7, 0x7b008ca0, 0x1, 0x9, 0x11dee8b1, 0x1, 0x401, 0x4, 0x9, 0x9, 0x1, 0xbe, 0x0, 0x4, 0x3, 0xfff, 0x952, 0x2, 0x10, 0x9, 0x658, 0x8, 0x6, 0x8, 0x1, 0x3, 0x400, 0xf, 0x0, 0x1ff, 0x6, 0x7, 0x9, 0x5, 0x9, 0x1ff, 0xd519, 0x9, 0x2, 0x2, 0x4, 0xfffffffc, 0x7fffffff, 0x6, 0x4, 0x4, 0x3, 0x6, 0xfc, 0x8, 0x7f, 0x6, 0x5]}]}}, @c_cbq={{0x8}, {0xc60, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0xffff, 0x8, 0xedbb, 0x9, 0x20, 0xcc, 0x9, 0xa, 0x8, 0x9, 0x320b, 0x2, 0x5, 0x6, 0x20, 0x1, 0x200, 0x3, 0x0, 0x7, 0x9, 0x8, 0x5c17, 0x3, 0x7fff, 0x80000001, 0xb1, 0x9, 0x3be5, 0x6b1b, 0x2, 0x9, 0x6, 0x3, 0xff88, 0xfd2, 0x1, 0xfffffff9, 0x0, 0x8, 0x1, 0x8, 0x800, 0xfffffffa, 0x400, 0xf, 0x40, 0x9, 0x6, 0x0, 0x401, 0x7, 0x4, 0x3, 0x7, 0x32a, 0x3830, 0x1, 0x100, 0x4, 0x8, 0x1ff, 0x1, 0x1f30dd6e, 0x10000, 0xed16, 0x7f, 0x7f, 0x8, 0x8, 0x1, 0x8, 0x100, 0x8dae, 0xe2, 0x28c, 0x5, 0x4, 0x6, 0x8, 0x8, 0xf, 0x2, 0xa, 0x5, 0x3, 0xb29e, 0xffff, 0x3, 0x80000000, 0x9, 0x6, 0x5, 0x2, 0x6, 0x3ff, 0x80, 0x0, 0x1000, 0x1, 0x7, 0x3, 0x4, 0x401, 0x8, 0x2, 0x81, 0x1, 0x435c, 0xfffffffe, 0xb, 0x4, 0x9, 0x6, 0x9, 0x0, 0x4, 0x5, 0x8, 0xa07, 0x0, 0x7f, 0x4, 0x101, 0x1, 0x8, 0x6, 0xffffffa6, 0x4, 0x9, 0xf, 0xd888, 0xcf3, 0xffff8000, 0x1ff, 0xf, 0x8, 0x4, 0xf6, 0x9, 0x0, 0xaa, 0x5, 0x5, 0x3, 0x10, 0x9, 0x713b, 0x80000000, 0x9, 0x10001, 0x4, 0x3, 0xe00000, 0x2, 0x41c, 0xffffa25a, 0x9, 0x8e4b, 0x2, 0x5, 0x80000001, 0x7d9, 0x9, 0x0, 0x6, 0x338, 0x3, 0x5, 0x1, 0x3, 0x6, 0x0, 0x1ae9, 0xfffffc00, 0x1, 0x80000001, 0x8, 0x80000001, 0xf8, 0x4, 0x7, 0x80000000, 0x7, 0xfffffff8, 0xcc93, 0x169, 0x47c0f5fc, 0x40, 0x0, 0x8000, 0x2, 0x2, 0x799c, 0x0, 0x5, 0x5, 0x7509, 0x200, 0xe0, 0x0, 0x9, 0x2f9, 0xfffffdd1, 0xeb9a, 0x6243, 0x0, 0x0, 0xffff, 0x9de, 0x6, 0x1, 0x4, 0x8000, 0x26b, 0xc, 0x8, 0x2, 0xffffffff, 0x3d, 0x200, 0xffff, 0x43, 0x6, 0x6, 0x1, 0x1, 0x6, 0x3, 0x200, 0x3, 0x1, 0x80000001, 0x9, 0x5, 0x8, 0x7, 0xffffffbf, 0x5, 0x8000, 0x4, 0x9, 0x1, 0x0, 0x9, 0x4, 0xc, 0x6, 0x7fff, 0x7fffffff, 0xfc, 0x2, 0x1000, 0x5, 0x80]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0xffff}, 0x0, 0xfff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4c, 0x2, 0x7, 0xb, 0x9, 0x65}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x4, 0xffffff00, 0x5, 0x8cf, 0xfffffffa, 0x9d, 0x7, 0x1, 0x8, 0xef, 0x5, 0xf, 0x9, 0xfffff001, 0xfdc, 0x401, 0x0, 0x1, 0x401, 0x200, 0x5, 0x6, 0x86, 0x4, 0xe9c, 0x7, 0x200, 0x5, 0x6, 0x1, 0x1, 0x1, 0x4e6ed4fd, 0xe228, 0x3, 0x2, 0x1, 0x6, 0x6, 0x10000, 0xb2, 0x3, 0x3ff, 0x3, 0x5, 0xa, 0xfffffff8, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x3f, 0x3, 0x95a, 0x5, 0x7fa, 0x39877e29, 0x10, 0x5, 0x7fff, 0x0, 0x200, 0x7, 0x4, 0x1000, 0x7fff, 0xc, 0x9, 0x6, 0x2, 0x401, 0x1, 0x6, 0xfffffffd, 0x7, 0x4, 0x8, 0x0, 0xfffffffc, 0x6, 0x3, 0xe5b, 0xb, 0x6, 0x1, 0x3, 0xe, 0xb, 0xa, 0x800, 0x8, 0x8c2, 0x9, 0xa, 0x1, 0x37, 0x401, 0x9, 0x3ff, 0x0, 0x93df, 0xcd, 0x40000, 0x4, 0x9, 0xf7c5, 0xffff, 0x1000, 0x8, 0x6, 0x7, 0x9, 0x0, 0x1, 0x8, 0x5, 0x2, 0xf8, 0x7ff, 0x8, 0x90000000, 0x3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x1f8, 0x6, 0x2, 0x6, 0x8, 0x200, 0x4, 0xfe, 0x6, 0xffffffff, 0x6, 0x2, 0x9, 0xfff, 0x4a, 0x8, 0x4, 0x8001, 0x7fffffff, 0x12e, 0x70, 0xfffff800, 0x0, 0x5, 0x3, 0x68c, 0x8e, 0x3, 0xfffffff3, 0xd5a, 0x8001, 0xe67a, 0xffffffff, 0x1, 0xff, 0x9, 0x6, 0x6, 0x1, 0xfffff000, 0x7, 0x4, 0xba, 0x8, 0x3, 0x9, 0xe, 0x51fdc92b, 0x0, 0x8000, 0x9, 0x10000, 0x400, 0x7, 0x0, 0xffffff00, 0x10001, 0x1, 0x8, 0x0, 0xfff, 0x1, 0x3ff, 0x7, 0xfffffffa, 0x0, 0x8, 0x10000, 0x6, 0x2, 0x5, 0x4, 0x9, 0xd, 0x8, 0x6, 0x2, 0x4, 0x2, 0x3, 0x0, 0xc0, 0x9e7, 0x7, 0x7f, 0x201f, 0x9, 0x101, 0xc713, 0x71, 0x1, 0x7, 0x40, 0xf, 0x8, 0x74d9d0ae, 0x400, 0x8000, 0x3, 0x6, 0x1, 0x864, 0x58a8, 0x6, 0xe312, 0x7, 0xc0000, 0x0, 0x2, 0x2, 0x24, 0x3, 0x9, 0xfffffffe, 0x2, 0x2, 0x8, 0x8001, 0x0, 0xfd7d, 0x45, 0x5, 0xb, 0x8, 0xfffffff8, 0xea61, 0xd0e, 0xd]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff1, 0xffff}, 0x7, 0xc0000000}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x800, 0x3, 0x1, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x800, 0x7, 0x6, 0x81, 0xdd09, 0x80000001, 0xffffff01, 0xfffffff7, 0x0, 0x8, 0x66d, 0xb0, 0x1, 0x2, 0x1, 0x7ff, 0x3, 0x3, 0x9, 0x3, 0x755, 0x0, 0x2, 0x401, 0x8, 0x1917, 0x51, 0x7, 0x2, 0x0, 0x8001, 0xc00, 0x6, 0x18, 0x4, 0x78d, 0x3, 0x7, 0xb, 0xffff, 0x2, 0x1000, 0x0, 0x5, 0x2, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x9, 0x5, 0xffffff66, 0x3ff, 0x3, 0x5, 0x7, 0x1, 0x6, 0x400, 0x1, 0x929, 0xfff, 0x7, 0x0, 0x8, 0x7, 0x8e99, 0x10, 0x198, 0x9, 0x7, 0xfffffff8, 0x6, 0x7, 0x200, 0x4, 0x7, 0x8, 0x6, 0x8, 0x0, 0x7, 0x7, 0x1, 0x10000, 0xffff, 0x8, 0x400, 0x0, 0x7, 0x6, 0x2, 0x9, 0xa20, 0x0, 0x5, 0x7, 0x1, 0x2, 0xd, 0x0, 0x25, 0x2, 0x1d50, 0x0, 0xffffffff, 0x200, 0x5, 0x3, 0x1, 0x9, 0x0, 0x7, 0x8, 0x7, 0x8, 0x3, 0xffff1815, 0x101, 0x0, 0x4, 0x8, 0x3, 0x5, 0xccd5, 0x101, 0x2fb29ac1, 0x2, 0x5, 0x10001, 0x6, 0x7, 0x2, 0xfffffffc, 0xf, 0x5, 0x3ff, 0x5, 0x8, 0x1000, 0x6, 0xfffffffc, 0x401, 0x7, 0x100, 0x0, 0x3bd87af8, 0x1000, 0xc, 0x7, 0x8, 0x9, 0x8, 0x5, 0x0, 0x6, 0x9, 0xe95c, 0x6, 0x10, 0xffff8000, 0x8, 0x1, 0x7, 0x6, 0x0, 0x7fffffff, 0x6, 0x1, 0x7f, 0x6, 0x7f, 0x9, 0x8, 0x34, 0x9, 0x7ff, 0x6, 0x5, 0x9, 0x9, 0xffff, 0xf0f, 0x2, 0x2, 0x8001, 0x5, 0x7fff, 0x3, 0x10, 0x3, 0x400, 0x5, 0x5, 0x6, 0x5, 0xc1e0, 0x9, 0x2, 0x401, 0x5, 0xffffffff, 0x101, 0x800, 0x8, 0x6, 0x5f, 0xc, 0x5, 0x5d, 0x3a, 0x101, 0xe75, 0x9, 0x924, 0x0, 0x8001, 0xc1, 0xfffffffa, 0x4, 0x3, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x7ff, 0x1, 0x80000000, 0x7fff, 0x8, 0x4, 0x8000, 0xfffff001, 0x5, 0x0, 0x40, 0xa404, 0x9, 0x2, 0x892b, 0x40, 0x3, 0x7ff, 0x7, 0x8, 0xf, 0xfffffff9, 0xff, 0x335a9ec0, 0x8000000, 0x7fffffff, 0x4, 0x9, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0xd50, 0xf, 0x2, 0x24000}}]}}, @c_cbq={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5f}}}]}, 0x14fc}, 0x1, 0x0, 0x0, 0x8004}, 0x44880) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000001780)={0x3, 0x101, 0x0, 0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000017c0)={0x0, 0x1, 0x800, 0x9, 0x1, [], [0x7fffffff, 0x7ff, 0x68, 0x2], [0x6, 0x8, 0x5, 0x1], [0x8, 0x1ff, 0x9, 0xffffffffffffffff]}) lsetxattr$trusted_overlay_origin(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880), &(0x7f00000018c0), 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000001900)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000001940)={0x2, 0xfffffffd}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x50, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001ac0)={0x7, 0x198, 0x8000000000000000}) fsetxattr$security_evm(r0, &(0x7f0000001b00), &(0x7f0000001b40)=@v2={0x3, 0x3, 0x11, 0x5, 0x1d, "eb25bb6ed576e2cdc713deb094ffad7a5c4ddc9302fcb8580d9b6042f0"}, 0x26, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000001b80)=0x100000000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001bc0)={r0, 0x0, 0x8, 0x1}) r4 = fcntl$getown(r3, 0x9) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000001c00)={r0}, 0x1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x3ff, &(0x7f0000001c40)=""/151) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000001d00)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd_index, 0xffffffffffffffff, 0x3, 0xfffffff7, 0x4, 0x1, {0x0, r6}}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001d40)={0x4, 0xceb2, 0x4, 0x0, 0x0, [{{r0}, 0x7}, {{r2}, 0x7}, {{r3}, 0x3}, {{r0}, 0x10001}]}) r7 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x1800000000000000, 0xd9df06431e0aad80) read$usbmon(r7, &(0x7f0000001e40)=""/213, 0xd5) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) syz_io_uring_submit(r5, 0x0, &(0x7f00000020c0)=@IORING_OP_TIMEOUT={0xb, 0x25, 0x0, 0x0, 0x2, &(0x7f0000002080), 0x1, 0x1, 0x0, {0x0, r6}}) 2.849582477s ago: executing program 1 (id=917): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x400f00, 0x0) userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) 2.691204912s ago: executing program 4 (id=918): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x908, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x2745, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x3, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x2, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f, 0x2}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff, 0x4000}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x4, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0xfffffffe, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0x800, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000002}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0x2}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x90, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x5}, {0x0, 0x2}, {0xdf91, 0x1}, {0x3, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0xfe}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1004, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) (async, rerun: 32) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, r3, 0x0, 0x0, 0xf0, 0x2}, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x298b}) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f00000003c0)) (async, rerun: 64) getresgid(&(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000480)={r7, @in={{0x2, 0x4e21, @empty}}, 0x3, 0xfff8}, &(0x7f0000000040)=0x90) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100000000000109022400010000000009000122050009058103000200"/54], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r8, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) 2.425737091s ago: executing program 4 (id=919): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000830a"], 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005200010100000000000000001c0c00008540c003b723d0a54917705c49f3e7bd410ac3859200000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/162, 0xa2}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/211, 0xd3}], 0x4) 2.251368645s ago: executing program 0 (id=920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x31, 0xffffffff, 0x1, 0x6, 0x80000001, 0xd, 0xf22, 0xda}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x812, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x73}, {0x9, 0x9, 0x5, 0x0, 0x100000000, 0xa24, 0x100000001, 0x7}, {0x8000000000000001, 0x65dc, 0xa49, 0x7f}, 0x3, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x2b}, 0x2, @in=@empty, 0x3503, 0x3, 0x3, 0x1, 0x8, 0x34b6, 0x6e3}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(r5, 0x5, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x99) getdents(r6, 0xfffffffffffffffd, 0x58) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(r3, 0x4, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 2.215471642s ago: executing program 4 (id=921): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r4 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = dup(r8) write$P9_RSTATFS(r10, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r4}) io_uring_enter(r4, 0x2df0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1.7221836s ago: executing program 4 (id=922): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000000400)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xffffffffffffff9d, 0x0) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000340)="00410d0000000000ff030000a7ea", 0xe}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x20040140) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000001, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4c16, &(0x7f0000000500)={0x0, 0xf24, 0x20, 0x0, 0x3a9}, &(0x7f0000000380), &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x1, 0x6, 0x0, 0x8, 0x4, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4a43, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24) listen(r0, 0xfff) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000200)) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x4e24, 0x40, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x400de5, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 1.58785267s ago: executing program 1 (id=923): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20004001}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000480)="0e5b7632a056866f826ffdb3a13e83583a0b662412b68cf98154741199b1b9701b133e", 0x23}, {&(0x7f0000000840)="293175ab53be544e2115f0f1a9bd96784d8d4dbf1d43e41ac01db1a969ad9c3102d7fe641fce7d6cdf3d22a243106904f87bf821f4b76cb991cf", 0x3a}, {&(0x7f0000000880)="0e8758033aa0646b4cd8233783d58ea3fc8664c216f4d3d063346573eac59f151ae62ea5f49cacabfde42575385f7796ee333922d16ef1bca41f3baba23cfcf1a9c83ea5691a7fab9b09823fe516d79f6e3790019b0e7e9164f906bf8e9693dcfbcf15358f815fbbe81260bcf5949d0b6c721bc645c6846ed1ff166cfe791510a2fce247e59fe8ab048f8119c4e188d0bb8df78341fad1dfebcc085769c9cba25842210606f3fdb8b2c1acfcbc3311bb52ef4e6a99a0c28780b2742ebcd0c0f3b23fb4ec4fc1337b64cbe6c1556f9027ddffda27c1c0a9ca787360beda719f85b30e7a8bc6c034f66e7df8d23c00", 0xee}, {&(0x7f0000000980)="f6a97380dd91ae97d995db233518e46353289003787bea9db0de35d6a14ebe29eab1e8272e033977e0db1271bbb67670cdbdb4327b44ffc8e8a68d8ec922ec1fd3115517ae93b139b255ec394522960f83e7a8598a1b98781bcde4d3518fd41d202d3a864b2e3625bfaf9c5e0e38620c354fb023f1a68f8eddb68746dc920dec9dc5498abfde4b7414e434ea0511e18e3e5f78c1e38dd73d144b18598d8025d0a0f304fe1c53c104b825ac342c4a7e5856425894323e1bca74ddccde8aee9b0281774ae85c826d058192ea73af2250f510b3", 0xd2}, {&(0x7f0000000a80)="df786602805fb2a84a55621f9d3866ce4456618b2c38ebf48ac3e3572e67e7e09dab623ae2e16e51f412febbdf6d79fd29e37af3081be09776a352297c18f5f0db4550d65dee152e9c3cf61adf221158ec8c834f6a4f50eae0a51b6414e35dd382c18dc501f0036365730de8", 0x6c}, {&(0x7f0000000b00)="f298", 0x2}, {&(0x7f0000000b40)="a9c33f3832cf8850d5e8537bcd622ea591920edb8832ff147b63a17a7fd20531ad9d04ad3f9d5c762468daeab67b0e48f73272ecb235e970f865a5f6c209c4f450a14de6f1adf31a42b9e6376bdc309a8a1c94629bff14c76131e6b3a031f679c0ee55557e29ee0e455c1e7dc7eeca86f80bc20bccb9b5e958dd6612c4a314d1346c627267ea6a17b707cb48176a80663d887e10bb8ec311d7f980e6dab1777c6e7fd8c8b9ec52456782d74e7a48e5e3a4f01973c54650dbdb7062b8c089786b914baa39f34c551fc2e66076b5dca527efc44ff253c893a19416b9b8775bf7c40419bf", 0xe3}, {&(0x7f0000000c40)="7baa062fe445d351586a11bfbee111bda5f68cd6a3079dfa35ed83db62a2e818818774e10a36e80605dbb5e5c4b1e905c631c355c6e52a653bc480b4c827bfec8628a47fdb1c651d82e366833f536b", 0x4f}], 0x8, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}], 0x38}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r8, 0x40000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x48) syz_emit_ethernet(0x1df, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) unshare(0xe060400) r10 = gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r10, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r9, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) 1.38243083s ago: executing program 2 (id=924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000003e00)={&(0x7f0000001880)={0xa, 0x4e23, 0x1, @empty, 0x1c}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000001900)="37421e48be7e99", 0x7}, {0x0, 0x3e}], 0x2}, 0x24048040) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = accept$unix(r0, 0x0, &(0x7f0000000040)) sendto$unix(r4, &(0x7f00000000c0)="73644226a5be33c4c4275920852faf4470437d0ebf52b5457e367194ac59d608cb5069c85a26063baaa68182c09880fe171f21c1f4087191020a9ba379f0602571c68a22c97e4e5e1ee1ab1e616e3a18c48d04d9a5fdea4c32109cf2595ac7f79fdf8fd66c02f179d1e2a5dd59a3fddfc1de5273f4e0cece3edab0abee10bd847cc70b14522e1ac395bc3a5ea3ffc3d2e3", 0x91, 0x4000891, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) 1.270501295s ago: executing program 4 (id=925): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0x7, 0x1, 0x4, 0x2, 0x1, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x9, 0xa, 0x2, 0xd, 0x1}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x200000000000000a, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x32f, 0xbd5], 0x2, 0x3c4212}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04011a0c03"], 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$UDMABUF_CREATE_LIST(r5, 0x40806685, &(0x7f0000000180)=ANY=[@ANYRESOCT]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x5e20, 0xc8, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x5e20, 0xc8, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x48, 0x1410, 0x800, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c054) 688.034594ms ago: executing program 0 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r1, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f00000003c0)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2400909b) 521.41066ms ago: executing program 0 (id=927): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000440)=0x89, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0xa2da, 0x80, 0x0, 0x32c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x4, 0xcf, 0x2, 0xf2, 0x80, 0x0, 0xe0, 0x6, 0x10, 0x4, 0x5, 0x9, 0x0, 0x4, 0x2f, 0x2}}) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)={0x7}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000140)={[0x6e, 0x0, 0x0, 0x20, 0x401, 0x10000, 0x106c, 0x80000001, 0x0, 0xc4af, 0xb, 0x6, 0xfffffffffffffffe, 0x4, 0x4, 0x8001], 0x3000, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x8, 0x1b, r3, 0x0, &(0x7f0000001780)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000001700)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/206, 0xce}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000100)}, {&(0x7f0000001580)=""/253, 0xfd}, {&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000300)=""/128, 0x80}], 0x7, &(0x7f0000000380)=""/3, 0x3}, 0x0, 0x22}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 519.550766ms ago: executing program 4 (id=928): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f801800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x419, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x800}}, {{{0x9, 0x5, 0x81, 0x3, 0x1a872fb99c5ac4fe, 0xb, 0x6, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x83, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x4, 0x6, 0x8, 0x7}, 0x16, &(0x7f0000000180)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x1, 0x16, 0xf53d}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x9, 0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x40, 0x30, 0x9d, {0x9d, 0xa, "cd418fdc3d3230b7d0c51e117874a40d84949a0495ccac1072a4f605adf6da5a581d226bb4a9ba29aff31770ba70367f5d2da40fda824c957d552387da6004d860a3db9c21a53d3abaca016081c07508908146ca36ca7b1497bd116a72423c6caf3ab56d714d4439a93c06ecda2b538f7992933cd9cbcccf0714c1e6acc1dd8fba2ce9fe3c00b0254a7bb7619153babf74c3248180a819f3d5f00f"}}, &(0x7f0000000980)=ANY=[@ANYBLOB="00e3030000000403300448e4e8bc1cd941d53bfe2650c136291f9741f86fd1324c8159e5bbd18b800432249d1d"], &(0x7f00000003c0)={0x0, 0x22, 0x14, {[@main=@item_012={0x0, 0x0, 0x4}, @local=@item_012={0x2, 0x2, 0x3, "f50f"}, @global=@item_4={0x3, 0x1, 0xf, "593f72d3"}, @global=@item_4={0x3, 0x1, 0x8, "639c3efc"}, @main=@item_012={0x2, 0x0, 0xc, "05a1"}, @local=@item_012={0x1, 0x2, 0x7, "fa"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xdae}}}}, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x20, 0xc, 0x81, "a1065c18b7b383fb166352069bc8a5c50ae01d581339e07e163d5de942a7996322d4c1f3bebbf336d8c0c0b7bd128826529b056aef4000a06ecbd4b319edcb29484f812b09733bdbfb1487b4d7810d5d29cce4bd82b9371890c50ae91e3f3c9ccc0eb9fc13bec576e070a0768b38fcad863e85ef289f1dd336526c55f921c3ebab"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xe2}, &(0x7f0000000780)={0x0, 0x8, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0x54, "91985025388cbbad27a51ba8500d2e422b83f97d905a9a2af71ccedd180b2d988286ff9056b12d4c070b12b155fa3c7657a351ddca3e4003c0db8a96478d57960b06ece0c3cd91c42f2b4368445c45d75c30f03a"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000001600000b4550182183fbd881fa75847fb5dd87b6825c8650b12d4143dba3309dbac3c890ccc68c4cc192bd352351c04e4e82c30f2e073bc8a73c54e2eb476d4ad2430656f0be1c0a2a0645d8c2ec17a42155caac5d5936f541829d7d3715a7cb34e07b6beb30ea091e91b7233661a5ea6546e2a0edcddf3bc880e006"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x0, 0x2, 0x1, 0x775d}) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r8, 0x11a, 0x2, &(0x7f0000000000)=0x304, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r11, &(0x7f0000000100)=""/155, 0x9b) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r11, @ANYRES16=r2, @ANYRESHEX=r7, @ANYRES16, @ANYRES8=r3, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x408c}, 0x94) 320.201278ms ago: executing program 1 (id=929): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x208402, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0, 0x0, 0x20040041}, 0x48c1) move_pages(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000000/0x1000)=nil], &(0x7f00000004c0)=[0xa7], 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000040)={r2}, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x12a00) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000180)={0x7, &(0x7f0000000100)=[0x1, 0xd, 0x7, 0x8, 0x6, 0x965, 0x800]}) readahead(r1, 0x7, 0x800003600a) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0xd8}}, 0x0) 0s ago: executing program 5 (id=930): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0xfffe}, 0x59) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="120110f1010000082505a1a440000102030109025c000201a620fc0904000001020d0000052406000105240000000d240f01ffffffff0300008100080904f0ff00020d87651b01010102020d000009058202100002a20b09050302200006023e0000000016000000000000000000"], 0xfffffffffffffffc) kernel console output (not intermixed with test programs): put0 [ 196.016803][ T5907] usb 3-1: config 9 has an invalid interface number: 102 but max is 0 [ 196.057827][ T5907] usb 3-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 196.067392][ T5907] usb 3-1: config 9 has no interface number 0 [ 196.081411][ T5959] usb 6-1: USB disconnect, device number 14 [ 196.097600][ T9] usb 5-1: device descriptor read/64, error -71 [ 196.104024][ T5907] usb 3-1: config 9 has no interface number 1 [ 196.131196][ T5907] usb 3-1: config 9 interface 138 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 196.178645][ T5907] usb 3-1: too many endpoints for config 9 interface 102 altsetting 108: 107, using maximum allowed: 30 [ 196.220910][ T7682] fido_id[7682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 196.238045][ T5907] usb 3-1: config 9 interface 102 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 196.272507][ T5907] usb 3-1: config 9 interface 138 has no altsetting 0 [ 196.302991][ T5907] usb 3-1: config 9 interface 102 has no altsetting 0 [ 196.331038][ T5907] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0020, bcdDevice=3a.c5 [ 196.340610][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 196.366185][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.426222][ T5907] usb 3-1: Product: syz [ 196.463243][ T5907] usb 3-1: Manufacturer: syz [ 196.483629][ T5907] usb 3-1: SerialNumber: syz [ 196.497735][ T9] usb 5-1: device descriptor read/64, error -71 [ 196.638226][ T9] usb usb5-port1: attempt power cycle [ 196.706939][ T5907] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 196.771921][ T5907] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.771967][ T5907] dib0700: firmware download failed at 7 with -22 [ 196.790458][ T5907] dvb-usb: found a 'Elgato EyeTV Dtt Dlx PD378S' in cold state, will try to load a firmware [ 196.792191][ T5907] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.792240][ T5907] dib0700: firmware download failed at 7 with -22 [ 196.818733][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 196.821812][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 196.881820][ T5907] usb 3-1: USB disconnect, device number 29 [ 196.950619][ T7696] netlink: 182 bytes leftover after parsing attributes in process `syz.1.373'. [ 197.117747][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 197.148276][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.427127][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 197.638901][ T9] usb 5-1: device descriptor read/8, error -71 [ 197.778577][ T9] usb usb5-port1: unable to enumerate USB device [ 197.858782][ T5900] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 198.027967][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 198.071145][ T5900] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 198.103594][ T5900] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 198.182651][ T5900] usb 3-1: config 127 has no interface number 1 [ 198.209361][ T5900] usb 3-1: config 127 interface 171 has no altsetting 0 [ 198.234210][ T5900] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 198.277789][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.321212][ T5900] usb 3-1: Product: syz [ 198.344053][ T5900] usb 3-1: Manufacturer: syz [ 198.367996][ T5900] usb 3-1: SerialNumber: syz [ 199.543138][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.551741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.587642][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 199.761618][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 199.781060][ T24] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 199.790989][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.801316][ T7719] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 199.811182][ T24] usb 5-1: Product: syz [ 199.819734][ T24] usb 5-1: Manufacturer: syz [ 199.836226][ T24] usb 5-1: SerialNumber: syz [ 199.873393][ T24] usb 5-1: config 0 descriptor?? [ 199.900181][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 200.275636][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.293892][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.325216][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.382401][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.611083][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.647964][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.687977][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.713240][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.839794][ T7729] bond1: option mode: invalid value (255) [ 200.911310][ T24] gspca_ov534_9: reg_w failed -71 [ 200.986112][ T7729] bond1 (unregistering): Released all slaves [ 201.239485][ T24] gspca_ov534_9: Unknown sensor 0000 [ 201.239587][ T24] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 201.305953][ T24] usb 5-1: USB disconnect, device number 28 [ 201.645968][ T5900] xr_serial 3-1:127.171: xr_serial converter detected [ 201.686226][ T5900] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 201.709958][ T5900] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 201.760078][ T5900] usb 3-1: USB disconnect, device number 30 [ 201.810815][ T5900] xr_serial 3-1:127.171: device disconnected [ 202.563615][ T7755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.793466][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.815341][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.857579][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 203.007549][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 203.017971][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.048782][ T24] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 203.074840][ T5900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 203.088421][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.096906][ T24] usb 5-1: Product: syz [ 203.129355][ T24] usb 5-1: Manufacturer: syz [ 203.140254][ T24] usb 5-1: SerialNumber: syz [ 203.179891][ T24] usb 5-1: config 0 descriptor?? [ 203.258862][ T24] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 203.291740][ T5900] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 203.304467][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.339731][ T5900] usb 6-1: Product: syz [ 203.369312][ T5900] usb 6-1: Manufacturer: syz [ 203.374205][ T5900] usb 6-1: SerialNumber: syz [ 203.419502][ T5840] usb 5-1: USB disconnect, device number 29 [ 203.455331][ T7773] netlink: 'syz.2.394': attribute type 4 has an invalid length. [ 203.838238][ T5900] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 203.857861][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 203.877422][ T5900] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.907333][ T5900] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.943339][ T5900] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 203.997823][ T9] usb 3-1: device descriptor read/64, error -71 [ 204.257884][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 204.407610][ T9] usb 3-1: device descriptor read/64, error -71 [ 204.420040][ T5840] usb 6-1: USB disconnect, device number 15 [ 204.517896][ T9] usb usb3-port1: attempt power cycle [ 204.832543][ T24] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 204.844964][ T24] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 204.857566][ T24] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 204.862453][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 204.887752][ T24] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 204.898565][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.015974][ T7801] fido_id[7801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.137662][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 205.191676][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.338011][ T9] usb usb3-port1: unable to enumerate USB device [ 205.635248][ T7821] : renamed from vlan0 (while UP) [ 206.222678][ T7816] ALSA: mixer_oss: invalid OSS volume 'u' [ 206.422718][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 206.617634][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 206.627807][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 206.636867][ T9] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 206.655683][ T9] usb 5-1: config 8 has no interface number 0 [ 206.674913][ T9] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 521 [ 206.694962][ T9] usb 5-1: config 8 interface 39 has no altsetting 0 [ 206.706870][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 206.727422][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.737820][ T9] usb 5-1: Product: syz [ 206.742489][ T9] usb 5-1: Manufacturer: syz [ 206.747358][ T9] usb 5-1: SerialNumber: syz [ 206.774693][ T7833] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 206.791589][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 206.812997][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 206.823368][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.832426][ T24] usb 6-1: Product: syz [ 206.838448][ T24] usb 6-1: Manufacturer: syz [ 206.843209][ T24] usb 6-1: SerialNumber: syz [ 206.853273][ T24] usb 6-1: config 0 descriptor?? [ 206.862735][ T24] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 206.920422][ T5946] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 207.018896][ T7842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 207.109613][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 207.120821][ T5946] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 207.129733][ T5946] usb 3-1: config 0 has no interface number 0 [ 207.139726][ T7847] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 207.177627][ T5946] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 207.211591][ T5946] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 207.234604][ T5946] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 207.247668][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.277520][ T5946] usb 3-1: Product: syz [ 207.284982][ T5946] usb 3-1: Manufacturer: syz [ 207.290206][ T7833] vlan2: entered promiscuous mode [ 208.354936][ T7833] bond0: entered promiscuous mode [ 208.434228][ T7833] bond_slave_0: entered promiscuous mode [ 208.617550][ T5840] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 208.805972][ T7833] bond_slave_1: entered promiscuous mode [ 208.824874][ T24] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 208.846163][ T5946] usb 3-1: SerialNumber: syz [ 208.853018][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 208.878429][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 208.897247][ T5946] usb 3-1: config 0 descriptor?? [ 208.917052][ T5840] usb 1-1: config 0 has an invalid interface number: 39 but max is 0 [ 208.946620][ T5840] usb 1-1: config 0 has no interface number 0 [ 208.958839][ T24] usb 6-1: USB disconnect, device number 16 [ 208.995912][ T5840] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 209.033470][ T9] ipheth 5-1:8.39: Unable to find endpoints [ 209.050641][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.083561][ T5840] usb 1-1: Product: syz [ 209.099543][ T9] usb 5-1: USB disconnect, device number 30 [ 209.124406][ T5840] usb 1-1: Manufacturer: syz [ 209.138738][ T5840] usb 1-1: SerialNumber: syz [ 209.145454][ T5946] radio-si470x 3-1:0.35: this is not a si470x device. [ 209.167389][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.208326][ T5840] usb 1-1: config 0 descriptor?? [ 209.211223][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.255733][ T5946] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 209.255868][ T5840] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 209.396898][ T5946] usb 3-1: USB disconnect, device number 35 [ 209.562659][ T7858] capability: warning: `syz.2.413' uses deprecated v2 capabilities in a way that may be insecure [ 210.715144][ T5959] usb 1-1: USB disconnect, device number 31 [ 210.860166][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 211.031291][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.263594][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.297812][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.336743][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 211.373430][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 211.392465][ T9] usb 5-1: Product: syz [ 211.407274][ T9] usb 5-1: Manufacturer: syz [ 211.432807][ T9] usb 5-1: SerialNumber: syz [ 211.726591][ T7889] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.417'. [ 211.737083][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.926692][ T5959] usb 5-1: USB disconnect, device number 31 [ 211.927966][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 211.960545][ T5959] usblp0: removed [ 212.008495][ T7885] xt_hashlimit: max too large, truncated to 1048576 [ 212.066662][ T7885] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.164209][ T7885] ptrace attach of "./syz-executor exec"[6326] was attempted by "./syz-executor exec"[7885] [ 212.197923][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 212.264138][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 212.287035][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 212.334959][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.347733][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.363190][ T9] usb 1-1: Product: 岫狚킨蕝썎㔸䴅갘䶔塚欤뽒䠩僴莎ߦᨒ箕繫삎抪㻦ꍓ톹㑑ဏ㑬ᅧ≯䞍ᴱ示멢쯅䥍耐㚷谊昐ﲷݶ长ኔ䨗닢뿫➴෵ᥙ莒꨹짫㟁ଉㆧꦱ킳煖⽖徾ᩛ寕А匛ﺁ岅礭첵ꗉ痑緶ヲ⃲쯎╕ [ 212.406859][ T9] usb 1-1: Manufacturer: ࡡ [ 212.416627][ T9] usb 1-1: SerialNumber: ᭎הּ忇䈯혍줔䅵㪙㽙麭㴈ꀐ퉷ꁄ灂靟ኈ轀ྶ섏䆳勛Ę魀䈯 扩夞턮阼怐晋竛劫孒ᔙ谜ා졟䱔멜ჳ衉 [ 213.066599][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 213.118985][ T7891] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 213.175458][ T7891] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 213.228929][ T7908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.238011][ T7908] IPv6: NLM_F_CREATE should be set when creating new route [ 213.437679][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 213.459714][ T7913] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 213.497862][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.518190][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.544328][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.555868][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.584417][ T9] cdc_ncm 1-1:1.0: bind() failure [ 213.624264][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 213.651341][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 213.691788][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 213.707704][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 213.744925][ T9] usb 1-1: USB disconnect, device number 32 [ 213.828410][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 119, changing to 10 [ 213.870038][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 41289, setting to 1024 [ 213.910116][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.950820][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.029705][ T7921] usb usb8: usbfs: process 7921 (syz.2.428) did not claim interface 0 before use [ 214.051678][ T24] usb 5-1: config 0 descriptor?? [ 214.387314][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.477991][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 214.506689][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.525292][ T5946] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 214.552853][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.572521][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 214.638312][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 214.690089][ T5946] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.700797][ T5946] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.713334][ T5946] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.737380][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 214.751246][ T5946] usb 6-1: SerialNumber: syz [ 214.998016][ T5946] usb 6-1: 0:2 : does not exist [ 215.105140][ T5946] usb 6-1: USB disconnect, device number 17 [ 215.140350][ T5963] udevd[5963]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 215.174176][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 215.193512][ T5963] udevd[5963]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 215.353509][ T7948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.435'. [ 216.454188][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 216.787604][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 216.826253][ T9] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 216.853843][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.996781][ T9] usb 6-1: config 0 descriptor?? [ 217.436071][ T9] usb 6-1: string descriptor 0 read error: -71 [ 217.467786][ T9] uvcvideo 6-1:0.0: Found UVC 0.00 device (2833:0201) [ 217.486589][ T9] uvcvideo 6-1:0.0: No valid video chain found. [ 217.571651][ T9] usb 6-1: USB disconnect, device number 18 [ 217.991236][ T5900] usb 5-1: USB disconnect, device number 32 [ 218.678332][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 218.847609][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 219.010643][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.076927][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.105232][ T9] usb 6-1: config 0 descriptor?? [ 219.129134][ T8015] x_tables: unsorted underflow at hook 3 [ 219.712839][ T8021] fuse: Unknown parameter 'group3~XOfnnܾVf_VCepxJ_mONS|@ [%Td(' [ 220.244581][ T8030] input: syz0 as /devices/virtual/input/input21 [ 220.554647][ T8044] loop4: detected capacity change from 0 to 7 [ 220.570449][ T8044] Dev loop4: unable to read RDB block 7 [ 220.576267][ T8044] loop4: AHDI p1 p2 p3 [ 220.598916][ T8044] loop4: partition table partially beyond EOD, truncated [ 220.609046][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 220.627018][ T8044] loop4: p1 start 16777216 is beyond EOD, truncated [ 220.635458][ T8044] loop4: p2 start 1702059890 is beyond EOD, truncated [ 220.748658][ T24] usb 5-1: device descriptor read/64, error -71 [ 220.969692][ T9] usb 6-1: Cannot set autoneg [ 220.975091][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 220.999522][ T9] usb 6-1: USB disconnect, device number 19 [ 221.007534][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 221.147566][ T24] usb 5-1: device descriptor read/64, error -71 [ 221.257978][ T24] usb usb5-port1: attempt power cycle [ 221.462016][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.500370][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.512962][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.525114][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.544987][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.555414][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.567805][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.580028][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.599464][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 221.624725][ T8061] netlink: 15516 bytes leftover after parsing attributes in process `syz.0.460'. [ 221.638684][ T24] usb 5-1: device descriptor read/8, error -71 [ 221.921469][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 221.973167][ T24] usb 5-1: device descriptor read/8, error -71 [ 222.074368][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.082283][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.102443][ T24] usb usb5-port1: unable to enumerate USB device [ 222.247687][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 222.427696][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 222.435559][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.453509][ T5900] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.466061][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.485335][ T5900] usb 6-1: config 0 descriptor?? [ 222.705311][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.730167][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.770226][ T5922] usb 6-1: USB disconnect, device number 20 [ 222.893075][ T8118] kvm: emulating exchange as write [ 222.958350][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 223.574624][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.616567][ T24] usb 1-1: config 0 interface 0 has no altsetting 1 [ 223.653862][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 223.669803][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 223.762801][ T24] usb 1-1: Product: syz [ 223.782084][ T24] usb 1-1: Manufacturer: syz [ 223.807383][ T24] usb 1-1: SerialNumber: syz [ 223.828815][ T24] usb 1-1: config 0 descriptor?? [ 223.912803][ T8125] __nla_validate_parse: 57 callbacks suppressed [ 223.912938][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 224.142269][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.166015][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.175335][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.177824][ T5959] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 224.206240][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.379059][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 224.395600][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.414351][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.432908][ T5959] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.450620][ T24] usb 1-1: USB disconnect, device number 33 [ 224.479820][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.488382][ T8144] delete_channel: no stack [ 224.496352][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.536941][ T5959] usb 5-1: config 0 descriptor?? [ 224.551576][ T5959] hub 5-1:0.0: USB hub found [ 224.750025][ T5959] hub 5-1:0.0: 1 port detected [ 224.944778][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 225.363194][ T5959] hub 5-1:0.0: activate --> -90 [ 225.508833][ T5922] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 225.594530][ T8167] syz.1.486 uses obsolete (PF_INET,SOCK_PACKET) [ 225.690099][ T5922] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 225.713934][ T5922] usb 3-1: config 7 has no interface number 0 [ 225.732221][ T5922] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.81 [ 225.757533][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.777141][ T24] usb 5-1: USB disconnect, device number 37 [ 225.800046][ T5922] usb 3-1: Product: syz [ 225.804393][ T5922] usb 3-1: Manufacturer: syz [ 225.817927][ T5922] usb 3-1: SerialNumber: syz [ 226.084761][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 226.154407][ T8177] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.234694][ T5922] as10x_usb: device has been detected [ 226.266444][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 226.366059][ T5922] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 226.448220][ T5922] as10x_usb: error during firmware upload part1 [ 226.510226][ T5922] Registered device Elgato EyeTV DTT Deluxe [ 226.517312][ T5922] usb 3-1: USB disconnect, device number 36 [ 226.694731][ T5922] Unregistered device Elgato EyeTV DTT Deluxe [ 226.696391][ T5922] as10x_usb: device has been disconnected [ 227.127996][ T5922] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 227.297990][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 227.310164][ T5922] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.347723][ T5922] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.392335][ T5922] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.427724][ T5922] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.498094][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.527607][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.559710][ T5922] usb 3-1: Product: syz [ 227.564055][ T5922] usb 3-1: Manufacturer: syz [ 227.593249][ T5922] usb 3-1: SerialNumber: syz [ 227.760056][ T5946] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 227.939742][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.006136][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.015981][ T5922] usb 3-1: USB disconnect, device number 37 [ 228.037725][ T5946] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.069895][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.129928][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.204348][ T5946] usb 1-1: SerialNumber: syz [ 228.420219][ T5946] usb 1-1: 0:2 : does not exist [ 228.500483][ T5946] usb 1-1: unit 5 not found! [ 228.566746][ T5946] usb 1-1: USB disconnect, device number 34 [ 228.785416][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.733728][ T8238] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 232.262984][ T8256] cifs: Unknown parameter 'fd' [ 232.357628][ T5946] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 232.488465][ T5946] usb 3-1: device descriptor read/64, error -71 [ 232.737550][ T5946] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 232.897565][ T5946] usb 3-1: device descriptor read/64, error -71 [ 233.009909][ T5946] usb usb3-port1: attempt power cycle [ 233.357604][ T5946] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 233.398142][ T5946] usb 3-1: device descriptor read/8, error -71 [ 233.511460][ T8277] netlink: 'syz.5.517': attribute type 71 has an invalid length. [ 233.625039][ T8282] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 233.649618][ T5946] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 233.688892][ T5946] usb 3-1: device descriptor read/8, error -71 [ 233.787603][ T5945] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 233.798003][ T5946] usb usb3-port1: unable to enumerate USB device [ 233.937714][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 233.945862][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.956218][ T5945] usb 5-1: config 5 has an invalid interface number: 212 but max is 0 [ 233.967755][ T5945] usb 5-1: config 5 has no interface number 0 [ 233.974016][ T5945] usb 5-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 233.989200][ T5945] usb 5-1: config 5 interface 212 has no altsetting 0 [ 234.000478][ T5945] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 234.010156][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.018599][ T5945] usb 5-1: Product: syz [ 234.023066][ T5945] usb 5-1: Manufacturer: syz [ 234.035060][ T5945] usb 5-1: SerialNumber: syz [ 234.139077][ T39] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 234.349585][ T39] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.365889][ T39] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.394719][ T5945] usb 5-1: USB disconnect, device number 38 [ 234.411285][ T39] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.428591][ T39] usb 6-1: config 220 has no interface number 2 [ 234.469095][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.212/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.502855][ T39] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.525284][ T39] usb 6-1: config 220 interface 0 has no altsetting 0 [ 234.540772][ T39] usb 6-1: config 220 interface 76 has no altsetting 0 [ 234.556490][ T39] usb 6-1: config 220 interface 1 has no altsetting 0 [ 234.575725][ T39] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.585439][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.596485][ T39] usb 6-1: Product: syz [ 234.604829][ T39] usb 6-1: Manufacturer: syz [ 234.614590][ T39] usb 6-1: SerialNumber: syz [ 234.852199][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.863190][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.909397][ T39] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 234.943461][ T39] uvcvideo 6-1:220.0: No valid video chain found. [ 234.970642][ T39] usb 6-1: selecting invalid altsetting 0 [ 235.061233][ T39] usb 6-1: selecting invalid altsetting 0 [ 235.072443][ T39] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 235.143520][ T39] usb 6-1: USB disconnect, device number 21 [ 235.367628][ T5840] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 235.387677][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 235.529729][ T8312] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 235.577148][ T8315] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 235.589245][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.609572][ T8315] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 235.618640][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 235.636689][ T9] usb 3-1: too many configurations: 148, using maximum allowed: 8 [ 235.650592][ T5840] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.674461][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.687576][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.716658][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz.5.526'. [ 235.725799][ T8313] openvswitch: netlink: Flow key attr not present in new flow. [ 235.731754][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.764002][ T5840] usb 5-1: config 0 descriptor?? [ 235.796857][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.825873][ T5840] pwc: Askey VC010 type 2 USB webcam detected. [ 235.836810][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.852768][ T8319] hub 9-0:1.0: USB hub found [ 235.864055][ T8319] hub 9-0:1.0: 1 port detected [ 235.870876][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.888172][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.900081][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.914654][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.943349][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 235.966945][ T8318] erspan0: entered promiscuous mode [ 236.044569][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 236.060058][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 236.069582][ T9] usb 3-1: Manufacturer: syz [ 236.135059][ T9] usb 3-1: config 0 descriptor?? [ 236.148399][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.170548][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.434938][ T5840] pwc: recv_control_msg error -71 req 02 val 2b00 [ 236.551851][ T5840] pwc: recv_control_msg error -71 req 02 val 2700 [ 236.583814][ T8330] netlink: 'syz.5.530': attribute type 1 has an invalid length. [ 236.618005][ T5840] pwc: recv_control_msg error -71 req 02 val 2c00 [ 236.625080][ T5840] pwc: recv_control_msg error -71 req 04 val 1000 [ 236.637734][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 236.652761][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 236.663591][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 236.673238][ T5840] pwc: recv_control_msg error -71 req 04 val 1300 [ 236.680403][ T5840] pwc: recv_control_msg error -71 req 04 val 1400 [ 236.705931][ T9] usb 3-1: USB disconnect, device number 42 [ 236.716694][ T5840] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.764193][ T8330] bond1: entered promiscuous mode [ 236.769723][ T5840] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.784520][ T5840] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.798219][ T5840] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.808007][ T8330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.815622][ T5840] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.849819][ T5840] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.868406][ T5840] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.879770][ T5840] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.917691][ T5840] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.918429][ T8333] bond1: (slave bridge1): making interface the new active one [ 236.925318][ T5840] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.933148][ T8333] bridge1: entered promiscuous mode [ 236.955802][ T8333] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 236.970592][ T5840] pwc: Registered as video103. [ 236.998146][ T5840] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 237.046045][ T5840] usb 5-1: USB disconnect, device number 39 [ 237.304778][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'. [ 237.611758][ T39] IPVS: starting estimator thread 0... [ 237.662366][ T8339] block device autoloading is deprecated and will be removed. [ 237.691282][ T5840] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 237.787639][ T8344] IPVS: using max 30 ests per chain, 72000 per kthread [ 237.881531][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.892875][ T5840] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.904126][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.985473][ T5840] usb 5-1: config 0 descriptor?? [ 237.996658][ T5840] pwc: Askey VC010 type 2 USB webcam detected. [ 238.579161][ T5840] pwc: send_video_command error -71 [ 238.594226][ T5840] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 238.606101][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.625990][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.630826][ T5840] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 238.711437][ T5840] usb 5-1: USB disconnect, device number 40 [ 238.815931][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 239.187715][ T5840] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 239.408167][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 239.415821][ T5840] usb 5-1: config 0 has no interfaces? [ 239.427709][ T5840] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.450047][ T5840] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.465534][ T5840] usb 5-1: Manufacturer: syz [ 239.477367][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.513716][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.571989][ T5840] usb 5-1: config 0 descriptor?? [ 239.707318][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.730408][ T5942] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 239.788457][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.887627][ T5942] usb 6-1: device descriptor read/64, error -71 [ 240.095699][ T8385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.542'. [ 240.147920][ T5942] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 240.256038][ T8385] netlink: 'syz.1.542': attribute type 8 has an invalid length. [ 240.307702][ T5942] usb 6-1: device descriptor read/64, error -71 [ 240.327798][ T5840] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 240.348903][ T8385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.454115][ T5942] usb usb6-port1: attempt power cycle [ 240.559293][ T5840] usb 1-1: config 0 has no interfaces? [ 240.590210][ T5840] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 240.610912][ T8385] vim2m vim2m.0: vidioc_s_fmt queue busy [ 240.637377][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.700411][ T5840] usb 1-1: Product: syz [ 240.725556][ T5840] usb 1-1: Manufacturer: syz [ 240.787942][ T7451] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 240.806193][ T5840] usb 1-1: SerialNumber: syz [ 240.819580][ T5942] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 240.853969][ T5840] usb 1-1: config 0 descriptor?? [ 240.927837][ T5942] usb 6-1: device descriptor read/8, error -71 [ 241.176666][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.196936][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.220409][ T5942] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 241.266625][ T5942] usb 6-1: device descriptor read/8, error -71 [ 241.367948][ T8401] netlink: 324 bytes leftover after parsing attributes in process `syz.2.546'. [ 241.390901][ T5942] usb usb6-port1: unable to enumerate USB device [ 241.533812][ T8384] veth1_vlan: left promiscuous mode [ 241.575098][ T5942] usb 1-1: USB disconnect, device number 35 [ 241.804701][ T5907] usb 5-1: USB disconnect, device number 41 [ 242.288331][ T5907] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 242.308636][ T8400] delete_channel: no stack [ 242.495392][ T5907] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 242.537673][ T5907] usb 5-1: config 0 has no interface number 0 [ 242.658283][ T5907] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=2f.1f [ 242.699108][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.737912][ T5907] usb 5-1: Product: syz [ 242.795928][ T5907] usb 5-1: Manufacturer: syz [ 242.817729][ T5907] usb 5-1: SerialNumber: syz [ 242.854917][ T8417] netlink: 'syz.5.551': attribute type 1 has an invalid length. [ 242.863605][ T5907] usb 5-1: config 0 descriptor?? [ 243.126124][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.168338][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.233946][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.548'. [ 243.484952][ T8417] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 243.603488][ T5840] usb 5-1: USB disconnect, device number 42 [ 243.928621][ T5149] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 244.107593][ T5907] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 244.257741][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 244.266789][ T5907] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 244.311550][ T5907] usb 6-1: config 0 has no interface number 0 [ 244.369476][ T5907] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.397887][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.415578][ T5907] usb 6-1: Product: syz [ 244.434481][ T5907] usb 6-1: Manufacturer: syz [ 244.444826][ T5907] usb 6-1: SerialNumber: syz [ 244.481139][ T5907] usb 6-1: config 0 descriptor?? [ 244.505063][ T5907] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.577912][ T5840] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 244.716177][ T5907] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.737063][ T5907] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.756685][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.775299][ T5840] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 244.799611][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.821217][ T5840] usb 5-1: config 0 descriptor?? [ 244.829846][ T7451] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 244.932230][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.949799][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.007662][ T7451] usb 3-1: Using ep0 maxpacket: 16 [ 245.028310][ T7451] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 245.041587][ T7451] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.054160][ T7451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.081702][ T7451] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.104641][ T7451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.131722][ T7451] usb 3-1: Product: syz [ 245.136564][ T7451] usb 3-1: Manufacturer: syz [ 245.178334][ T7451] usb 3-1: SerialNumber: syz [ 245.329018][ T5840] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 245.482713][ T5840] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 245.519733][ T5840] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 245.565772][ T5840] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 245.586565][ T5840] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 245.627004][ T7451] usb 3-1: 0:2 : does not exist [ 245.838551][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.853609][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.908144][ T5840] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 246.095743][ T5840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.108779][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.120891][ T5959] usb 5-1: USB disconnect, device number 43 [ 246.122745][ T5840] usb 1-1: Product: syz [ 246.168985][ T5840] usb 1-1: Manufacturer: syz [ 246.188200][ T5840] usb 1-1: SerialNumber: syz [ 246.222951][ T5840] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.298871][ T5900] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.324224][ T7451] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 246.341787][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 246.462696][ T7451] usb 3-1: USB disconnect, device number 44 [ 246.579949][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.636455][ T5959] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 246.797623][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 246.809706][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 246.827658][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.855813][ T5959] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.886700][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.889140][ T5942] usb 6-1: USB disconnect, device number 26 [ 246.917199][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 246.977827][ T5959] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 246.992334][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 247.030405][ T5959] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 247.049071][ T5945] usb 1-1: USB disconnect, device number 36 [ 247.108192][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 247.127633][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.143874][ T5959] usb 5-1: config 0 descriptor?? [ 247.156495][ T5942] quatech2 6-1:0.51: device disconnected [ 247.213526][ T5149] Bluetooth: hci5: urb ffff88814d29b500 submission failed (90) [ 247.341189][ T8507] pimreg: tun_chr_ioctl cmd 1074025677 [ 247.371569][ T8507] pimreg: linktype set to 825 [ 247.389698][ T7451] usb 5-1: USB disconnect, device number 44 [ 247.398124][ T8510] capability: warning: `syz.5.574' uses 32-bit capabilities (legacy support in use) [ 247.430917][ T5900] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 247.476851][ T5900] ath9k_htc: Failed to initialize the device [ 247.530024][ T5945] usb 1-1: ath9k_htc: USB layer deinitialized [ 248.268381][ T5942] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 248.500281][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.512984][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.531094][ T5942] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 248.564940][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.595166][ T5942] usb 3-1: config 0 descriptor?? [ 249.194032][ T8544] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 249.224376][ T8544] bond3 (unregistering): Released all slaves [ 249.359953][ T8548] pimreg: entered allmulticast mode [ 249.787749][ T5900] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.813270][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 249.847696][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.893620][ T5942] usb 3-1: USB disconnect, device number 45 [ 249.954069][ T5900] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.003206][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.035621][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.048039][ T5900] usb 1-1: Product: syz [ 250.052373][ T5900] usb 1-1: Manufacturer: syz [ 250.063103][ T5900] usb 1-1: SerialNumber: syz [ 250.101587][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.116557][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.292103][ T5900] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.350999][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 250.368431][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 250.685458][ T8573] syzkaller0: entered promiscuous mode [ 250.695660][ T8573] syzkaller0: entered allmulticast mode [ 250.813434][ T8573] tipc: Started in network mode [ 250.843600][ T8573] tipc: Node identity 4681d9bdbf88, cluster identity 4711 [ 250.883465][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.902266][ T8573] tipc: Enabled bearer , priority 0 [ 250.919123][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.949650][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.960397][ T8572] tipc: Resetting bearer [ 250.988759][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.071144][ T8572] tipc: Disabling bearer [ 251.547629][ T5900] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 251.852402][ T8588] loop9: detected capacity change from 0 to 7 [ 251.865128][ T8588] Dev loop9: unable to read RDB block 7 [ 251.874149][ T8588] loop9: AHDI p3 p4 [ 251.879800][ T8588] loop9: partition table partially beyond EOD, truncated [ 251.888000][ T8588] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 252.039952][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 252.059476][ T5900] usb 3-1: can't read configurations, error -71 [ 252.133743][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 252.207658][ T5942] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 253.186661][ T8624] xt_TCPMSS: Only works on TCP SYN packets [ 253.517859][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.603'. [ 253.544591][ T8627] tipc: Enabling of bearer rejected, failed to enable media [ 253.566240][ T8627] netlink: 'syz.5.603': attribute type 10 has an invalid length. [ 253.712764][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 254.047720][ T5942] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 254.118974][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 254.201237][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.218602][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.242421][ T5942] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 254.252801][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.268463][ T5942] usb 5-1: config 0 descriptor?? [ 254.289622][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.314142][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.325863][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.341082][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.364664][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.391981][ T24] usb 6-1: config 0 descriptor?? [ 254.825827][ T5942] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 254.834168][ T5942] cm6533_jd 0003:0D8C:0022.000D: item fetching failed at offset 4/5 [ 254.845723][ T5942] cm6533_jd 0003:0D8C:0022.000D: parse failed [ 254.865269][ T5942] cm6533_jd 0003:0D8C:0022.000D: probe with driver cm6533_jd failed with error -22 [ 254.904235][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 254.940188][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 254.953452][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 254.964855][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 254.974895][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x4 [ 254.985104][ T24] plantronics 0003:047F:FFFF.000E: item fetching failed at offset 11/15 [ 254.997875][ T24] plantronics 0003:047F:FFFF.000E: parse failed [ 255.006541][ T24] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 255.113770][ T5840] usb 6-1: USB disconnect, device number 28 [ 256.057725][ T24] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 256.222257][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.247548][ T24] usb 3-1: config 0 has no interface number 0 [ 256.266508][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 256.285794][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.317218][ T24] usb 3-1: config 0 descriptor?? [ 256.351454][ T24] usb 3-1: selecting invalid altsetting 1 [ 256.389296][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 256.407534][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 256.552139][ T24] DVB: Unable to find symbol ves1820_attach() [ 256.760450][ T24] DVB: Unable to find symbol stv0297_attach() [ 256.781566][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 256.810241][ T24] usb 3-1: USB disconnect, device number 48 [ 257.015336][ T5946] usb 5-1: USB disconnect, device number 45 [ 257.022650][ T5840] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 257.199836][ T7451] usb 1-1: USB disconnect, device number 37 [ 257.208094][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.257545][ T5840] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 257.258158][ T7451] usblp0: removed [ 257.274591][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.329264][ T5840] usb 6-1: config 0 descriptor?? [ 257.607632][ T5946] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 257.767631][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 257.786175][ T5840] lenovo 0003:17EF:60A3.000F: item fetching failed at offset 5/7 [ 257.818635][ T5840] lenovo 0003:17EF:60A3.000F: hid_parse failed [ 257.840196][ T5946] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 257.852384][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.863051][ T5840] lenovo 0003:17EF:60A3.000F: probe with driver lenovo failed with error -22 [ 257.864033][ T5946] usb 5-1: Product: syz [ 257.888960][ T5946] usb 5-1: Manufacturer: syz [ 257.900284][ T5946] usb 5-1: SerialNumber: syz [ 257.948324][ T5946] usb 5-1: config 0 descriptor?? [ 257.971564][ T5946] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 258.307666][ T5959] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 258.430697][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.446392][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.457960][ T5959] usb 3-1: device descriptor read/64, error -71 [ 258.697579][ T5959] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 258.837650][ T5959] usb 3-1: device descriptor read/64, error -71 [ 258.950369][ T5959] usb usb3-port1: attempt power cycle [ 259.007610][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 259.181208][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 259.188381][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.219939][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.231534][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.246322][ T24] usb 1-1: config 0 descriptor?? [ 259.254261][ T5946] gspca_ov534_9: reg_w failed -71 [ 259.297623][ T5959] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 259.321691][ T5959] usb 3-1: device descriptor read/8, error -71 [ 259.551404][ T5946] gspca_ov534_9: Unknown sensor 0000 [ 259.551535][ T5946] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 259.569949][ T5959] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 259.599418][ T5959] usb 3-1: device descriptor read/8, error -71 [ 259.608154][ T5946] usb 5-1: USB disconnect, device number 46 [ 259.713361][ T24] usb 1-1: Cannot set autoneg [ 259.720169][ T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 259.742133][ T5959] usb usb3-port1: unable to enumerate USB device [ 259.764599][ T24] usb 1-1: USB disconnect, device number 38 [ 259.864316][ T5840] usb 6-1: USB disconnect, device number 29 [ 259.930841][ T8727] xt_hashlimit: invalid rate [ 260.143696][ T5840] IPVS: starting estimator thread 0... [ 260.174230][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 260.267606][ T8735] IPVS: using max 29 ests per chain, 69600 per kthread [ 260.637631][ T5840] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 260.909593][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.946215][ T5840] usb 1-1: not running at top speed; connect to a high speed hub [ 260.975540][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.009678][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.044461][ T5840] usb 1-1: config 11 has an invalid interface number: 3 but max is 1 [ 261.244732][ T5840] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 261.309256][ T5840] usb 1-1: config 11 has 1 interface, different from the descriptor's value: 2 [ 261.345175][ T5840] usb 1-1: config 11 has no interface number 0 [ 261.365483][ T5840] usb 1-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd [ 261.401547][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.436365][ T5840] usb 1-1: Product: syz [ 261.448935][ T5840] usb 1-1: Manufacturer: syz [ 261.616929][ T5840] usb 1-1: SerialNumber: syz [ 262.117798][ T5840] usb 1-1: USB disconnect, device number 39 [ 262.160118][ T8769] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.323558][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.935911][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.973175][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.992990][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.012832][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.167676][ T5959] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 263.318190][ T5959] usb 1-1: device descriptor read/64, error -71 [ 263.570711][ T5959] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 263.693365][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.702790][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.727567][ T5959] usb 1-1: device descriptor read/64, error -71 [ 263.849404][ T5959] usb usb1-port1: attempt power cycle [ 264.197684][ T5959] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 264.229231][ T5959] usb 1-1: device descriptor read/8, error -71 [ 264.410987][ T8804] x_tables: duplicate underflow at hook 1 [ 264.457265][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 264.477074][ T5959] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 264.493229][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 264.511548][ T8806] fuse: Unknown parameter 'gM EvbS/4A&swtT>y[CP' [ 264.538308][ T5959] usb 1-1: device descriptor read/8, error -71 [ 264.649235][ T24] usb 6-1: device descriptor read/64, error -71 [ 264.660975][ T5959] usb usb1-port1: unable to enumerate USB device [ 264.975467][ T8818] netlink: 'syz.1.657': attribute type 15 has an invalid length. [ 264.984842][ T5907] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.987996][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 265.130033][ T24] usb 6-1: device descriptor read/64, error -71 [ 265.208389][ T7851] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.222955][ T8821] net veth1_virt_wifi : renamed from virt_wifi0 [ 265.239313][ T24] usb usb6-port1: attempt power cycle [ 265.377655][ T8823] bridge0: entered allmulticast mode [ 265.407806][ T5840] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.492490][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.524308][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.588789][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 265.618329][ T24] usb 6-1: device descriptor read/8, error -71 [ 265.864856][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 265.882625][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 265.909134][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 265.928425][ T24] usb 6-1: device descriptor read/8, error -71 [ 266.039588][ T24] usb usb6-port1: unable to enumerate USB device [ 266.078222][ T5840] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 266.163977][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.173460][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.184450][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.196569][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.232817][ T5981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.241678][ T5981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.245793][ T5840] usb 5-1: No LPM exit latency info found, disabling LPM. [ 266.262676][ T5840] usb 5-1: config 110 has an invalid interface number: 208 but max is 0 [ 266.271439][ T5840] usb 5-1: config 110 contains an unexpected descriptor of type 0x2, skipping [ 266.282395][ T5840] usb 5-1: config 110 has 2 interfaces, different from the descriptor's value: 1 [ 266.293465][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 266.301407][ T5840] usb 5-1: config 110 has no interface number 1 [ 266.308327][ T5840] usb 5-1: config 110 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 266.320657][ T5840] usb 5-1: config 110 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.335717][ T5840] usb 5-1: too many endpoints for config 110 interface 208 altsetting 120: 197, using maximum allowed: 30 [ 266.349109][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0x7 has invalid maxpacket 1024, setting to 0 [ 266.361251][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0x5 has invalid maxpacket 4318, setting to 8 [ 266.373014][ T5840] usb 5-1: config 110 interface 208 altsetting 120 has a duplicate endpoint with address 0x5, skipping [ 266.384439][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 266.398571][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0xF has invalid maxpacket 1527, setting to 8 [ 266.410746][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0xB is Bulk; changing to Interrupt [ 266.422272][ T5840] usb 5-1: config 110 interface 208 altsetting 120 endpoint 0x4 has invalid maxpacket 512, setting to 0 [ 266.433937][ T5840] usb 5-1: config 110 interface 208 altsetting 120 has 8 endpoint descriptors, different from the interface descriptor's value: 197 [ 266.448657][ T5840] usb 5-1: config 110 interface 0 has no altsetting 0 [ 266.455772][ T5840] usb 5-1: config 110 interface 208 has no altsetting 0 [ 266.480361][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.492011][ T5907] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 266.502311][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.514395][ T5907] usb 3-1: config 0 descriptor?? [ 266.619590][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.934289][ T5907] razer 0003:1532:010D.0010: unbalanced delimiter at end of report description [ 266.955153][ T5907] razer 0003:1532:010D.0010: probe with driver razer failed with error -22 [ 267.133972][ T24] usb 3-1: USB disconnect, device number 53 [ 267.160516][ T5942] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 267.325540][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 267.333670][ T5942] usb 1-1: config 252 has an invalid interface number: 187 but max is 0 [ 267.343372][ T5942] usb 1-1: config 252 has no interface number 0 [ 267.351199][ T5942] usb 1-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 267.360500][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.605238][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.622808][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.633611][ T5942] usb 1-1: USB disconnect, device number 44 [ 267.764765][ T8862] binder_alloc: 8861: pid 8861 spamming oneway? 1 buffers allocated for a total size of 4096 [ 267.785309][ T8862] binder_alloc: 8861: pid 8861 spamming oneway? 2 buffers allocated for a total size of 5120 [ 267.855328][ T8864] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 267.866943][ T8865] binder: BINDER_SET_CONTEXT_MGR already set [ 267.873543][ T8865] binder: 8861:8865 ioctl 4018620d 200000000100 returned -16 [ 267.882024][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'. [ 267.906252][ T8864] team_slave_0: entered promiscuous mode [ 267.912861][ T8864] team_slave_1: entered promiscuous mode [ 267.921188][ T8864] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.952965][ T8864] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 267.962011][ T8864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.671'. [ 268.201186][ T8873] loop7: detected capacity change from 0 to 16384 [ 268.417458][ T5840] usb 5-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=51.44 [ 268.443041][ T8874] loop7: detected capacity change from 16384 to 16376 [ 268.469534][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.500991][ T5840] usb 5-1: can't set config #110, error -71 [ 268.516699][ T5840] usb 5-1: USB disconnect, device number 47 [ 269.109267][ T8898] input: syz1 as /devices/virtual/input/input25 [ 269.223978][ T8898] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 269.521429][ T8897] ip6gretap2: entered allmulticast mode [ 269.741392][ T8899] gretap1: entered allmulticast mode [ 269.761465][ T8899] bond1: (slave gretap1): making interface the new active one [ 269.800541][ T8899] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 270.068074][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.484727][ T8918] netlink: 80 bytes leftover after parsing attributes in process `syz.0.683'. [ 271.883921][ T8944] input: syz1 as /devices/virtual/input/input26 [ 272.109491][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 272.180714][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 272.290984][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.319035][ T24] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 272.367820][ T24] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 272.394086][ T24] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 272.430687][ T24] usb 3-1: config 129 has no interface number 0 [ 272.462922][ T24] usb 3-1: config 129 has no interface number 1 [ 272.497710][ T24] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.558923][ T24] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 272.623329][ T24] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 272.692164][ T24] usb 3-1: config 129 interface 135 has no altsetting 0 [ 272.731234][ T24] usb 3-1: config 129 interface 5 has no altsetting 0 [ 272.772688][ T24] usb 3-1: string descriptor 0 read error: -22 [ 272.797351][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 272.829558][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.930820][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.957720][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 273.180438][ T5900] usb 3-1: USB disconnect, device number 54 [ 273.279140][ T5907] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 273.489024][ T5907] usb 1-1: config index 0 descriptor too short (expected 70, got 36) [ 273.518425][ T5907] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 273.527124][ T5907] usb 1-1: config 0 has no interface number 0 [ 273.572150][ T5907] usb 1-1: config 0 interface 195 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 273.612118][ T5907] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 273.705210][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.776435][ T8992] syz_tun: entered allmulticast mode [ 273.850931][ T5907] usb 1-1: Product: syz [ 273.864539][ T8992] dvmrp6: entered allmulticast mode [ 273.957669][ T5907] usb 1-1: Manufacturer: syz [ 273.982434][ T30] audit: type=1326 audit(1766750456.101:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8985 comm="syz.1.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x0 [ 273.983051][ T5907] usb 1-1: SerialNumber: syz [ 274.171554][ T5907] usb 1-1: config 0 descriptor?? [ 274.201060][ T8968] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 274.397672][ T5942] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 274.397782][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.421286][ T5907] asix 1-1:0.195: probe with driver asix failed with error -71 [ 274.427913][ T5942] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 274.467820][ T5907] usb 1-1: USB disconnect, device number 45 [ 274.753102][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.5.704'. [ 274.897679][ T5840] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 275.027702][ T5840] usb 5-1: device descriptor read/64, error -71 [ 275.407894][ T5840] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 275.607529][ T5840] usb 5-1: device descriptor read/64, error -71 [ 275.737744][ T5840] usb usb5-port1: attempt power cycle [ 276.097681][ T5840] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 276.128187][ T5840] usb 5-1: device descriptor read/8, error -71 [ 276.437689][ T5840] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 276.480548][ T5840] usb 5-1: device descriptor read/8, error -71 [ 276.547734][ T5942] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 276.554515][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.592223][ T5942] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 276.613906][ T5840] usb usb5-port1: unable to enumerate USB device [ 276.987166][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.997278][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.006865][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.043030][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.108602][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.180055][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.253393][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.341821][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.381662][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.452624][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 277.568295][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.587686][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.632310][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.725606][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.881565][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.099230][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.399251][ T5907] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 278.488300][ T9068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.609879][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 278.625201][ T5907] usb 3-1: device descriptor read/all, error -61 [ 278.707603][ T5942] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 278.713768][ T5942] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 278.716648][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.787564][ T5907] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 278.922693][ T9089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.942906][ T5907] usb 3-1: device descriptor read/64, error -71 [ 279.001385][ T9089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.089015][ T5907] usb usb3-port1: attempt power cycle [ 279.124652][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.716'. [ 279.203249][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 279.477907][ T5907] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 279.534926][ T5907] usb 3-1: device descriptor read/8, error -71 [ 279.699687][ T9101] loop5: detected capacity change from 0 to 7 [ 279.722514][ T9101] loop5: [POWERTEC] [ 279.787550][ T5907] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 279.819570][ T5907] usb 3-1: device descriptor read/8, error -71 [ 279.937921][ T5907] usb usb3-port1: unable to enumerate USB device [ 280.385389][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.718'. [ 280.420977][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.448037][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.635608][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.721'. [ 280.717110][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 281.518782][ T9151] syz.1.723 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.587541][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 281.587568][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.594467][ T5942] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 283.907631][ T5942] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 283.907816][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.914500][ T5942] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 284.236706][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 284.257695][ T5840] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 284.407531][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 284.416572][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.434325][ T5942] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 284.443983][ T5840] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 284.576289][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.671257][ T5840] usb 3-1: config 0 descriptor?? [ 284.734621][ T5840] usb 3-1: can't set config #0, error -71 [ 284.740564][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 284.755283][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.795954][ T5840] usb 3-1: USB disconnect, device number 59 [ 284.823819][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.887851][ T5942] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 284.918615][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.073599][ T5942] usb 5-1: config 0 descriptor?? [ 285.247304][ T5840] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 285.397227][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 285.433436][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 285.451010][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.470286][ T5840] usb 3-1: not running at top speed; connect to a high speed hub [ 285.495137][ T5840] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.527524][ T5840] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.570376][ T5840] usb 3-1: config 1 has no interface number 1 [ 285.658634][ T5840] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.730425][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.777667][ T5840] usb 3-1: Product: syz [ 285.794661][ T5840] usb 3-1: Manufacturer: syz [ 285.858715][ T5840] usb 3-1: SerialNumber: syz [ 286.295684][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.347261][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.810405][ T5840] usb 3-1: 2:1 : unsupported format bits 0x80 [ 286.903298][ T5840] usb 3-1: USB disconnect, device number 60 [ 287.005319][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.345585][ T5942] usbhid 5-1:0.0: can't add hid device: -71 [ 287.370887][ T5942] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.429512][ T5942] usb 5-1: USB disconnect, device number 52 [ 287.700030][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.711418][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.752193][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 287.828389][ T5900] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 287.891899][ T9249] bond3: entered promiscuous mode [ 287.897826][ T9249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.000677][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.014722][ T5900] usb 3-1: not running at top speed; connect to a high speed hub [ 288.025709][ T5900] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 288.034627][ T5900] usb 3-1: config 9 has no interface number 0 [ 288.041231][ T5900] usb 3-1: config 9 interface 1 has no altsetting 0 [ 288.051967][ T5900] usb 3-1: New USB device found, idVendor=19d2, idProduct=0025, bcdDevice=ac.91 [ 288.134668][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.147681][ T5900] usb 3-1: Product: syz [ 288.152202][ T5900] usb 3-1: Manufacturer: syz [ 288.156932][ T5900] usb 3-1: SerialNumber: syz [ 288.377645][ T5942] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 288.487871][ T9270] netlink: 'syz.4.749': attribute type 27 has an invalid length. [ 288.597809][ T5942] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 288.607940][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.617072][ T5942] usb 1-1: Product: syz [ 288.650563][ T5942] usb 1-1: Manufacturer: syz [ 288.655783][ T5942] usb 1-1: SerialNumber: syz [ 288.725794][ T5942] usb 1-1: config 0 descriptor?? [ 288.939157][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.967936][ T5840] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 288.986956][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.047314][ T5900] qmi_wwan 3-1:9.1: probe with driver qmi_wwan failed with error -22 [ 289.152425][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 289.162822][ T5840] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.177251][ T5900] usb 3-1: USB disconnect, device number 61 [ 289.186325][ T5840] usb 5-1: config 0 has no interface number 0 [ 289.210686][ T9270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.236553][ T9270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.360863][ T5942] airspy 1-1:0.0: Board ID: 00 [ 289.377554][ T5942] airspy 1-1:0.0: Firmware version: [ 289.488429][ T5840] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 289.523589][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.535499][ T5840] usb 5-1: Product: syz [ 289.543619][ T5840] usb 5-1: Manufacturer: syz [ 289.553730][ T5840] usb 5-1: SerialNumber: syz [ 289.685441][ T5840] usb 5-1: config 0 descriptor?? [ 289.709819][ T5840] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 290.159103][ T5942] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 290.180666][ T5942] airspy 1-1:0.0: Registered as swradio24 [ 290.246602][ T5942] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 290.248026][ T5840] gspca_spca1528: reg_w err -110 [ 290.279430][ T5840] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 290.282068][ T5942] usb 1-1: USB disconnect, device number 46 [ 290.294351][ T9270] gretap1: left promiscuous mode [ 290.359919][ T9270] vlan2: left promiscuous mode [ 290.370065][ T9270] bond0: left promiscuous mode [ 290.386491][ T9270] bond_slave_0: left promiscuous mode [ 290.492009][ T9270] bond_slave_1: left promiscuous mode [ 290.612578][ T9270] bond3: left promiscuous mode [ 290.719576][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.764083][ T9271] bridge0: port 1(syz_tun) entered blocking state [ 290.866126][ T9271] bridge0: port 1(syz_tun) entered disabled state [ 290.915832][ T9271] syz_tun: entered allmulticast mode [ 291.021077][ T9271] syz_tun: entered promiscuous mode [ 291.044871][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.055260][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.066670][ T34] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.957109][ T30] audit: type=1326 audit(1766750474.091:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.028133][ T30] audit: type=1326 audit(1766750474.171:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.056010][ T30] audit: type=1326 audit(1766750474.171:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.081571][ T30] audit: type=1326 audit(1766750474.171:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.116072][ T30] audit: type=1326 audit(1766750474.171:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.142708][ T30] audit: type=1326 audit(1766750474.191:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.175534][ T30] audit: type=1326 audit(1766750474.191:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.226159][ T30] audit: type=1326 audit(1766750474.221:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.307654][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.360528][ T30] audit: type=1326 audit(1766750474.281:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 292.455911][ T30] audit: type=1326 audit(1766750474.281:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.1.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb798f749 code=0x7ffc0000 [ 293.210730][ T5942] usb 5-1: USB disconnect, device number 53 [ 294.230149][ T9336] PKCS7: Unknown OID: [5] (bad) [ 294.237111][ T9336] PKCS7: Only support pkcs7_signedData type [ 294.780794][ T9345] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 294.956792][ T9345] bond3: entered promiscuous mode [ 294.964758][ T9345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.020087][ T5942] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 295.035279][ T9346] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 295.150483][ T9346] ip6gretap2: entered allmulticast mode [ 295.677559][ T7451] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 295.813068][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 295.860708][ T7451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 295.873341][ T7451] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 295.892960][ T7451] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 295.905104][ T7451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.928283][ T9366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.772'. [ 295.967682][ T5840] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 295.979820][ T7451] usb 6-1: config 0 descriptor?? [ 295.987204][ T9357] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 296.107719][ T5840] usb 5-1: device descriptor read/64, error -71 [ 296.207721][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.230486][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.279703][ T7451] usbhid 6-1:0.0: can't add hid device: -71 [ 296.285953][ T7451] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.407579][ T5840] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 296.507837][ T7451] usb 6-1: USB disconnect, device number 34 [ 296.657673][ T5840] usb 5-1: device descriptor read/64, error -71 [ 296.798144][ T5840] usb usb5-port1: attempt power cycle [ 296.908700][ T7451] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 297.088400][ T7451] usb 6-1: Using ep0 maxpacket: 32 [ 297.098939][ T7451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 297.147661][ T5840] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 297.210739][ T7451] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 297.225126][ T7451] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 297.235038][ T7451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.247708][ T5840] usb 5-1: device descriptor read/8, error -71 [ 297.291120][ T7451] usb 6-1: config 0 descriptor?? [ 297.310627][ T7451] hub 6-1:0.0: bad descriptor, ignoring hub [ 297.317210][ T7451] hub 6-1:0.0: probe with driver hub failed with error -5 [ 297.497971][ T5840] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 297.519071][ T5840] usb 5-1: device descriptor read/8, error -71 [ 297.649460][ T5840] usb usb5-port1: unable to enumerate USB device [ 297.743393][ T7451] hid-multitouch 0003:0EEF:72C4.0011: unknown main item tag 0x0 [ 297.780017][ T7451] hid-multitouch 0003:0EEF:72C4.0011: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 297.988358][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.010511][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.025709][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.039215][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.084714][ T39] usb 6-1: USB disconnect, device number 35 [ 298.468641][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 298.951749][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.010771][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.100655][ T9399] bridge_slave_1: left allmulticast mode [ 299.117647][ T9399] bridge_slave_1: left promiscuous mode [ 299.125858][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.199063][ T9399] bridge_slave_0: left allmulticast mode [ 299.222519][ T9399] bridge_slave_0: left promiscuous mode [ 299.237338][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.318733][ T7451] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 299.485967][ T7451] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 299.504075][ T7451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.517145][ T7451] usb 1-1: Product: syz [ 299.523060][ T7451] usb 1-1: Manufacturer: syz [ 299.547741][ T7451] usb 1-1: SerialNumber: syz [ 299.677717][ T5840] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 299.801214][ T7451] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 299.847099][ T7451] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 299.871961][ T5840] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 299.893960][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.905214][ T7451] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 299.924153][ T7451] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.936016][ T5840] usb 5-1: config 0 descriptor?? [ 299.956520][ T5840] cp210x 5-1:0.0: cp210x converter detected [ 299.966801][ T7451] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 300.004037][ T7451] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 300.080874][ T7451] usb 1-1: USB disconnect, device number 48 [ 300.310693][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.392153][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.514821][ T5840] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 300.549098][ T5840] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 300.581065][ T5840] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 300.621799][ T5840] usb 5-1: cp210x converter now attached to ttyUSB0 [ 300.840792][ T39] usb 5-1: USB disconnect, device number 58 [ 300.878417][ T39] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 300.906322][ T39] cp210x 5-1:0.0: device disconnected [ 301.487657][ T9457] vivid-007: ================= START STATUS ================= [ 301.495776][ T9457] vivid-007: Enable Output Cropping: true [ 301.502206][ T9457] vivid-007: Enable Output Composing: true [ 301.508351][ T9457] vivid-007: Enable Output Scaler: true [ 301.514125][ T9457] vivid-007: Tx RGB Quantization Range: Automatic [ 301.520825][ T9457] vivid-007: Transmit Mode: HDMI [ 301.526084][ T9457] vivid-007: Hotplug Present: 0x00000000 [ 301.532006][ T9457] vivid-007: RxSense Present: 0x00000000 [ 301.547606][ T9457] vivid-007: EDID Present: 0x00000000 [ 301.553650][ T9457] vivid-007: ================== END STATUS ================== [ 302.667781][ T5840] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 302.757652][ T5942] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 302.827656][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 302.844670][ T5840] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 302.871861][ T5840] usb 5-1: config 0 has no interface number 0 [ 302.902299][ T5840] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 302.942545][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.943501][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.963353][ T5840] usb 5-1: Product: syz [ 302.963380][ T5840] usb 5-1: Manufacturer: syz [ 302.963397][ T5840] usb 5-1: SerialNumber: syz [ 302.978812][ T5840] usb 5-1: config 0 descriptor?? [ 302.998584][ T5840] redrat3 5-1:0.83: Couldn't find all endpoints [ 303.066702][ T5942] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.097471][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.140323][ T5942] usb 1-1: config 0 descriptor?? [ 303.388848][ T5942] usbhid 1-1:0.0: can't add hid device: -71 [ 303.395411][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.455719][ T5942] usb 1-1: USB disconnect, device number 49 [ 303.538957][ T39] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 303.707803][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 303.729186][ T39] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 303.747942][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.756292][ T39] usb 6-1: Product: syz [ 303.764489][ T39] usb 6-1: Manufacturer: syz [ 303.780013][ T39] usb 6-1: SerialNumber: syz [ 303.803948][ T39] usb 6-1: config 0 descriptor?? [ 303.822398][ T39] redrat3 6-1:0.0: Couldn't find all endpoints [ 303.870710][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.891148][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.918650][ T5942] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 304.054290][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.071572][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.092159][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.127506][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.163383][ T5942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.187635][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.219354][ T5942] usb 1-1: config 0 descriptor?? [ 304.415085][ T39] usb 6-1: USB disconnect, device number 36 [ 304.625641][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.804'. [ 304.649464][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 304.707236][ T5942] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 304.820545][ T9511] fuse: Unknown parameter '0x0000000000000003j!Ɛ`@9JyZ "H;ֈGg.8sf@-aGŸP^t~90YҚ4?ۥk tq H'غd(5na 32! (syz.0.799) [ 305.433886][ T5907] usb 5-1: USB disconnect, device number 59 [ 305.572439][ T39] usb 1-1: USB disconnect, device number 50 [ 306.753311][ T9546] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 306.762826][ T39] IPVS: starting estimator thread 0... [ 306.825470][ T9546] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 306.920802][ T9548] IPVS: using max 27 ests per chain, 64800 per kthread [ 307.228059][ T39] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 307.372539][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.448048][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.456886][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 307.468830][ T39] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.544890][ T39] usb 6-1: config 0 has no interfaces? [ 307.581115][ T39] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 307.620856][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.670977][ T39] usb 6-1: config 0 descriptor?? [ 307.754761][ T9572] binder_alloc: 9570: pid 9570 spamming oneway? 1 buffers allocated for a total size of 4096 [ 307.811090][ T9572] binder_alloc: 9570: pid 9570 spamming oneway? 2 buffers allocated for a total size of 5120 [ 308.331865][ T39] usb 6-1: USB disconnect, device number 37 [ 308.486271][ T30] audit: type=1326 audit(1766750490.621:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 308.720370][ T30] audit: type=1326 audit(1766750490.651:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 308.807625][ T30] audit: type=1326 audit(1766750490.651:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 308.962630][ T30] audit: type=1326 audit(1766750490.651:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.067760][ T30] audit: type=1326 audit(1766750490.651:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.132566][ T30] audit: type=1326 audit(1766750490.651:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.220980][ T30] audit: type=1326 audit(1766750490.651:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.527973][ T30] audit: type=1326 audit(1766750490.651:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.607646][ T30] audit: type=1326 audit(1766750490.651:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 309.717822][ T30] audit: type=1326 audit(1766750490.651:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229058f749 code=0x7ffc0000 [ 310.011981][ T9612] vim2m vim2m.0: vidioc_s_fmt queue busy [ 310.896861][ T9622] ALSA: mixer_oss: invalid OSS volume '' [ 312.577649][ T5840] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 312.747670][ T5942] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 312.768961][ T5840] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 312.800140][ T5840] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 312.838036][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 312.919772][ T5840] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.928560][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 312.936039][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.957533][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.068519][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.090247][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.099495][ T5840] usb 5-1: Product: syz [ 313.099519][ T5840] usb 5-1: Manufacturer: syz [ 313.099536][ T5840] usb 5-1: SerialNumber: syz [ 313.150462][ T5840] usb 5-1: config 0 descriptor?? [ 313.187655][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.187943][ T5907] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 313.222898][ T5840] usb 5-1: selecting invalid altsetting 0 [ 313.376465][ T5942] usb 6-1: config 0 descriptor?? [ 313.447822][ T5942] hub 6-1:0.0: USB hub found [ 313.467717][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.511104][ T5840] usb 5-1: USB disconnect, device number 60 [ 313.522303][ T5907] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.575464][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.592256][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.652499][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.712115][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.722859][ T5907] usb 3-1: invalid MIDI out EP 0 [ 313.813239][ T5942] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 313.911526][ T9656] fuse: Unknown parameter 'rootmod' [ 314.006192][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.056820][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 314.165129][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.179384][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.322505][ T5942] usbhid 6-1:0.0: can't add hid device: -71 [ 314.363356][ T5942] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 314.428054][ T5907] usb 3-1: USB disconnect, device number 63 [ 314.429266][ T5942] usb 6-1: USB disconnect, device number 38 [ 316.150249][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.167604][ T5840] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 316.176299][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.338329][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 316.351462][ T5840] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 316.377579][ T5840] usb 3-1: config 0 has no interface number 0 [ 316.394848][ T5840] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 316.420233][ T5840] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 316.445172][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.455870][ T5840] usb 3-1: Product: syz [ 316.460520][ T5840] usb 3-1: Manufacturer: syz [ 316.465678][ T5840] usb 3-1: SerialNumber: syz [ 316.518965][ T5840] usb 3-1: config 0 descriptor?? [ 316.567799][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 316.882764][ T9693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 318.246523][ T5840] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 318.258349][ T5840] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 318.308123][ T5840] asix 3-1:0.188: probe with driver asix failed with error -71 [ 318.334655][ T5840] usb 3-1: USB disconnect, device number 64 [ 318.760323][ T9738] fuse: Unknown parameter 'gj++jK%A}6' [ 321.776731][ T9757] netlink: 88 bytes leftover after parsing attributes in process `syz.4.864'. [ 322.073877][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 322.073900][ T30] audit: type=1800 audit(1766750504.211:418): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.866" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 322.388747][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.400339][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.407960][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.773555][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 322.807587][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'. [ 323.081689][ T5959] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 323.237667][ T30] audit: type=1326 audit(1766750505.361:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107f8f749 code=0x7ffc0000 [ 323.307517][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 323.326423][ T5959] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 323.339653][ T30] audit: type=1326 audit(1766750505.361:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.2.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5107f8f749 code=0x7ffc0000 [ 323.364748][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.433381][ T5959] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 323.588297][ T7451] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 324.207589][ T7451] usb 5-1: Using ep0 maxpacket: 8 [ 324.244889][ T7451] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.273248][ T7451] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 324.301006][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 324.314975][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 324.337676][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 324.375378][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.416670][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 324.439951][ T7451] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 324.493576][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 324.522496][ T7451] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 324.571940][ T7451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.605651][ T7451] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 324.615628][ T7451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.646122][ T7451] usb 5-1: Product: syz [ 324.650700][ T7451] usb 5-1: Manufacturer: syz [ 324.660629][ T7451] usb 5-1: SerialNumber: syz [ 324.702531][ T7451] usb 5-1: config 0 descriptor?? [ 324.722063][ T7451] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.896967][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.964095][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.978624][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.001197][ T5959] usb 1-1: USB disconnect, device number 51 [ 325.035496][ T7451] usb 5-1: USB disconnect, device number 61 [ 325.223523][ T9807] loop9: detected capacity change from 0 to 7 [ 325.233891][ T9807] Dev loop9: unable to read RDB block 7 [ 325.241250][ T9807] loop9: unable to read partition table [ 325.247353][ T9807] loop9: partition table beyond EOD, truncated [ 325.254858][ T9807] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 325.323283][ T9808] Dev loop9: unable to read RDB block 7 [ 325.337703][ T9808] loop9: unable to read partition table [ 325.348123][ T9808] loop9: partition table beyond EOD, truncated [ 325.356888][ T9808] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 325.680486][ T9833] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 325.749274][ T9833] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 325.761544][ T9835] netlink: 7 bytes leftover after parsing attributes in process `syz.0.881'. [ 325.871958][ T9835] netlink: 7 bytes leftover after parsing attributes in process `syz.0.881'. [ 325.906638][ T30] audit: type=1326 audit(1766750508.041:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ab8f749 code=0x7ffc0000 [ 325.984407][ T30] audit: type=1326 audit(1766750508.041:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa15ab8f749 code=0x7ffc0000 [ 326.066634][ T30] audit: type=1326 audit(1766750508.041:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ab8f749 code=0x7ffc0000 [ 326.108084][ T30] audit: type=1326 audit(1766750508.041:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa15ab8df90 code=0x7ffc0000 [ 326.131916][ T30] audit: type=1326 audit(1766750508.071:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa15ab8f34b code=0x7ffc0000 [ 326.187688][ T30] audit: type=1326 audit(1766750508.071:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa15ab8f34b code=0x7ffc0000 [ 326.189582][ T5959] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 326.223618][ T30] audit: type=1326 audit(1766750508.091:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa15ab8f34b code=0x7ffc0000 [ 326.308425][ T9848] loop2: detected capacity change from 0 to 7 [ 326.322126][ T9848] Dev loop2: unable to read RDB block 7 [ 326.329859][ T9848] loop2: AHDI p1 p2 p3 [ 326.334753][ T9848] loop2: partition table partially beyond EOD, truncated [ 326.369036][ T9848] loop2: p1 start 1601398130 is beyond EOD, truncated [ 326.386857][ T9848] loop2: p2 start 1702059890 is beyond EOD, truncated [ 326.531593][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.559102][ T5959] usb 1-1: not running at top speed; connect to a high speed hub [ 326.573810][ T5959] usb 1-1: config 188 has an invalid interface number: 3 but max is 1 [ 326.597759][ T5959] usb 1-1: config 188 has an invalid interface number: 11 but max is 1 [ 326.627183][ T5959] usb 1-1: config 188 has no interface number 0 [ 326.657952][ T5959] usb 1-1: config 188 has no interface number 1 [ 326.664870][ T5959] usb 1-1: config 188 interface 3 has no altsetting 0 [ 326.702281][ T5959] usb 1-1: config 188 interface 11 has no altsetting 0 [ 326.768994][ T5959] usb 1-1: New USB device found, idVendor=0510, idProduct=0000, bcdDevice=7f.00 [ 326.810761][ T5959] usb 1-1: New USB device strings: Mfr=30, Product=2, SerialNumber=3 [ 326.842396][ T5959] usb 1-1: Product: syz [ 326.846906][ T5959] usb 1-1: Manufacturer: syz [ 326.891990][ T5959] usb 1-1: SerialNumber: syz [ 327.015466][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.058921][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.118023][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 327.118043][ T30] audit: type=1326 audit(1766750509.261:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ab8f749 code=0x7ffc0000 [ 327.257661][ T30] audit: type=1326 audit(1766750509.301:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ab8f749 code=0x7ffc0000 [ 327.328322][ T9871] random: crng reseeded on system resumption [ 327.467509][ T7451] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 327.627571][ T7451] usb 5-1: Using ep0 maxpacket: 8 [ 327.655375][ T7451] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.670316][ T7451] usb 5-1: config 11 has an invalid interface number: 242 but max is 0 [ 327.680314][ T7451] usb 5-1: config 11 has no interface number 0 [ 327.687295][ T7451] usb 5-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB [ 327.701268][ T7451] usb 5-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8 [ 327.713169][ T7451] usb 5-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024 [ 327.727917][ T7451] usb 5-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024 [ 327.754719][ T7451] usb 5-1: config 11 interface 242 altsetting 225 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 327.768901][ T7451] usb 5-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0 [ 327.783043][ T7451] usb 5-1: config 11 interface 242 has no altsetting 0 [ 327.794979][ T7451] usb 5-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 327.805021][ T7451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.818322][ T7451] usb 5-1: Product: syz [ 327.822808][ T7451] usb 5-1: Manufacturer: syz [ 327.837505][ T7451] usb 5-1: SerialNumber: syz [ 327.853148][ T9867] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 327.861369][ T9867] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 327.984884][ T5959] usb 1-1: USB disconnect, device number 52 [ 327.998186][ T5840] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 328.074857][ T7451] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 328.092727][ T7451] usb 5-1: USB disconnect, device number 62 [ 328.103704][ T9872] Unrecognized hibernate image header format! [ 328.103750][ T9872] PM: hibernation: Image mismatch: architecture specific data [ 328.172478][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.201028][ T5840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.216185][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.234787][ T5840] usb 6-1: Product: syz [ 328.244903][ T5840] usb 6-1: Manufacturer: syz [ 328.255025][ T5840] usb 6-1: SerialNumber: syz [ 329.203243][ T9906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.904'. [ 329.340573][ T5840] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 329.349621][ T5840] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 329.376083][ T5840] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 329.689558][ T5840] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 329.731744][ T5840] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 329.903322][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.923378][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.081499][ T5840] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 330.393135][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.421583][ T5840] usb 3-1: not running at top speed; connect to a high speed hub [ 330.454874][ T5840] usb 3-1: config 14 has an invalid descriptor of length 115, skipping remainder of the config [ 330.483999][ T5840] usb 3-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 330.575539][ T5840] usb 3-1: string descriptor 0 read error: -22 [ 330.600694][ T5840] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 330.612039][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.935362][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.946882][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.999176][ T39] usb 6-1: USB disconnect, device number 39 [ 331.007959][ T39] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 331.179526][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.233430][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.260582][ T5945] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 331.507164][ T5945] usb 1-1: config 16 has an invalid interface number: 168 but max is 0 [ 331.521834][ T5945] usb 1-1: config 16 has no interface number 0 [ 331.552972][ T5945] usb 1-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 331.624156][ T5945] usb 1-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 331.695302][ T5945] usb 1-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 331.772767][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.870022][ T9941] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 331.939718][ T5945] HFC-S_USB 1-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 332.123576][ T5907] usb 1-1: USB disconnect, device number 53 [ 332.238701][ T5840] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 332.399516][ T5840] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 332.415942][ T5840] usb 6-1: config 0 has no interface number 0 [ 332.438554][ T5840] usb 6-1: config 0 interface 98 has no altsetting 0 [ 332.463746][ T5840] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 332.490059][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.514691][ T5840] usb 6-1: Product: syz [ 332.524762][ T5840] usb 6-1: Manufacturer: syz [ 332.537297][ T5840] usb 6-1: SerialNumber: syz [ 332.595842][ T5840] usb 6-1: config 0 descriptor?? [ 332.835430][ T5840] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 333.219100][ T9982] random: crng reseeded on system resumption [ 333.598443][ T5840] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 333.620910][ T5907] usb 3-1: USB disconnect, device number 65 [ 333.785355][ T5840] usb 6-1: device descriptor read/64, error -71 [ 333.996780][T10009] kvm: pic: non byte read [ 334.031978][T10009] kvm: pic: non byte read [ 334.072366][T10009] kvm: pic: non byte read [ 334.079953][ T5840] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 334.089324][T10009] kvm: pic: single mode not supported [ 334.089404][T10009] kvm: pic: non byte read [ 334.114396][T10009] kvm: pic: non byte read [ 334.130136][T10009] kvm: pic: single mode not supported [ 334.130328][T10009] kvm: pic: level sensitive irq not supported [ 334.150894][T10009] kvm: pic: non byte read [ 334.179440][T10009] kvm: pic: non byte read [ 334.200724][T10009] kvm: pic: non byte read [ 334.213457][T10009] kvm: pic: non byte read [ 334.237761][ T5840] usb 6-1: device descriptor read/64, error -71 [ 334.497655][ T5840] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 334.539587][ T5840] usb 6-1: device descriptor read/8, error -71 [ 334.750274][T10021] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 334.758517][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.928'. [ 334.841165][ T5840] usb 6-1: reset high-speed USB device number 40 using dummy_hcd [ 334.904187][ T5840] usb 6-1: device descriptor read/8, error -71 [ 335.028703][ T5840] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 335.047798][ T5840] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 335.056539][ T7451] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 335.077704][ T39] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 335.088847][ T5840] usb 6-1: USB disconnect, device number 40 [ 335.096941][ T7451] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 335.255597][ T7451] ================================================================== [ 335.264436][ T7451] BUG: KASAN: slab-use-after-free in kernfs_root+0xda/0x230 [ 335.271963][ T7451] Read of size 8 at addr ffff88801f3d9030 by task kworker/0:8/7451 [ 335.280091][ T7451] [ 335.282566][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.282599][ T7451] Tainted: [L]=SOFTLOCKUP [ 335.282607][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.282629][ T7451] Workqueue: events request_firmware_work_func [ 335.282676][ T7451] Call Trace: [ 335.282684][ T7451] [ 335.282695][ T7451] dump_stack_lvl+0xe8/0x150 [ 335.282726][ T7451] print_report+0xca/0x240 [ 335.282750][ T7451] ? kernfs_root+0xda/0x230 [ 335.282772][ T7451] kasan_report+0x118/0x150 [ 335.282800][ T7451] ? kernfs_root+0xda/0x230 [ 335.282824][ T7451] ? kernfs_root+0x1c/0x230 [ 335.282848][ T7451] kernfs_root+0xda/0x230 [ 335.282871][ T7451] kernfs_add_one+0x265/0x5c0 [ 335.282903][ T7451] kernfs_create_dir_ns+0xde/0x130 [ 335.282932][ T7451] sysfs_create_dir_ns+0x123/0x280 [ 335.282955][ T7451] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 335.282978][ T7451] ? do_raw_spin_unlock+0x122/0x240 [ 335.283011][ T7451] kobject_add_internal+0x6ab/0xcc0 [ 335.283043][ T7451] kobject_add+0x155/0x220 [ 335.283069][ T7451] ? __pfx_kobject_add+0x10/0x10 [ 335.283091][ T7451] ? __kasan_kmalloc+0x93/0xb0 [ 335.283117][ T7451] ? kobject_init+0x83/0x1e0 [ 335.283143][ T7451] get_device_parent+0x316/0x3a0 [ 335.283165][ T7451] device_add+0x2e1/0xb80 [ 335.283187][ T7451] firmware_fallback_sysfs+0x2e4/0xa40 [ 335.283221][ T7451] ? kmem_cache_free+0x197/0x620 [ 335.283247][ T7451] _request_firmware+0xfa4/0x1680 [ 335.283285][ T7451] ? __pfx__request_firmware+0x10/0x10 [ 335.283315][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 335.283337][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 335.283361][ T7451] request_firmware_work_func+0xaf/0x1c0 [ 335.283394][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 335.283416][ T7451] process_scheduled_works+0xad1/0x1770 [ 335.283454][ T7451] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.283474][ T7451] ? do_raw_spin_lock+0x121/0x290 [ 335.283511][ T7451] worker_thread+0x8a0/0xda0 [ 335.283540][ T7451] ? __kthread_parkme+0x7b/0x200 [ 335.283569][ T7451] kthread+0x711/0x8a0 [ 335.283598][ T7451] ? __pfx_worker_thread+0x10/0x10 [ 335.283619][ T7451] ? __pfx_kthread+0x10/0x10 [ 335.283658][ T7451] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.283688][ T7451] ? __pfx_kthread+0x10/0x10 [ 335.283713][ T7451] ret_from_fork+0x510/0xa50 [ 335.283733][ T7451] ? __pfx_ret_from_fork+0x10/0x10 [ 335.283752][ T7451] ? __switch_to+0xc9e/0x1480 [ 335.283784][ T7451] ? __pfx_kthread+0x10/0x10 [ 335.283812][ T7451] ret_from_fork_asm+0x1a/0x30 [ 335.283851][ T7451] [ 335.283860][ T7451] [ 335.545107][ T7451] Allocated by task 7451: [ 335.549690][ T7451] kasan_save_track+0x3e/0x80 [ 335.554608][ T7451] __kasan_slab_alloc+0x6c/0x80 [ 335.559606][ T7451] kmem_cache_alloc_noprof+0x37d/0x710 [ 335.565207][ T7451] __kernfs_new_node+0xdc/0x880 [ 335.570294][ T7451] kernfs_new_node+0x102/0x210 [ 335.575102][ T7451] kernfs_create_dir_ns+0x44/0x130 [ 335.580708][ T7451] sysfs_create_dir_ns+0x123/0x280 [ 335.585958][ T7451] kobject_add_internal+0x6ab/0xcc0 [ 335.591211][ T7451] kobject_add+0x155/0x220 [ 335.595661][ T7451] get_device_parent+0x316/0x3a0 [ 335.600632][ T7451] device_add+0x2e1/0xb80 [ 335.605001][ T7451] firmware_fallback_sysfs+0x2e4/0xa40 [ 335.610865][ T7451] _request_firmware+0xfa4/0x1680 [ 335.615983][ T7451] request_firmware_work_func+0xaf/0x1c0 [ 335.621838][ T7451] process_scheduled_works+0xad1/0x1770 [ 335.627867][ T7451] worker_thread+0x8a0/0xda0 [ 335.633051][ T7451] kthread+0x711/0x8a0 [ 335.637458][ T7451] ret_from_fork+0x510/0xa50 [ 335.642452][ T7451] ret_from_fork_asm+0x1a/0x30 [ 335.647356][ T7451] [ 335.649796][ T7451] Freed by task 15: [ 335.653718][ T7451] kasan_save_track+0x3e/0x80 [ 335.658633][ T7451] kasan_save_free_info+0x46/0x50 [ 335.663886][ T7451] __kasan_slab_free+0x5c/0x80 [ 335.669046][ T7451] kmem_cache_free+0x197/0x620 [ 335.673849][ T7451] rcu_core+0xc8e/0x1720 [ 335.678308][ T7451] handle_softirqs+0x22b/0x7c0 [ 335.683199][ T7451] run_ksoftirqd+0x36/0x60 [ 335.687741][ T7451] smpboot_thread_fn+0x542/0xa60 [ 335.692725][ T7451] kthread+0x711/0x8a0 [ 335.696918][ T7451] ret_from_fork+0x510/0xa50 [ 335.701554][ T7451] ret_from_fork_asm+0x1a/0x30 [ 335.706474][ T7451] [ 335.708831][ T7451] Last potentially related work creation: [ 335.714672][ T7451] kasan_save_stack+0x3e/0x60 [ 335.719411][ T7451] kasan_record_aux_stack+0xbd/0xd0 [ 335.724652][ T7451] call_rcu+0xee/0x890 [ 335.728769][ T7451] kernfs_put+0x18e/0x470 [ 335.733148][ T7451] __kernfs_remove+0x47c/0x650 [ 335.737989][ T7451] kernfs_remove+0x38/0x60 [ 335.742441][ T7451] __kobject_del+0xe1/0x330 [ 335.746976][ T7451] kobject_del+0x45/0x60 [ 335.751841][ T7451] device_del+0x75f/0x8e0 [ 335.756586][ T7451] usb_disconnect+0x615/0x990 [ 335.761317][ T7451] hub_event+0x1ca9/0x4ef0 [ 335.766040][ T7451] process_scheduled_works+0xad1/0x1770 [ 335.772250][ T7451] worker_thread+0x8a0/0xda0 [ 335.777059][ T7451] kthread+0x711/0x8a0 [ 335.781520][ T7451] ret_from_fork+0x510/0xa50 [ 335.786235][ T7451] ret_from_fork_asm+0x1a/0x30 [ 335.791306][ T7451] [ 335.793662][ T7451] The buggy address belongs to the object at ffff88801f3d9000 [ 335.793662][ T7451] which belongs to the cache kernfs_node_cache of size 176 [ 335.808536][ T7451] The buggy address is located 48 bytes inside of [ 335.808536][ T7451] freed 176-byte region [ffff88801f3d9000, ffff88801f3d90b0) [ 335.822465][ T7451] [ 335.824832][ T7451] The buggy address belongs to the physical page: [ 335.831643][ T7451] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f3d9 [ 335.840683][ T7451] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 335.848276][ T7451] page_type: f5(slab) [ 335.852307][ T7451] raw: 00fff00000000000 ffff88801aec3dc0 ffffea0001e90080 0000000000000003 [ 335.861111][ T7451] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 335.869815][ T7451] page dumped because: kasan: bad access detected [ 335.876369][ T7451] page_owner tracks the page as allocated [ 335.882242][ T7451] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9693, tgid 9692 (syz.2.849), ts 317340690372, free_ts 316988274325 [ 335.902369][ T7451] post_alloc_hook+0x234/0x290 [ 335.907196][ T7451] get_page_from_freelist+0x24e0/0x2580 [ 335.912821][ T7451] __alloc_frozen_pages_noprof+0x181/0x370 [ 335.919045][ T7451] alloc_pages_mpol+0x232/0x4a0 [ 335.924154][ T7451] allocate_slab+0x86/0x3b0 [ 335.928807][ T7451] ___slab_alloc+0xe53/0x1820 [ 335.933910][ T7451] __slab_alloc+0x65/0x100 [ 335.938376][ T7451] kmem_cache_alloc_noprof+0x40f/0x710 [ 335.943903][ T7451] __kernfs_new_node+0xdc/0x880 [ 335.948908][ T7451] kernfs_new_node+0x102/0x210 [ 335.953900][ T7451] __kernfs_create_file+0x4b/0x2e0 [ 335.959162][ T7451] sysfs_add_file_mode_ns+0x238/0x300 [ 335.964599][ T7451] internal_create_group+0x667/0x1170 [ 335.970076][ T7451] sysfs_create_groups+0x59/0x120 [ 335.975348][ T7451] device_add_attrs+0xe0/0x5a0 [ 335.980143][ T7451] device_add+0x496/0xb80 [ 335.984596][ T7451] page last free pid 23 tgid 23 stack trace: [ 335.990893][ T7451] __free_frozen_pages+0xbc8/0xd30 [ 335.996269][ T7451] tlb_remove_table_rcu+0x85/0x100 [ 336.001876][ T7451] rcu_core+0xc8e/0x1720 [ 336.006267][ T7451] handle_softirqs+0x22b/0x7c0 [ 336.011429][ T7451] run_ksoftirqd+0x36/0x60 [ 336.015913][ T7451] smpboot_thread_fn+0x542/0xa60 [ 336.020988][ T7451] kthread+0x711/0x8a0 [ 336.025275][ T7451] ret_from_fork+0x510/0xa50 [ 336.030100][ T7451] ret_from_fork_asm+0x1a/0x30 [ 336.035105][ T7451] [ 336.037461][ T7451] Memory state around the buggy address: [ 336.043122][ T7451] ffff88801f3d8f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 336.051231][ T7451] ffff88801f3d8f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 336.059770][ T7451] >ffff88801f3d9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.067956][ T7451] ^ [ 336.073643][ T7451] ffff88801f3d9080: fb fb fb fb fb fb fc fc fc fc fc fc fc fc 00 00 [ 336.081752][ T7451] ffff88801f3d9100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 336.089936][ T7451] ================================================================== [ 336.255075][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.282764][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.293096][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.317301][ T7451] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.324867][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.336778][ T7451] Tainted: [L]=SOFTLOCKUP [ 336.341395][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.351917][ T7451] Workqueue: events request_firmware_work_func [ 336.358421][ T7451] Call Trace: [ 336.361831][ T7451] [ 336.364875][ T7451] vpanic+0x1e0/0x670 [ 336.369257][ T7451] panic+0xb9/0xc0 [ 336.373117][ T7451] ? __pfx_panic+0x10/0x10 [ 336.377657][ T7451] ? preempt_schedule_thunk+0x16/0x30 [ 336.383325][ T7451] ? kernfs_root+0xda/0x230 [ 336.387855][ T7451] check_panic_on_warn+0x89/0xb0 [ 336.392941][ T7451] ? kernfs_root+0xda/0x230 [ 336.397478][ T7451] end_report+0x6f/0x140 [ 336.401961][ T7451] kasan_report+0x129/0x150 [ 336.406513][ T7451] ? kernfs_root+0xda/0x230 [ 336.411289][ T7451] ? kernfs_root+0x1c/0x230 [ 336.416021][ T7451] kernfs_root+0xda/0x230 [ 336.420557][ T7451] kernfs_add_one+0x265/0x5c0 [ 336.425376][ T7451] kernfs_create_dir_ns+0xde/0x130 [ 336.430743][ T7451] sysfs_create_dir_ns+0x123/0x280 [ 336.436220][ T7451] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 336.442242][ T7451] ? do_raw_spin_unlock+0x122/0x240 [ 336.447754][ T7451] kobject_add_internal+0x6ab/0xcc0 [ 336.453365][ T7451] kobject_add+0x155/0x220 [ 336.458010][ T7451] ? __pfx_kobject_add+0x10/0x10 [ 336.463246][ T7451] ? __kasan_kmalloc+0x93/0xb0 [ 336.468212][ T7451] ? kobject_init+0x83/0x1e0 [ 336.472931][ T7451] get_device_parent+0x316/0x3a0 [ 336.478130][ T7451] device_add+0x2e1/0xb80 [ 336.482775][ T7451] firmware_fallback_sysfs+0x2e4/0xa40 [ 336.488672][ T7451] ? kmem_cache_free+0x197/0x620 [ 336.493665][ T7451] _request_firmware+0xfa4/0x1680 [ 336.498843][ T7451] ? __pfx__request_firmware+0x10/0x10 [ 336.504518][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 336.510355][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 336.516209][ T7451] request_firmware_work_func+0xaf/0x1c0 [ 336.522063][ T7451] ? process_scheduled_works+0x9ef/0x1770 [ 336.527987][ T7451] process_scheduled_works+0xad1/0x1770 [ 336.533785][ T7451] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.540119][ T7451] ? do_raw_spin_lock+0x121/0x290 [ 336.545201][ T7451] worker_thread+0x8a0/0xda0 [ 336.549928][ T7451] ? __kthread_parkme+0x7b/0x200 [ 336.554982][ T7451] kthread+0x711/0x8a0 [ 336.559281][ T7451] ? __pfx_worker_thread+0x10/0x10 [ 336.564431][ T7451] ? __pfx_kthread+0x10/0x10 [ 336.569074][ T7451] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.574503][ T7451] ? __pfx_kthread+0x10/0x10 [ 336.579234][ T7451] ret_from_fork+0x510/0xa50 [ 336.584041][ T7451] ? __pfx_ret_from_fork+0x10/0x10 [ 336.589222][ T7451] ? __switch_to+0xc9e/0x1480 [ 336.594072][ T7451] ? __pfx_kthread+0x10/0x10 [ 336.598794][ T7451] ret_from_fork_asm+0x1a/0x30 [ 336.603696][ T7451] [ 336.607343][ T7451] Kernel Offset: disabled [ 336.611922][ T7451] Rebooting in 86400 seconds..