last executing test programs: 10.504777286s ago: executing program 3 (id=487): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) timer_delete(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x1, &(0x7f0000000040)=0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000000)) 8.70721029s ago: executing program 0 (id=496): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff030}, {0x6, 0x4, 0x2, 0x6}]}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r3 = dup3(r2, r1, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xf}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_register(r3, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xf49, 0x3a, ':}-', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x46, 0x50]}, 0x38) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r8}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 7.378814849s ago: executing program 2 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080001400000000208001c4000009738080002"], 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r3 = dup(r2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) read(r3, &(0x7f0000006100)=""/102364, 0x18fdc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.229080989s ago: executing program 3 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000400)=[{0x0, 0x4, 0x1800}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) semop(r3, &(0x7f00000001c0)=[{0x1, 0x2, 0x1000}, {0x4, 0x3e, 0x1800}], 0x2) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_proto_private(r4, 0x8920, &(0x7f0000000040)="8bce241ca0377396d43a") r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffdd9, &(0x7f0000000080)=[{&(0x7f0000000140)="94e833a8dfa58d44312ff72d000000", 0x4}], 0x1}, 0x4890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.710690183s ago: executing program 4 (id=503): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 5.838150664s ago: executing program 4 (id=506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000e4ff00000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.631352279s ago: executing program 0 (id=507): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x12a, 0xfffffffffffffffe}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000017000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="0f30b858008ed8baf80c66b8a0aaf78166efbafc0c66edeacf00ec000f066766c74424000a0000006766c7442402de0000006766c744240600000000670f011424baf80c66b8a022b68566efbafc0ced0f01c50fc76c01650f14a7b12d", 0x5d}], 0x1, 0x4, &(0x7f00000001c0)=[@cr0={0x0, 0x20}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}], 0x2) mmap$KVM_VCPU(&(0x7f000002b000/0x2000)=nil, 0x0, 0x2, 0x8010, r8, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x1, 0x0, 0x4, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x38b8, 0x8, &(0x7f0000000940)="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"}, {0x2, 0x0, 0xe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2dd, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000001, 0x96, 0x2}, 0x0, r5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) r9 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r9) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.547119031s ago: executing program 4 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="02010009090000002cbd7000fbdbdf25030006000000000002004e20ac1414483342bb0000000000000000030b00000000001002004e21e00000020000000000000000010015004e"], 0x48}, 0x1, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0xfffffffffffffffd) 5.220323082s ago: executing program 1 (id=510): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000050000000000000000000000000000001100000000000000000000000000000000eeffffff000000000000000000000000aa3755f154cc5efdb103582f94000000000000000000000000ff0300"/133], 0x78) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0xfffffa88, 0x5}]}, 0xc, 0x2) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 5.076731171s ago: executing program 2 (id=511): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x224880) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async, rerun: 32) accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 4.795050818s ago: executing program 2 (id=512): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) unshare(0x6020400) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r0}, 0xc) 4.673085713s ago: executing program 0 (id=513): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) timer_create(0x7, &(0x7f0000000280)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) socketpair(0x14, 0x2, 0x6, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x24000080) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000003100), 0x4) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000380)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000002c40)=0x2000000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa6003, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) write$binfmt_register(r6, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/iommu\x00', 0x3a, 'S', 0x3a, './file0', 0x3a, [0x43]}, 0x34) fchdir(r6) unshare(0x22020600) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r6) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r9, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000002a80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x58, r8, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2000, 0x3e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x74, 0xd, 0x6, 0x180, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x10) sendmsg$inet(r3, &(0x7f00000028c0)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002780)=[{&(0x7f00000000c0)="0a4ba6a098a97e6892fc28ab6153cdcb4d9a122f873014e211b9ac8a7dd2f47c4d14a00108810cd319f29820c5144765a568da52294d3cff1e3c585c20969896813cfbd5e4", 0x45}, {&(0x7f0000000200)="908f3583fbca153331457130824a3a3e4e1eb55390605c6e30debe185b3eaaafdaa7120412a1796f437531bfaee23603e99fb57457e3f73b13823ae8c544ef6458e61b321f47bc12", 0x48}, {&(0x7f00000003c0)="66b3090422899b54e6b3b6095efc75c950e4bcc16a1c4a0c9b5210ef97aea9604b99b9e6e69678d6035c1830e28a86170eee5d3a36e12a2f7e86f2d7961e9f99ebe3bde346fc54f933b3ace6", 0x4c}, {&(0x7f0000000440)="1135a490b0e6ca2e1f32b3de236050ddd858bda1568a7e0cdb196d0a6f0636f7938af4777318eff51294d24afc230bad1782cde23a287e7b31c57cb2d1e5784d031797ea4217b3e6b117392d0027d355fec1c211b1f3885725dcd1bff1553e7a7157eca5bf5deef56aee8fb3fe79f38e3ba0de35f93d0d657cb8e740b7996148718f74c50cb7c03ec97cf272d877168998c007ab9f634c12e6eb9d79bc4bc73ec20efc2a5ae9e67b0457e4facba148117c9f42da400ea9b1b6", 0xb9}, {&(0x7f0000000500)="ae973ce3eb177b465ef1d786194207f1b8e33fe1ef2f8a45a621de4e676c95704dddc687e19f18cd38416b33f9c7d21d44e3f9930b76a10199dbb8ca1886c0e4a609108c35dfc1eb51fadeb922369a1cd97614", 0x53}, {&(0x7f0000000580)="e82556e4af3ac4614f2362a88987225f04c5dbf0a392b5066feabf58be7929a209e3289dee70809c5c6272f617851fce7b59b01127ce57bb616085d39dea9dc3807dbcdb8c8c9e77261370804e2087ab35c286e692920e47a86fb20200b957a56b33daa02537a7e747d6f808c49a2ed44a5c9d8c393610dd0bb40c04337478f8c088a71e706cc9464fe7ef258bb78ba141137fb955e533abffe5de61b3a291ec5c392979253ed824ee7c914cde43e66105ce22d09dde34b1f16386dfddae146d61b685ac0f8cd9aaa2635fe9c2fdfa4a6d35f580c9f0537a0e0fdf9053f84790814fd122e020a850aaca585866347bd0bb9065f2c2d3fc37ce", 0xf9}, {&(0x7f0000000680)="945df2e8e8c60ddb9633a0d6eda37ad5ebdd7db9b5a98f722ebcd617723fbb1052e9d2bb19ebab72697a96111f9fcd4adfd58717ff441909c71eef078e33f89096b070028b5ea0ac6521020b6748ba488c6b1f415430638609acbe51564a74c15e2778454c8c4c04f26dab7b511876e8fa93444b1cde4bc99538cb793144f903b6db1cfcb685851c076bfc8d90dd998452378b10e202a05a04218402744f0fc27b8a784db3f30707117bc1046bf13a1cdc25f9", 0xb3}, {&(0x7f0000000740)="96186e8f2d67d7ecf684db19e4c496fe0b30351a961bf2a8fde828", 0x1b}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="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", 0x1000}], 0xa, &(0x7f0000002900)=ANY=[@ANYBLOB="d575e3291810a6a024b225d2d13c14000000000000000000000001000000250b0000000000002c0000000000000000000000070000000007175be0000001ac1e0001ac141439ac1e0101e00000040000000000000000110000000000000000000000010000000c00000000000000451197b78125c8158cb4ed6104bee943a2e03f6b7cf55a88391c9c6b25a4"], 0x60}, 0xc810) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) 4.646044588s ago: executing program 3 (id=514): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddaa) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='gid_map\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES32=r2], 0x0) 4.091033429s ago: executing program 4 (id=515): r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xe43, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000d00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 3.884293552s ago: executing program 4 (id=516): prctl$PR_GET_NAME(0x10, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec4) mmap(&(0x7f00008a0000/0x3000)=nil, 0x3000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.796638159s ago: executing program 2 (id=517): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet(r4, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1e538943a7ccfa5c6a23afc1bbc63657f7cfb36f81a03a698ee1b36cd21a0dc2dc525fae7fe1c762453d4566261", 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="c7dd7e36ecd58e182972aa83894a1fad1f996aa277d86beb886c590891f30dd11f2960f01dd5a69309517207a8b015d31dd2260dda9f391278cacbcc29b10d4450456da1753f10c6865d94e55f056bcdcb818857d3ec66260b264dd184df9504a2f272262f6607579e324caf918d00913845c1f73fbf302e273341be01cf34719b81bf8f3fd9ed6b051c8e3e16bc883d92ff0a310736cb7c0ce708ceff1197dd33327fb35db764552c91d208e2ea6833d3ff8ecb32acce5c00c332d18375b5acf69bddf38121d29fa1d68ba3f44b75adcbfc34b43e8da35eef21e6c60e9140141b7b0e", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="6d8927da228592a1aaafcb73dc58bbdd739892204d9e3949e43e5c3c1718eb53e59740101113a19f9a7329e7646bf087b682f15d30a55a016cda631c8d7fa7f25447ba0c8293ec344e400c28ef0f2db41c25e41c03166dcbbb91fecb53a620076bf6793846f6b565f8d580c0d2fdd434c1402744a1f91d606c41b3ce062bb677ad54a981cb19e9270c500532c2e3f36a996387b843a1521d0203eb765e0b09ca22975eec125d193642e748ab7dc898c70e3d220490538c92f171593eec01888df40512c5ca4be49209bc86593305b747cc8f5cc6c0d658ebf7f901112fab2b", 0xdf}, {&(0x7f0000000200)="e866e6491b0b13c3a7be5bba6c911b66f430375f3e920c7a926ce27821e8ec1522a2caefcbdb7ed1e37374ebd06448ec1b2b3295386e19fe1b756ab5601d193e", 0x40}, {&(0x7f0000000740)="83f424e345da3f1985d7ed9f43ec4b97cccb25a50fc298115a1f7c301511565b44fbe7bafbdb5f3088f6247fa7e47e6bd19ae92224cbb491d4a1f1c3c60d22bfbcf28d8978", 0x45}, {&(0x7f00000007c0)="0be90882a7df5b5d13d352e3e15aa2bf48eb3e4dea46ae936d5d3d606d159595ffe6d7ada2ccba5cd6337ce28ef3", 0x2e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)="8d3b117c2c8005f2712b8a968ee121ed39c84b5813985fb9a3f897da37640daa50dbfd57dbc2d730cb8cf4cd1e6722b8663d", 0x32}, {&(0x7f00000008c0)="f19e3420a8580be3e948c8b6078fc95c894f1c2e6e2df9a58d40cbe8ea7206e132a427a3bb0754c3c1eacd545e7006565935df92a96ce4c83db7cd780fbb8080960fc0c340ae4f84887f5699e48b85a4ca51ec2eb81b8c9a5a7e5abf915a62848b67ff33fc6bb18495c485cd9b6ff42006fe6e09a5a4c9322a69e1f3226c63de27275d8abbccbab0d047043986291b9d0ec67ae0a9282a67c23f61ff5707fe182fa4a264e4b4c64cfa1a95487ff6d03dbab74fd1e1594139486ff245471a6ed079cbdf1408eadcbaf25a418e01089ce25b6cf2bca7a78887dcced7a058f6a37af8d4ac1379978010c62818a29fc120d9d46b5c8e", 0xf4}, {&(0x7f00000009c0)="017b0507c7b0483e0aaac803e7423948779f323ba18d49414226b481278b42bb939c2cea1bd30a93b4d2e75a25f890c45891a09de51f2c594f8daf6dc06aca4577c8513d59e74fe15f944536671f9d71f68d0802b10b197706d9ca15770a0d3eab4b4855af84db8487b5fafd17941a5c750041c876cba51e0a42e6216bc518d2a6b5cd23c45fa8e9878de9768ff191baebd5f458accfa13e47529c132eee03b8d5db03dd3da89f273613797bdbfec2661327e1743e45dafb22fc747ee17d6a8bb3eb3d06e0e04cc1f6e2ca79e8e33c78be695e8148a08c16", 0xd8}, {&(0x7f0000001bc0)="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", 0xb60}], 0x4}}], 0x4, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0xd8, 0x100, 0x0, {0x7a00000010000000}, [@common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) 3.04745448s ago: executing program 0 (id=518): socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8001af85, &(0x7f0000004c40)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r1], 0x0) 2.948184498s ago: executing program 1 (id=519): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40"], 0xc8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x12}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002"], 0x44}}, 0x0) 2.53777585s ago: executing program 1 (id=520): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3d}}, 0x40000) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x8, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={r8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="140000000000000011130000000002000000080000000000000018"], 0x60}}], 0x1, 0x0) unshare(0x24020400) sendto$inet6(r0, 0x0, 0x0, 0x24000044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0x9}, 0x1c) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect$uac1(0x7, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x1, 0x80, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x1, 0x64, 0x0, "ae35"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x4, 0x8, "0f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x7, 0x2, "1f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x9, 0x7, {0x7, 0x25, 0x1, 0xbca818a50e55f9db, 0x9, 0xfbff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x27, 0x8, {0x7, 0x25, 0x1, 0x4, 0x0, 0x80}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x83, 0xf, 0x1, 0x10, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c09}}, {0xb, &(0x7f0000000280)=@string={0xb, 0x3, "27c88ea4f542159a76"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x449}}, {0xc5, &(0x7f0000000300)=@string={0xc5, 0x3, "fbecd864c887b03402fae21b4a46d4139fb38f4ba14746e00d8ddc0b2de62bc148e08453748d5a2a04c7171365f773513157ee5a1b169b1b6d3d15a7f9e2c3d71ee2fc52740a08f6663c4e7f1edc831fffd949c25bfbc251ad210f6d8b7f6cbca0a92d4bf202f3c72fb0f40fa126709f67700e9fdce729f5d76c3dde6acc0988c23fb7f3ae5b98c8c196ec3c44f4daecfc535ad4b7c8a6f5e44bc281f6f3921feef345264976a93269806fbde6196ae1bce87cfaf9b200c3754cd7a4de5424a712a688"}}, {0x61, &(0x7f0000000400)=@string={0x61, 0x3, "9b667ea0db931d38a29d78fb77169057a2dda3bed5c27f27f774f76ca68ab7e4cdaa52a8baac5549747860b06fe8f24e9510588efbac94a4c7d9f10c03ff7051e48fc330c2f0bdf1df20b879a0838bc42d9c8fb4966e919aa3145211c35ba3"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x422}}]}) 2.415812492s ago: executing program 3 (id=521): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x2a, 0x1, 0x6, {0xd, @tcp_ip6_spec={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x4e23, 0x10}, {0x0, @broadcast, 0x9, 0xc0, [0xfff, 0x6c1]}, @sctp_ip4_spec={@remote, @empty, 0x4e24, 0x4e24, 0x1b}, {0x0, @empty, 0x5, 0x2be, [0x9, 0x1]}, 0x4, 0x1000}}}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000040)={0x0, 0x1, 0x2, "f0cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000040)={0x0, 0x1, 0x2, "f0cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.245896361s ago: executing program 2 (id=522): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) getgid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5142000000064253"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c0) 2.01136923s ago: executing program 2 (id=523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xb8}}, 0x4000c040) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) lseek(r1, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x800, 0x20000000, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) modify_ldt$write(0x1, &(0x7f0000000080)={0x7ff, 0x1000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) madvise(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) syz_open_dev$audion(0x0, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, 0x0) 1.967581473s ago: executing program 4 (id=524): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x30, 0xd4, {0xd4, 0x6, "ca9133efc3a6454ab68b4d01e1919f73281b99efa492d73a83a63c981131ea7d8cfe9757acd8bfad6bb7899ef5792fc5e9f76c263ee56a415b61ff35aa1c38e8186cba7ab10c959a4023b52bf1915af6d109993a90c30e12d918e2ff1c12918c088ca32535f1204b56bb177641163eb4b89c30876f08af5933e91f57b5917835579f8bd1b51ed4287db555e95fce8f22da461c9aa80d8bbb89ae61b0172c1b49039f1fe055ce44bea374cca9c3c681ffe627b3b4648a51afac9e4953279d1ad23a79d3a86c1b628b403808a0fa9fabfb257c"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x36, "c2402d364916dfdf8b9f16827979e73ab538be6322870643b1bf2da2aedf171494cfd215e14a79151ee3d0a679dc03e37031181bf3f8"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xbe}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x2, 0x401, 0x1, 0x5, 0x4, 0x4, 0x800, 0xd8, 0x2, 0x100, 0xfffb, 0xf2f2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xb}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) (rerun: 64) 1.823172056s ago: executing program 1 (id=525): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x13, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36) 1.366510687s ago: executing program 1 (id=526): r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xe43, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000001200", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1.346320382s ago: executing program 0 (id=527): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) unshare(0x6020400) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r0}, 0xc) 890.553663ms ago: executing program 1 (id=528): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x160) close_range(r0, r1, 0x2) (async) close_range(r0, r1, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x2, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=""/101, &(0x7f0000001100)=""/182, 0x25000}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x2, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=""/101, &(0x7f0000001100)=""/182, 0x25000}) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)="909a53401de13e9dbef1eb5e60d309c0c80f8b6a3fd1508f626e425531", 0x1d}, {&(0x7f0000001240)="2b27cd502963af93120b9691ea1685fe76cdf3b658c4c5a72794c94a1968402d2d07b2a1a430084965d0958071baaaff89adcdd69bd436f4eaf4191f728f324569466eed4d421a30cc3d3dfd5cf35807c983e25ea9261a4fa09f00f23e47c80c51bcf13bf9629cc53c6f478e7aace854e5658f6a713a3f58d4f47c38eee41ca848cfe15b0565eaf2413683f0f147e4308c0d23c599ece18688cea992b253c9818d4d8997fc4dfd24a7421cfc93a714fee3a16def359bbf16f723dfdf73e49a9395ddb8b9abf413ae302aa7f303fb5ac326c42d4db5337b24250ce426", 0xdc}], 0x2, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x4010}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000013c0)="3db22969d8e2aca8f6aff3bbc31874d1c1d579db4c2cb0bcf5a2fa2b83941b0887b1f0b1e47cce267d9de537b1fe459c908b4cbd16c43f8ddea420801c60e108996c89cfbfe01c6d6652a53f8a2465ce4d3ee4de75ad1211717cf572693a2b63464045515b3220b68a49fb2abf246656e8df0fb5783e8369102ddb60196fba8398dacc1383001d980b181b614c332df8b135b2b7d530c36f7ace6cd884", 0x9d}, {&(0x7f0000001480)="92131c07b4eb744dfeb5f2504e05116dadb44c1d8724e16f3bf15fb3005844904fc6f5255e6fdd081ffeb3e4ddab36a676b12467015a053fb487668da62439d6a95d02d2703f992d86b28f6b1967d3cdda664cf32ee87ee33e3517e667e095a34607b2a4e083f4ffdbe009e92e9d816ef18e7629f827063810d36bd0ecd785ac0a262d7c91d6e6bfab690bd3be765ce56cfe04bf70ea881a37c5e36ef58b410c504623f759", 0xa5}, {&(0x7f0000001540)="1d79f7609dfd9f7fc68a58e72f92eadc3676de107e5c75f431bc81391081f3ee3d994a469bcceabf7552d6d73b72b81e2c573db28384e90d7d7ca95acee07eb19618df7d05497703e969704d843dab1d22b9e5f1fc206a21e2a54fd1", 0x5c}, {&(0x7f00000015c0)="09d8c13d5a25c717e072cf511964a7447b17829850fa7420610e4db43e5cceeceec1f8e29bac62f509ccbe0d839f0b5832ed848e1d5617ea8f7a6b2e5d56e677ad878468c2920c0e2b18dfe1f2c3b824c9ba93d5550405485955a90fdea581b2ff70", 0x62}, {&(0x7f0000001640)="e2b4deba4b8924af388797f3e27d4ef91fc95c9866156d569cdcc199cdee8c257be0ea33dc34ce217f8d31aae66f975989f2f2810b78e32be7f6b8d6911146e277bfc87609fda5ebbbfaa3fcdfd21bfdcc009bdd31f0f431c9dc3be08c2a31a228f22d37c9aa98cd65c03ee99038c4cddab6d471706504bb540a9835bc118feeb0c9207999c93abf1e0d6d5c55b698fcdde652107072392f2da0ab126fc8f8701661efb860c684c47f3b77d485ce", 0xae}, {&(0x7f0000001700)="512b5e21b821ac4c845dcec513ac587461ca09401d022d7ce037fd1b9c58fc0a66e68ee499d19184bda4634a08e5da51840f9cc52d22038d1955f27bf45cedbf43b2a13f35e796de3806227fade4235a1672f50da2c7970287f0edf0d03fbe0726442d8041ae831f158fb7f195622ba4566fd3498b7d6fb0a21b7520337b3349b5b79391de063f6019bab75c75dab0c05cc0cde7", 0x94}], 0x6, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4810}], 0x2, 0x40) r4 = socket$inet6(0xa, 0x6, 0xffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000001900)={0x100000000000000, 0x100000, 0x0, 0x7, 0x10}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001940), 0x20100, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001980)=""/220, 0xdc, 0x10000, &(0x7f0000001a80)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001b80)={'syztnl1\x00', &(0x7f0000001b00)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x0, 0x3, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x66, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0xd2, 0x0, 0x4, [0x7f, 0x6, 0xe4b, 0x4]}, @end, @lsrr={0x83, 0xf, 0x81, [@multicast1, @multicast2, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001c40)={'syztnl2\x00', &(0x7f0000001bc0)={'ip6gre0\x00', r7, 0x4, 0x2, 0x7, 0xc, 0x56, @mcast1, @loopback, 0x40, 0x700, 0x9, 0x7}}) setsockopt(r6, 0x8, 0x3, &(0x7f0000001c80)="df7b57e784adf7f7449892db42318414f67a424a8f15a01143ea7406b8c6d97e88e0c5a8fce75fe2d3e03445dd923d9bd09cf17930516f73406284b89f46f05d039dec914e3ecf7653078b15aabe1e490c33db9385215a043d522aab17617b76edab19cb975576b551f1fa20045b0aaf03fda76223305525f629fec4b83d8f389a83b4551bc2885f01a8cf47f047248aef9dbe95725f", 0x96) r8 = syz_open_dev$dvb_frontend(&(0x7f0000001d40), 0x1000, 0x220800) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000001d80)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000001e00)) (async) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000001e00)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001e40)={0x0, 0x88, "61f72c295ac18b8736ff1c396b66ce6e98c5d2533d5149072d349be3f174aab22ea49c9a472c745cca99678d6d9d990be9e8b85b1ff1b294337811b5d261e481e53d6def5ca07427187cf5824cd1afaa0aa21717fe58956b018d689c16f8bdd7846a9114ed79e7f9f8c3800356c0e3436cc016aee46710d9cd83e5d72c8b75156cb154a748d2b81b"}, &(0x7f0000001f00)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001f40)={r10, 0x1, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001f40)={r10, 0x1, 0x9}, 0x8) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000001f80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000001f80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r11 = syz_usb_connect$uac3(0x1, 0x122, &(0x7f0000001fc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x3, 0x1, 0x8, 0x50, 0x80, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4d, 0x200}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x101, 0x2, 0x6, 0x8f, 0x3, 0x1, 0xc000}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x1, [0x0]}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x5, [0x0]}, @cluster_info_segment={0x6, 0x20, 0x0, 0xa4, 0x5}, @multiply_unit={0xb, 0x24, 0xd, 0xa, 0x2, 0xf854, 0x4}, @power_domain={0xd, 0x24, 0x10, 0x5, 0xfd58, 0x867, 0x7, "77f76492"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0x4, "8ac116", "8bc6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x1570, 0xff, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x70, 0x81, 0x3d, 0x3, 0x7f}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x2, 0xff, "68c7", "b248"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x6, 0x6, 0xd, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x40, 0x8, 0xb, {0xa, 0x25, 0x25, 0x9, 0x10, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xff}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1a, 0x2, 0x7d, 0x81, "a6f960ee4b8f"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0xdf, "e2778be0d48f201e"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x0, 0x8, {0xa, 0x25, 0x25, 0x800, 0xa, 0x9}}}}}}}}]}}, &(0x7f0000002240)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x300, 0x9, 0x1, 0x7, 0x40, 0x5}, 0x23, &(0x7f0000002140)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "fa61ff1344b81231eb0c541ba6fb4a90"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x81, 0x8}]}, 0x1, [{0x84, &(0x7f0000002180)=@string={0x84, 0x3, "4ecedd5cd874a743ca3d6f33c3b68161107a13bd9eed33c0aa853bcf01611f1576c4d996110a470f0922e467f6ed57068722058956f38489a0f8953feade00fe07d2e6fd300badfda2cd1c78dc77317cf7fe2c0b555a92398f9a23156bd13f5dd455dbc546e8a4ce7bf61640ebb1455f6abfcfaa1cad9c800eb6b7fa150e96ef0076"}}]}) syz_usb_control_io$uac3(r11, &(0x7f00000023c0)={0x14, &(0x7f0000002280)={0x20, 0x9, 0xce, {0xce, 0x30, "2bde1c2f51cb55aafa73d9cc62c30e47ac25cecee51e732cc88f69c06a19939e6e866b967db0a78535a24f2e4c6d593019ebddfa6e436dde52f2ec27809beeffc12111e8bcd2ba4ad268852316b7fee69df8dbe9977c4b01559a5b8e1a007d97b54d4465748cf7b01085cf6aacb865f8c422e2dcb37d83b5a5f072739a78ed121b551cb3e6ac60f7ce4e1e2398c085ae665088abba81cc72ded5cb148caa2a8ce74c8043982e16bcc248f11d0baa8b5240832a705c6929a496665796bd6ea73651fab3cf2b6e0cc87e9c6847"}}, &(0x7f0000002380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5b}}}, &(0x7f0000002600)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x5, "df2779592a"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000024c0)={0x20, 0x81, 0x2, "7dc6"}, &(0x7f0000002500)={0x20, 0x82, 0x2, "f6e0"}, &(0x7f0000002540)={0x20, 0x83, 0x3, "24b5db"}, &(0x7f0000002580)={0x20, 0x84, 0x3, "f251b4"}, &(0x7f00000025c0)={0x20, 0x85, 0x3, "5ed12b"}}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r9, 0x4068aea3, &(0x7f0000002680)) (async) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r9, 0x4068aea3, &(0x7f0000002680)) recvmsg(r4, &(0x7f0000002bc0)={&(0x7f0000002700)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002780)=""/215, 0xd7}, {&(0x7f0000002880)=""/112, 0x70}, {&(0x7f0000002900)=""/36, 0x24}, {&(0x7f0000002940)=""/102, 0x66}, {&(0x7f00000029c0)=""/146, 0x92}], 0x5, &(0x7f0000002b00)=""/129, 0x81}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000002c00), 0x100, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000002c00), 0x100, 0x0) bind$inet(r0, &(0x7f0000002c40)={0x2, 0x4e24, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000002c40)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000003100)={0x0, 0x5, 0x0, &(0x7f0000002c80)=[{}, {}, {0x80000000}, {}, {}], 0x4, 0x0, &(0x7f0000002e80)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000003040)=[{}, {}], 0x3, 0x0, &(0x7f0000003080)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000003240)={0x80000000, &(0x7f0000003180)=[{0x80000000, 0x0}], &(0x7f00000031c0)}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000003380)={{r12, r13, 0x7, [0x4, 0x4]}, {0x80000000, 0x0, 0x4, [0x0, 0x100]}, 0x1, [0x4, 0x4]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000003380)={{r12, r13, 0x7, [0x4, 0x4]}, {0x80000000, 0x0, 0x4, [0x0, 0x100]}, 0x1, [0x4, 0x4]}) 282.325032ms ago: executing program 0 (id=529): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x29, 0x8, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x404, 0x4) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1164, &(0x7f0000000480)={[{0x1000, 0x4e00, "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"}, {0xd9, 0x4e00, "af44216ac1595c78fa05d735e3aa19a0aa931769344987259bb82d6cd44f980f1d2e715448f2ce8f8c29cc0347a22420fcf4e6cc698de3b14d08e9da4de43426141a9cda8dd96c10ca97bc9a42e8fcd4418272f66caf669ccfe5990ed48c996ad2556e28648fcdf3cebebdda7da84df12e1505fcf0de7a067134975f6bac698df4e13d7cd9d6c04fab97430219b77ee86705222e53e3adeb8ef88e0c32cfb64792737e21011952621e0d707d4ae56fa82c8d6452c542707bcbc8659c6ce05379b59956d710e25c48351dee09f61d2b8b60c6d7d87bc4e425d6"}, {0x7b, 0x4e00, "4dca704272f7eb1af9bec93a276495ee73d8d1a04ad24c7a228428803852fd7dcfb8ba8d4e7cde9839f5e94e1424911543380a937b0943b9b21e1b47b1963b98b9a03e72eebc09be8024806df80f674776d3e84d0fe3a1731449f4b16518575dd326c431f64fc831a77582b80266deefd98781d265d94546b27f84"}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r4, &(0x7f0000000940)=""/126, 0x7e, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x28}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000006b00)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x10840) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r8, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)}, 0x1}, {{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000000280)=""/142, 0x8e}, 0x46}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/27, 0x1b}], 0x1, &(0x7f0000003480)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004480)=""/21, 0x15}, {&(0x7f00000044c0)=""/151, 0x97}, {&(0x7f0000004640)=""/125, 0x7d}, {&(0x7f00000046c0)=""/136, 0x88}], 0x4, &(0x7f0000004800)=""/20, 0x14}, 0xb6600000}, {{&(0x7f0000004840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004a40)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/233, 0xe9}], 0x2, &(0x7f0000004a80)=""/64, 0x40}, 0x3}, {{&(0x7f0000004ac0)=@un=@abs, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004b40)=""/238, 0xee}, {&(0x7f0000004c40)=""/234, 0xea}], 0x2}, 0x1000}, {{&(0x7f0000004d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005400)=[{0x0}, {&(0x7f00000050c0)=""/235, 0xeb}, {&(0x7f0000005680)=""/87, 0x57}, {&(0x7f0000005240)=""/185, 0xb9}, {&(0x7f0000005300)=""/211, 0xd3}], 0x5}, 0x8}], 0x7, 0x40010022, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f90009050305a0"], 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000001010400000000000000000a0000003c0002802c0056965ec54adff889ba6b0bc0018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, 0x0, 0x0) write(r9, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 128.416231ms ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c0000001000010029bf7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200211a0100140003006e657464657673696d30000000000000200016806600018018000c8014000100bf000000a202004000000000408000000500110006000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x4004000) 0s ago: executing program 3 (id=531): syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xf1a) syz_usb_connect(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="83e6"], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10000) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) socket(0xd719433a3b8cec6f, 0x3, 0x2) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fed0fd5d04e code=0x7ffc0000 [ 189.169037][ T9] usb 4-1: config 0 descriptor?? [ 189.209769][ T30] audit: type=1326 audit(1775292926.056:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fed0fd5d04e code=0x7ffc0000 [ 189.235137][ T30] audit: type=1326 audit(1775292926.056:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fed0fd5d04e code=0x7ffc0000 [ 189.345920][ T6371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.353561][ T30] audit: type=1326 audit(1775292926.056:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6347 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed0fd5d04e code=0x7ffc0000 [ 189.547882][ T6358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 189.876510][ T5891] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.042933][ T5891] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.053414][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.063008][ T5891] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.079304][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.090534][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.098952][ T5891] usb 3-1: Product: syz [ 190.103479][ T5891] usb 3-1: Manufacturer: syz [ 190.108201][ T5891] usb 3-1: SerialNumber: syz [ 190.119173][ T5891] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 190.127617][ T5891] cdc_ncm 3-1:1.0: bind() failure [ 190.216400][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.329217][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.338844][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.349553][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.363653][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.373226][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 190.384900][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.404395][ T5940] usb 3-1: USB disconnect, device number 9 [ 190.423679][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 190.447971][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.464667][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.630550][ T6394] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.124'. [ 190.695333][ T5940] usb 1-1: USB disconnect, device number 7 [ 191.119665][ T5891] usb 4-1: USB disconnect, device number 11 [ 191.328324][ T9] usb 5-1: USB disconnect, device number 12 [ 191.679400][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.127'. [ 193.012195][ T6425] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.369198][ T6437] netlink: 'syz.2.136': attribute type 2 has an invalid length. [ 193.397533][ T6437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.136'. [ 193.678254][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 193.779495][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 194.166335][ T1214] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.359190][ T1214] usb 1-1: descriptor type invalid, skip [ 194.365007][ T1214] usb 1-1: descriptor type invalid, skip [ 194.394290][ T1214] usb 1-1: descriptor type invalid, skip [ 194.406325][ T1214] usb 1-1: descriptor type invalid, skip [ 194.429994][ T1214] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 194.458666][ T1214] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 194.463055][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474327][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479607][ T1214] usb 1-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=31.a2 [ 194.500781][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.519298][ T1214] usb 1-1: Product: syz [ 194.527700][ T1214] usb 1-1: Manufacturer: syz [ 194.532389][ T1214] usb 1-1: SerialNumber: syz [ 194.616737][ T5891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.777947][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.787157][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 194.803397][ T5891] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.821569][ T5891] usb 5-1: config 0 has no interface number 0 [ 194.833974][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.845812][ T5891] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 194.856763][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.865339][ T5891] usb 5-1: Product: syz [ 194.886126][ T5891] usb 5-1: Manufacturer: syz [ 194.903842][ T5891] usb 5-1: SerialNumber: syz [ 194.919216][ T1214] usb 1-1: USB disconnect, device number 8 [ 194.956615][ T5891] usb 5-1: config 0 descriptor?? [ 194.984999][ T5891] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 195.034618][ T5891] usb 5-1: selecting invalid altsetting 1 [ 195.066456][ T5891] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 195.091382][ T5891] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.103923][ T5891] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 195.116084][ T5891] usb 5-1: media controller created [ 195.158896][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.173882][ T6455] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 195.273416][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.298051][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.342664][ T1214] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 195.353489][ T6455] binder: 6454:6455 ioctl c018620c 200000000000 returned -1 [ 195.480816][ T5891] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 195.492468][ T5891] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.499977][ T1214] usb 1-1: device descriptor read/64, error -71 [ 195.519560][ T5891] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 195.633774][ T5891] usb 5-1: USB disconnect, device number 13 [ 195.756306][ T1214] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 195.886718][ T1214] usb 1-1: device descriptor read/64, error -71 [ 195.996845][ T1214] usb usb1-port1: attempt power cycle [ 196.367022][ T1214] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 196.386776][ T1214] usb 1-1: device descriptor read/8, error -71 [ 196.636360][ T1214] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 196.667052][ T1214] usb 1-1: device descriptor read/8, error -71 [ 196.780098][ T1214] usb usb1-port1: unable to enumerate USB device [ 206.783591][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 206.785538][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 206.789730][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 206.795727][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 206.802322][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 255.899382][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905926][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.422003][ T6488] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 267.496554][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 267.517449][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 267.537561][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 267.590847][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 267.866107][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 268.077016][ T982] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.100504][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 268.129313][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 268.159575][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 268.185835][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 268.208130][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.222098][ T9] usb 1-1: Product: syz [ 268.233617][ T9] usb 1-1: Manufacturer: syz [ 268.238618][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 268.249510][ T9] usb 1-1: SerialNumber: syz [ 268.300071][ T9] usb 1-1: config 0 descriptor?? [ 268.305403][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.317386][ T6493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.332426][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 268.356869][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.371906][ T9] usb 1-1: ucan: probing device on interface #0 [ 268.378382][ T9] usb 1-1: ucan: invalid endpoint configuration [ 268.384650][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 268.392846][ T982] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 268.406279][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.418348][ T982] usb 2-1: config 0 descriptor?? [ 268.546251][ T1214] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 268.643793][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.714520][ T1214] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 268.723666][ T1214] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 268.735484][ T1214] usb 4-1: config 8 has no interface number 0 [ 268.741796][ T1214] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 268.754808][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.765076][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.806138][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.849769][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.028344][ T5944] usb 1-1: USB disconnect, device number 13 [ 269.065922][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 269.097994][ T5891] usb 4-1: USB disconnect, device number 12 [ 269.322493][ T982] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0004/input/input11 [ 269.336976][ T1214] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 269.364213][ T982] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 269.498389][ T1214] usb 3-1: device descriptor read/64, error -71 [ 269.505930][ T5944] usb 2-1: USB disconnect, device number 8 [ 269.757272][ T1214] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 269.861145][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 269.898561][ T1214] usb 3-1: device descriptor read/64, error -71 [ 269.941114][ T6556] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns [ 269.950224][ T6556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16777216 (134217728 ns) > initial count (200000 ns). Using initial count to start timer. [ 270.008269][ T1214] usb usb3-port1: attempt power cycle [ 270.313246][ T6569] netlink: 'syz.4.167': attribute type 6 has an invalid length. [ 270.326404][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 270.356294][ T1214] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 270.407342][ T1214] usb 3-1: device descriptor read/8, error -71 [ 270.666771][ T1214] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 270.718191][ T1214] usb 3-1: device descriptor read/8, error -71 [ 270.846602][ T1214] usb usb3-port1: unable to enumerate USB device [ 270.907535][ T6582] could not allocate digest TFM handle sha1_mb [ 271.153930][ T5834] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 271.237023][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.280609][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.306280][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.456254][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 271.462627][ T6605] 8021q: VLANs not supported on vxcan0 [ 271.465027][ T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 271.479853][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.492517][ T9] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.503823][ T9] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 271.517773][ T9] usb 2-1: config 7 interface 0 has no altsetting 0 [ 271.524490][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 271.538978][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.696377][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.860715][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.877879][ T5944] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 271.878382][ T5899] usb 5-1: language id specifier not provided by device, defaulting to English [ 271.915739][ T5899] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 271.929845][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.939959][ T5899] usb 5-1: Product: syz [ 271.944217][ T5899] usb 5-1: Manufacturer: 롚婾ä᤼⁴䬋ᶔ쓹龯긳탲ӻ⧋㉔렐뵉唅㢯ୢ⫵꫌끮䆱퉥 [ 271.971025][ T5899] usb 5-1: SerialNumber: syz [ 271.980017][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 272.018790][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.082064][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.140526][ T9] hid (null): unknown global tag 0xd [ 272.175814][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0005/input/input12 [ 272.246699][ T5944] usb 4-1: Invalid ep0 maxpacket: 32 [ 272.307921][ T6608] netlink: 96 bytes leftover after parsing attributes in process `syz.4.181'. [ 272.347307][ T9] kye 0003:0458:5010.0005: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 272.386982][ T5944] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 272.438773][ T5899] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 272.457574][ T5899] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 272.466307][ T982] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 272.566405][ T5944] usb 4-1: Invalid ep0 maxpacket: 32 [ 272.574546][ T5944] usb usb4-port1: attempt power cycle [ 272.631604][ T5899] usb 5-1: USB disconnect, device number 14 [ 272.652459][ T5940] usb 2-1: USB disconnect, device number 9 [ 272.659890][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 272.668699][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.695542][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.729328][ T6518] udevd[6518]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.736253][ T982] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 272.803757][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.849156][ T982] usb 1-1: config 0 descriptor?? [ 272.926898][ T6619] block device autoloading is deprecated and will be removed. [ 272.951219][ T5944] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 272.990497][ T5944] usb 4-1: Invalid ep0 maxpacket: 32 [ 273.013565][ T6619] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 273.061328][ T6618] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.185'. [ 273.071455][ T6626] netlink: 'syz.2.186': attribute type 4 has an invalid length. [ 273.146822][ T5944] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 273.177813][ T5944] usb 4-1: Invalid ep0 maxpacket: 32 [ 273.183895][ T5944] usb usb4-port1: unable to enumerate USB device [ 273.377520][ T982] koneplus 0003:1E7D:2D51.0006: global environment stack underflow [ 273.405917][ T982] koneplus 0003:1E7D:2D51.0006: item 0 4 1 11 parsing failed [ 273.431949][ T982] koneplus 0003:1E7D:2D51.0006: parse failed [ 273.453974][ T982] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -22 [ 273.590502][ T5899] usb 1-1: USB disconnect, device number 14 [ 273.770270][ T6648] futex_wake_op: syz.4.193 tries to shift op by 36; fix this program [ 273.893885][ T6648] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 273.936361][ T6648] bond1: option packets_per_slave: allowed values 0 - 65535 [ 273.958364][ T6648] bond1 (unregistering): Released all slaves [ 274.176526][ T982] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.356263][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 274.383381][ T982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 274.428925][ T982] usb 3-1: config index 0 descriptor too short (expected 89, got 58) [ 274.437730][ T982] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 274.445945][ T982] usb 3-1: config 13 has an invalid descriptor of length 231, skipping remainder of the config [ 274.483824][ T982] usb 3-1: config 13 has no interface number 0 [ 274.530621][ T982] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 274.567262][ T982] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.634854][ T982] usb 3-1: config 13 interface 50 has no altsetting 0 [ 274.654615][ T982] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 274.673525][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.686395][ T982] usb 3-1: Product: syz [ 274.690622][ T982] usb 3-1: Manufacturer: syz [ 274.709320][ T982] usb 3-1: SerialNumber: syz [ 274.768904][ T6651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.338049][ T982] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.358458][ T982] usb 3-1: MIDIStreaming interface descriptor not found [ 275.685397][ T982] usb 3-1: USB disconnect, device number 14 [ 275.906587][ T5944] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.047682][ T6692] netlink: 'syz.0.205': attribute type 21 has an invalid length. [ 276.076415][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 276.086233][ T6692] netlink: 128 bytes leftover after parsing attributes in process `syz.0.205'. [ 276.088189][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.095655][ T6692] netlink: 'syz.0.205': attribute type 4 has an invalid length. [ 276.129341][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.176298][ T982] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.192660][ T5944] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.215111][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.234787][ T6692] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 276.255230][ T5944] usb 2-1: config 0 descriptor?? [ 276.277835][ T6692] netlink: 3 bytes leftover after parsing attributes in process `syz.0.205'. [ 276.356480][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 276.388096][ T982] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 276.396843][ T982] usb 3-1: config 0 has no interface number 0 [ 276.403082][ T982] usb 3-1: config 0 interface 132 has no altsetting 0 [ 276.421718][ T6698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.440859][ T982] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 276.456708][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.485038][ T982] usb 3-1: Product: syz [ 276.491800][ T982] usb 3-1: Manufacturer: syz [ 276.502916][ T5944] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 276.511809][ T982] usb 3-1: SerialNumber: syz [ 276.523831][ T5944] HID 045e:07da: Invalid code 65791 type 1 [ 276.556495][ T5944] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input14 [ 276.569638][ T982] usb 3-1: config 0 descriptor?? [ 276.618974][ T5944] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 276.901981][ T5899] usb 2-1: USB disconnect, device number 10 [ 276.993058][ T982] cdc_subset 3-1:0.132: probe with driver cdc_subset failed with error -71 [ 277.020530][ T982] usb 3-1: USB disconnect, device number 15 [ 277.029030][ T6704] mmap: syz.0.209 (6704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 277.066291][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 277.219389][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 277.247123][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 277.276988][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.296469][ T9] usb 5-1: Product: syz [ 277.300852][ T9] usb 5-1: Manufacturer: syz [ 277.305876][ T9] usb 5-1: SerialNumber: syz [ 277.351928][ T6717] batadv_slave_1: entered promiscuous mode [ 277.413766][ T6720] netlink: 'syz.0.214': attribute type 13 has an invalid length. [ 277.551051][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.587115][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.692474][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 277.852394][ T5944] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.875211][ T5183] bcm5974 5-1:1.0: could not read from device [ 277.890289][ T5183] bcm5974 5-1:1.0: could not read from device [ 277.906490][ T9] usb 5-1: USB disconnect, device number 15 [ 278.012147][ T5944] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 278.032627][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.043461][ T5944] usb 2-1: config 0 has no interface number 0 [ 278.063348][ T5944] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 278.083139][ T5944] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 278.101138][ T5944] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 278.234615][ T5944] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 278.251826][ T5944] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 278.263778][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.272327][ T5944] usb 2-1: Product: syz [ 278.276907][ T5944] usb 2-1: Manufacturer: syz [ 278.281545][ T5944] usb 2-1: SerialNumber: syz [ 278.290189][ T5944] usb 2-1: config 0 descriptor?? [ 278.301100][ T5944] symbolserial 2-1:0.175: symbol converter detected [ 278.315611][ T5944] usb 2-1: symbol converter now attached to ttyUSB0 [ 278.362699][ T982] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 278.500587][ T9] usb 2-1: USB disconnect, device number 11 [ 278.526295][ T982] usb 4-1: device descriptor read/64, error -71 [ 278.536508][ T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 278.583144][ T9] symbolserial 2-1:0.175: device disconnected [ 278.611189][ T6752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.222'. [ 278.767525][ T982] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.768014][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 278.906373][ T982] usb 4-1: device descriptor read/64, error -71 [ 278.956704][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 278.965455][ T5899] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 278.983924][ T5899] usb 3-1: config 0 has no interface number 0 [ 279.008704][ T5899] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.016770][ T982] usb usb4-port1: attempt power cycle [ 279.058833][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.096884][ T5899] usb 3-1: Product: syz [ 279.111130][ T5899] usb 3-1: Manufacturer: syz [ 279.126622][ T5899] usb 3-1: SerialNumber: syz [ 279.140857][ T5899] usb 3-1: config 0 descriptor?? [ 279.356268][ T982] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 279.403716][ T982] usb 4-1: device descriptor read/8, error -71 [ 279.528393][ T6762] loop2: detected capacity change from 0 to 7 [ 279.558540][ T6762] Dev loop2: unable to read RDB block 7 [ 279.566436][ T6762] loop2: AHDI p1 p2 p3 [ 279.570761][ T6762] loop2: partition table partially beyond EOD, truncated [ 279.582565][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.607535][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.626623][ T6762] loop2: p1 start 1818582900 is beyond EOD, truncated [ 279.645621][ T6762] loop2: p3 start 335544320 is beyond EOD, truncated [ 279.680835][ T982] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.728306][ T982] usb 4-1: device descriptor read/8, error -71 [ 279.836811][ T982] usb usb4-port1: unable to enumerate USB device [ 279.905046][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 279.977430][ T6773] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 279.998607][ T6773] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 280.253029][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 280.276966][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 280.293868][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 280.322957][ T5899] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 280.344159][ T5899] usb 3-1: USB disconnect, device number 16 [ 280.695049][ T6818] vxcan3: entered promiscuous mode [ 280.797932][ T6818] xt_hashlimit: size too large, truncated to 1048576 [ 281.089027][ T6830] loop5: detected capacity change from 0 to 7 [ 281.130503][ T6830] Dev loop5: unable to read RDB block 7 [ 281.158691][ T6830] loop5: unable to read partition table [ 281.175090][ T6830] loop5: partition table beyond EOD, truncated [ 281.200600][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'. [ 281.215242][ T6830] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 281.353503][ T6834] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 281.383388][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 281.383406][ T30] audit: type=1326 audit(1775293018.666:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.451699][ T30] audit: type=1326 audit(1775293018.666:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.474132][ T30] audit: type=1326 audit(1775293018.666:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.478048][ T6840] loop2: detected capacity change from 0 to 7 [ 281.497420][ T30] audit: type=1326 audit(1775293018.666:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.525213][ T6834] team0: Port device netdevsim0 added [ 281.549390][ T6840] Dev loop2: unable to read RDB block 7 [ 281.559251][ T6840] loop2: AHDI p1 p2 p3 [ 281.563497][ T6840] loop2: partition table partially beyond EOD, truncated [ 281.564127][ T6838] vxcan3: entered promiscuous mode [ 281.570856][ T30] audit: type=1326 audit(1775293018.666:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.570914][ T30] audit: type=1326 audit(1775293018.666:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.570956][ T30] audit: type=1326 audit(1775293018.666:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.570998][ T30] audit: type=1326 audit(1775293018.666:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff67459c819 code=0x7ffc0000 [ 281.571260][ T6840] loop2: p1 start 1818582900 is beyond EOD, truncated [ 281.571285][ T6840] loop2: p3 start 335544320 is beyond EOD, truncated [ 281.779300][ T6844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.793497][ T6844] bond0: (slave bond1): Enslaving as an active interface with an up link [ 281.805814][ T6847] netlink: 14 bytes leftover after parsing attributes in process `syz.4.243'. [ 281.814955][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.856111][ T6847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.876607][ T6847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.888270][ T6847] bond0 (unregistering): (slave bond1): Releasing backup interface [ 281.899536][ T6847] bond0 (unregistering): Released all slaves [ 281.986279][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 281.999858][ T982] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 282.011710][ T5891] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 282.026122][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.034488][ T5891] usb 1-1: Product: syz [ 282.036347][ T6851] ip6tnl1: entered promiscuous mode [ 282.039036][ T5891] usb 1-1: Manufacturer: syz [ 282.050668][ T5891] usb 1-1: SerialNumber: syz [ 282.106736][ T5944] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 282.136937][ T982] usb 3-1: device descriptor read/64, error -71 [ 282.266264][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 282.283169][ T5944] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.300768][ T5944] usb 2-1: config 0 has no interface number 0 [ 282.318320][ T5944] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 282.332833][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.347028][ T5899] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 282.369511][ T5944] usb 2-1: Product: syz [ 282.373842][ T5944] usb 2-1: Manufacturer: syz [ 282.384911][ T982] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 282.405679][ T5944] usb 2-1: SerialNumber: syz [ 282.413193][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.423646][ T5944] usb 2-1: config 0 descriptor?? [ 282.441300][ T5944] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 282.465391][ T5944] usb 2-1: selecting invalid altsetting 1 [ 282.475230][ T5944] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 282.490475][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 282.525720][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 282.538138][ T982] usb 3-1: device descriptor read/64, error -71 [ 282.538345][ T5899] usb 5-1: config 3 has an invalid interface number: 112 but max is 0 [ 282.561674][ T5944] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.569076][ T5899] usb 5-1: config 3 has no interface number 0 [ 282.578625][ T5891] usb 1-1: USB disconnect, device number 15 [ 282.587132][ T5899] usb 5-1: config 3 interface 112 has no altsetting 0 [ 282.598686][ T6861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.606698][ T5944] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 282.615126][ T5944] usb 2-1: media controller created [ 282.630414][ T5899] usb 5-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=42.d9 [ 282.646760][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.646978][ T982] usb usb3-port1: attempt power cycle [ 282.675871][ T5899] usb 5-1: Product: syz [ 282.679660][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.693473][ T5899] usb 5-1: Manufacturer: syz [ 282.719210][ T5899] usb 5-1: SerialNumber: syz [ 282.754262][ T6622] udevd[6622]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.967302][ T5899] HFC-S_USB 5-1:3.112: probe with driver HFC-S_USB failed with error -5 [ 283.009771][ T5899] usb 5-1: USB disconnect, device number 16 [ 283.036692][ T982] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.048893][ T6874] loop5: detected capacity change from 0 to 7 [ 283.068956][ T982] usb 3-1: device descriptor read/8, error -71 [ 283.075525][ T6874] Dev loop5: unable to read RDB block 7 [ 283.086909][ T6874] loop5: unable to read partition table [ 283.093767][ T6874] loop5: partition table beyond EOD, truncated [ 283.100377][ T6874] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 283.306302][ T982] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 283.330378][ T982] usb 3-1: device descriptor read/8, error -71 [ 283.461351][ T982] usb usb3-port1: unable to enumerate USB device [ 283.736949][ T6849] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 283.766311][ T5899] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 283.766846][ T5944] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 283.788300][ T5944] zl10353_read_register: readreg error (reg=127, ret==-71) [ 283.802536][ T5944] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 283.877891][ T5944] usb 2-1: USB disconnect, device number 12 [ 283.915779][ T30] audit: type=1326 audit(1775293021.196:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 283.968206][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 283.991696][ T30] audit: type=1326 audit(1775293021.226:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 284.035053][ T5899] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 284.045467][ T5899] usb 4-1: config 0 has no interface number 0 [ 284.074927][ T5899] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.101864][ T5899] usb 4-1: config 0 interface 89 has no altsetting 0 [ 284.117827][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 284.146298][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.154421][ T5899] usb 4-1: Product: syz [ 284.161056][ T5899] usb 4-1: Manufacturer: syz [ 284.165701][ T5899] usb 4-1: SerialNumber: syz [ 284.191053][ T5899] usb 4-1: config 0 descriptor?? [ 284.203194][ T5899] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 284.213258][ T5899] em28xx 4-1:0.89: Video interface 89 found: [ 284.219514][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.239067][ T6892] loop2: detected capacity change from 0 to 7 [ 284.250625][ T6497] Dev loop2: unable to read RDB block 7 [ 284.267716][ T6497] loop2: AHDI p1 p2 p3 [ 284.276085][ T6497] loop2: partition table partially beyond EOD, truncated [ 284.286502][ T6894] fuse: Unexpected value for 'allow_other' [ 284.293142][ T6497] loop2: p1 start 1818582900 is beyond EOD, truncated [ 284.319614][ T6497] loop2: p3 start 335544320 is beyond EOD, truncated [ 284.341507][ T6892] Dev loop2: unable to read RDB block 7 [ 284.351554][ T6892] loop2: AHDI p1 p2 p3 [ 284.366591][ T6892] loop2: partition table partially beyond EOD, truncated [ 284.380202][ T6892] loop2: p1 start 1818582900 is beyond EOD, truncated [ 284.391454][ T6892] loop2: p3 start 335544320 is beyond EOD, truncated [ 284.444203][ T5891] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 284.454085][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.466739][ T5891] usb 5-1: Product: syz [ 284.471055][ T5891] usb 5-1: Manufacturer: syz [ 284.475979][ T5891] usb 5-1: SerialNumber: syz [ 284.494248][ T5891] usb 5-1: config 0 descriptor?? [ 284.712136][ T5891] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 284.734449][ T5891] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 284.750158][ T5891] usb 5-1: USB disconnect, device number 17 [ 284.813225][ T5899] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 284.824437][ T6906] loop5: detected capacity change from 0 to 7 [ 284.832281][ T6906] Dev loop5: unable to read RDB block 7 [ 284.838867][ T6906] loop5: unable to read partition table [ 284.844755][ T6906] loop5: partition table beyond EOD, truncated [ 284.851442][ T6906] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 285.021427][ T6908] fuse: Bad value for 'group_id' [ 285.026854][ T6908] fuse: Bad value for 'group_id' [ 285.536282][ T982] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 285.546011][ T6922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.561516][ T6922] delete_channel: no stack [ 285.681810][ T6925] netlink: 176 bytes leftover after parsing attributes in process `syz.0.268'. [ 285.720317][ T982] usb 2-1: device descriptor read/64, error -71 [ 285.966480][ T982] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 286.099300][ T5899] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 286.126291][ T5899] em28xx 4-1:0.89: board has no eeprom [ 286.217308][ T5899] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 286.286071][ T982] usb 2-1: device descriptor read/64, error -71 [ 286.287213][ T5899] em28xx 4-1:0.89: analog set to bulk mode. [ 286.327539][ T5891] em28xx 4-1:0.89: Registering V4L2 extension [ 286.333648][ T6934] netlink: 56 bytes leftover after parsing attributes in process `syz.0.270'. [ 286.342302][ T5912] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.358240][ T5899] usb 4-1: USB disconnect, device number 21 [ 286.377807][ T5899] em28xx 4-1:0.89: Disconnecting em28xx [ 286.416609][ T982] usb usb2-port1: attempt power cycle [ 286.461658][ T5891] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 286.485674][ T5891] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 286.504514][ T5891] em28xx 4-1:0.89: No AC97 audio processor [ 286.538994][ T5891] usb 4-1: Decoder not found [ 286.543822][ T5891] em28xx 4-1:0.89: failed to create media graph [ 286.573622][ T5912] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 286.585263][ T5891] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 286.596217][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 286.643309][ T5891] em28xx 4-1:0.89: Registering snapshot button... [ 286.664622][ T5912] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 286.675792][ T5891] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input17 [ 286.697160][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.725125][ T5912] usb 5-1: Product: syz [ 286.732076][ T5912] usb 5-1: Manufacturer: syz [ 286.740714][ T5891] em28xx 4-1:0.89: Remote control support is not available for this card. [ 286.757206][ T5912] usb 5-1: SerialNumber: syz [ 286.764568][ T5899] em28xx 4-1:0.89: Closing input extension [ 286.776828][ T982] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 286.793699][ T5912] usb 5-1: config 0 descriptor?? [ 286.799709][ T5899] em28xx 4-1:0.89: Deregistering snapshot button [ 286.834578][ T5912] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 286.858670][ T982] usb 2-1: device descriptor read/8, error -71 [ 286.921963][ T5899] em28xx 4-1:0.89: Freeing device [ 287.116330][ T982] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.169421][ T982] usb 2-1: device descriptor read/8, error -71 [ 287.286249][ T982] usb usb2-port1: unable to enumerate USB device [ 287.400200][ T6949] loop5: detected capacity change from 0 to 7 [ 287.445861][ T6949] Dev loop5: unable to read RDB block 7 [ 287.475268][ T6949] loop5: unable to read partition table [ 287.502878][ T6949] loop5: partition table beyond EOD, truncated [ 287.516405][ T6949] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 287.631464][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 287.660676][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 287.715493][ T6932] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.745650][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'. [ 288.066279][ T5912] gspca_sunplus: reg_r err -110 [ 288.071393][ T5912] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 288.171711][ T6970] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 288.326650][ T6971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.280'. [ 288.912799][ T5940] usb 5-1: USB disconnect, device number 18 [ 289.034427][ T6991] loop5: detected capacity change from 0 to 7 [ 289.061804][ T6991] Dev loop5: unable to read RDB block 7 [ 289.078026][ T6991] loop5: unable to read partition table [ 289.103486][ T6991] loop5: partition table beyond EOD, truncated [ 289.113362][ T6991] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 289.132288][ T6993] xfrm1: entered allmulticast mode [ 289.251563][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 289.420371][ T7005] ip6tnl2: entered promiscuous mode [ 289.426042][ T7005] ip6tnl2: entered allmulticast mode [ 289.432101][ T7006] netlink: 'syz.2.291': attribute type 8 has an invalid length. [ 289.460354][ T7006] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 289.491097][ T7008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.696388][ T5891] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 289.717528][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'. [ 289.747940][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'. [ 289.847015][ T5891] usb 5-1: device descriptor read/64, error -71 [ 289.980112][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 290.005136][ T7022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.095021][ T5891] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 290.214407][ T7025] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 290.274145][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 290.283419][ T5891] usb 5-1: device descriptor read/64, error -71 [ 290.396529][ T5891] usb usb5-port1: attempt power cycle [ 290.456441][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 290.474588][ T5912] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 290.532418][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.567237][ T5912] usb 3-1: config 0 has no interface number 0 [ 290.579167][ T5912] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.604592][ T5912] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 290.614218][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.626332][ T5912] usb 3-1: Product: syz [ 290.632652][ T5912] usb 3-1: Manufacturer: syz [ 290.641559][ T5912] usb 3-1: SerialNumber: syz [ 290.660733][ T5912] usb 3-1: config 0 descriptor?? [ 290.680853][ T5912] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 290.695318][ T5912] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 290.696517][ T5940] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 290.736625][ T5891] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 290.792955][ T5891] usb 5-1: device descriptor read/8, error -71 [ 290.857114][ T5940] usb 1-1: device descriptor read/64, error -71 [ 290.879188][ T5912] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 290.894301][ T5912] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 291.036263][ T5891] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 291.056859][ T5891] usb 5-1: device descriptor read/8, error -71 [ 291.089897][ T5912] usb 3-1: USB disconnect, device number 21 [ 291.096433][ T5940] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 291.175154][ T5891] usb usb5-port1: unable to enumerate USB device [ 291.248882][ T5940] usb 1-1: device descriptor read/64, error -71 [ 291.358022][ T7039] __nla_validate_parse: 1 callbacks suppressed [ 291.358041][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 291.368935][ T5940] usb usb1-port1: attempt power cycle [ 291.806303][ T5940] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 291.826708][ T5940] usb 1-1: device descriptor read/8, error -71 [ 291.867240][ T7048] syzkaller0: entered promiscuous mode [ 291.875487][ T7048] syzkaller0: entered allmulticast mode [ 292.076441][ T982] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 292.091399][ T5940] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 292.137198][ T5940] usb 1-1: device descriptor read/8, error -71 [ 292.226458][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 292.256493][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 292.261866][ T5940] usb usb1-port1: unable to enumerate USB device [ 292.277397][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.301466][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.326257][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 292.335360][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.354132][ T982] usb 3-1: config 0 descriptor?? [ 292.369918][ T982] hub 3-1:0.0: USB hub found [ 292.395154][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 292.418626][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 292.429624][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 292.442983][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 292.452894][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.482873][ T9] usb 4-1: Product: syz [ 292.487778][ T9] usb 4-1: Manufacturer: syz [ 292.493861][ T9] usb 4-1: SerialNumber: syz [ 292.504201][ T7048] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 292.511755][ T7048] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 292.576378][ T7047] netlink: 5 bytes leftover after parsing attributes in process `syz.2.303'. [ 292.585398][ T7047] .30XD: renamed from gretap0 (while UP) [ 292.594671][ T7047] .30XD: entered allmulticast mode [ 292.600926][ T7047] A link change request failed with some changes committed already. Interface .30XD may have been left with an inconsistent configuration, please check. [ 292.619468][ T982] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 292.628640][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 292.786367][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 292.793900][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.804296][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 292.816063][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 292.827138][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 292.836282][ T5891] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 292.836983][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 292.847079][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.854198][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 292.867942][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.881144][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2D, changing to 0xD [ 292.893118][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 29797, setting to 1024 [ 292.905401][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 292.918998][ T5944] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 292.928709][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.938323][ T5944] usb 2-1: Product: syz [ 292.943414][ T5944] usb 2-1: Manufacturer: syz [ 292.948799][ T5944] usb 2-1: SerialNumber: syz [ 292.960470][ T5944] usb 2-1: config 0 descriptor?? [ 292.966535][ T7051] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 292.974146][ T7051] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 292.985332][ T5944] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.028508][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 293.041450][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 293.051670][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.060912][ T5891] usb 5-1: Product: syz [ 293.065358][ T5891] usb 5-1: Manufacturer: syz [ 293.070857][ T5891] usb 5-1: SerialNumber: syz [ 293.117852][ T9] rtl8150 4-1:1.0: couldn't reset the device [ 293.131512][ T9] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 293.194974][ T9] usb 4-1: USB disconnect, device number 22 [ 293.220341][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.246355][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.255772][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.262529][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.316979][ T982] usbhid 3-1:0.0: can't add hid device: -71 [ 293.323034][ T982] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 293.347984][ T982] usb 3-1: USB disconnect, device number 22 [ 293.502636][ T7053] input: syz1 as /devices/virtual/input/input18 [ 293.520766][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.531253][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.561086][ T6518] udevd[6518]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 293.575957][ T5891] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 293.605579][ T5891] usb 5-1: clock source 0 is not valid, cannot use [ 293.644833][ T5891] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 293.666971][ T5891] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 293.689112][ T5891] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 293.720096][ T5891] usb 5-1: clock source 0 is not valid, cannot use [ 293.846550][ T5891] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 293.859641][ T5891] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 294.470229][ T5891] usb 5-1: USB disconnect, device number 23 [ 294.670682][ T7083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.951853][ T5891] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.127121][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.145468][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.166990][ T5891] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.199748][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.222265][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.243385][ T5891] usb 5-1: Product: syz [ 295.248140][ T5891] usb 5-1: Manufacturer: syz [ 295.254799][ T5891] usb 5-1: SerialNumber: syz [ 295.290063][ T5891] cdc_mbim 5-1:1.0: skipping garbage [ 295.302593][ T5891] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 295.311817][ T5891] cdc_mbim 5-1:1.0: bind() failure [ 295.388283][ T9] usb 2-1: USB disconnect, device number 17 [ 295.496880][ T982] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 295.573932][ T7116] bridge0: entered promiscuous mode [ 295.583342][ T7109] netlink: 'syz.3.317': attribute type 10 has an invalid length. [ 295.626645][ T982] usb 1-1: device descriptor read/64, error -71 [ 295.743681][ T5899] usb 5-1: USB disconnect, device number 24 [ 295.866260][ T982] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 296.016267][ T982] usb 1-1: device descriptor read/64, error -71 [ 296.136536][ T982] usb usb1-port1: attempt power cycle [ 296.302174][ T7129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.486774][ T982] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 296.506919][ T982] usb 1-1: device descriptor read/8, error -71 [ 296.557541][ T5944] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 296.626344][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.716235][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 296.724891][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.734678][ T5944] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 296.746266][ T982] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 296.756651][ T5944] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 296.765743][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.774505][ T5944] usb 5-1: Product: syz [ 296.779106][ T982] usb 1-1: device descriptor read/8, error -71 [ 296.785637][ T5944] usb 5-1: Manufacturer: syz [ 296.791112][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 296.797301][ T5944] usb 5-1: SerialNumber: syz [ 296.803719][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.819037][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 296.831224][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.839691][ T9] usb 2-1: Product: syz [ 296.843889][ T9] usb 2-1: Manufacturer: syz [ 296.848735][ T9] usb 2-1: SerialNumber: syz [ 296.855761][ T9] usb 2-1: config 0 descriptor?? [ 296.886763][ T982] usb usb1-port1: unable to enumerate USB device [ 297.031974][ T5944] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 297.043105][ T5944] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 297.081497][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.113559][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.128616][ T5899] usb 2-1: USB disconnect, device number 18 [ 297.188844][ T5944] usb 5-1: USB disconnect, device number 25 [ 297.270274][ T6518] udevd[6518]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.593425][ T982] IPVS: starting estimator thread 0... [ 297.612490][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.330'. [ 297.696936][ T7145] IPVS: using max 25 ests per chain, 60000 per kthread [ 297.956339][ T5899] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 298.116365][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 298.126457][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.138100][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.149908][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.160070][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.168548][ T5899] usb 2-1: Product: syz [ 298.172885][ T5899] usb 2-1: Manufacturer: syz [ 298.177874][ T5899] usb 2-1: SerialNumber: syz [ 298.217756][ T5891] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 298.378620][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 298.385708][ T5891] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 298.394358][ T5891] usb 5-1: config 0 has no interface number 0 [ 298.397788][ T7149] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.404114][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 298.419431][ T5899] usb 2-1: 0:2 : does not exist [ 298.439513][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.470755][ T5891] usb 5-1: Product: syz [ 298.483654][ T5891] usb 5-1: Manufacturer: syz [ 298.494292][ T5891] usb 5-1: SerialNumber: syz [ 298.552984][ T5891] usb 5-1: config 0 descriptor?? [ 298.582004][ T5899] usb 2-1: USB disconnect, device number 19 [ 298.614453][ T6518] udevd[6518]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.766242][ T1214] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 298.926395][ T1214] usb 1-1: Using ep0 maxpacket: 32 [ 298.935087][ T1214] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 298.958734][ T1214] usb 1-1: config 0 has no interface number 0 [ 298.969413][ T1214] usb 1-1: config 0 interface 184 has no altsetting 0 [ 298.989924][ T5891] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 299.068565][ T5891] uvcvideo 5-1:0.31: No streaming interface found for terminal 32774. [ 299.087825][ T1214] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 299.160420][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.180892][ T5891] usb 5-1: USB disconnect, device number 26 [ 299.191095][ T1214] usb 1-1: Product: syz [ 299.207042][ T1214] usb 1-1: Manufacturer: syz [ 299.230934][ T1214] usb 1-1: SerialNumber: syz [ 299.262202][ T1214] usb 1-1: config 0 descriptor?? [ 299.484569][ T1214] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 299.509314][ T1214] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 299.537440][ T1214] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 299.566679][ T1214] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 299.619474][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 299.788587][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 299.816774][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 299.829654][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 299.852298][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.869766][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.887883][ T982] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 299.905925][ T9] usb 2-1: Product:   [ 299.912480][ T9] usb 2-1: Manufacturer: 藏ꣶ莾优㠯쓫䦵ᣩ覆殭曭ᆨ됬혡Ⅼቝ휡ﭛ鵡湢뇾췌橅Þꄯ컵ឿ﩮魮歎ᤅꚏ姠甼꥗鐶뺧͐줴뷟툋 [ 299.956779][ T9] usb 2-1: SerialNumber: syz [ 300.075535][ T982] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 300.108884][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.131329][ T5944] usb 1-1: USB disconnect, device number 24 [ 300.137134][ T5891] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 300.146779][ T982] usb 4-1: Product: syz [ 300.177236][ T982] usb 4-1: Manufacturer: syz [ 300.181884][ T982] usb 4-1: SerialNumber: syz [ 300.200794][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 300.227381][ T982] usb 4-1: config 0 descriptor?? [ 300.308151][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.336235][ T5891] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.434759][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.444162][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.625667][ T9] cdc_ncm 2-1:1.0: bind() failure [ 300.634598][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.649467][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.654286][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 300.661517][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.675513][ T9] cdc_ncm 2-1:1.1: bind() failure [ 300.684329][ T5891] usb 5-1: Product: syz [ 300.693752][ T5891] usb 5-1: Manufacturer: syz [ 300.703211][ T9] usb 2-1: USB disconnect, device number 20 [ 300.704270][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.736627][ T5891] usb 5-1: SerialNumber: syz [ 300.747686][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.763639][ T5891] cdc_ncm 5-1:1.0: skipping garbage [ 300.779488][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.788891][ T5891] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 300.797866][ T5891] cdc_ncm 5-1:1.0: bind() failure [ 300.821705][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.823289][ T5891] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 300.856307][ T5891] cdc_ncm 5-1:1.1: bind() failure [ 300.865816][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.902762][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.921509][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.043654][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 301.162254][ T5944] usb 5-1: USB disconnect, device number 27 [ 301.186963][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 301.371975][ T982] usb 4-1: f81604_write: reg: 105 data: f9 failed: -EPROTO [ 301.407979][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 301.425199][ T982] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 301.464000][ T982] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 301.486422][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 301.494607][ T9] usb 1-1: config 0 has no interface number 0 [ 301.510733][ T982] usb 4-1: USB disconnect, device number 23 [ 301.545491][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.555066][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.573629][ T9] usb 1-1: Product: syz [ 301.578408][ T9] usb 1-1: Manufacturer: syz [ 301.583215][ T9] usb 1-1: SerialNumber: syz [ 301.594830][ T7207] warning: `syz.3.348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 301.609566][ T9] usb 1-1: config 0 descriptor?? [ 301.620073][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 301.828349][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 301.849394][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 301.946544][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 302.057374][ T5891] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 302.097746][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 302.299298][ T7202] fuse: Bad value for 'fd' [ 302.321122][ T5891] usb 5-1: not running at top speed; connect to a high speed hub [ 302.354606][ T5891] usb 5-1: config 5 has an invalid interface number: 154 but max is 0 [ 302.384051][ T5891] usb 5-1: config 5 has no interface number 0 [ 302.398047][ T5891] usb 5-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 302.434345][ T5891] usb 5-1: config 5 interface 154 has no altsetting 0 [ 302.472733][ T5891] usb 5-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 302.498701][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.530993][ T5891] usb 5-1: Product: syz [ 302.545040][ T5891] usb 5-1: Manufacturer: syz [ 302.569059][ T5891] usb 5-1: SerialNumber: syz [ 302.586307][ T1214] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 302.744647][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 302.786658][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 302.802988][ T1214] usb 2-1: config 2 has an invalid interface number: 131 but max is 0 [ 302.822526][ T7211] x_tables: ip_tables: osf match: only valid for protocol 6 [ 302.848756][ T1214] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 302.867293][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.904939][ T1214] usb 2-1: config 2 has no interface number 0 [ 302.918189][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.935686][ T1214] usb 2-1: config 2 interface 131 altsetting 254 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 302.936119][ T7223] x_tables: ip_tables: osf match: only valid for protocol 6 [ 302.966684][ T7222] ip6tnl2: entered allmulticast mode [ 302.982597][ T1214] usb 2-1: config 2 interface 131 altsetting 254 has an endpoint descriptor with address 0x4C, changing to 0xC [ 303.014344][ T1214] usb 2-1: config 2 interface 131 altsetting 254 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 303.038876][ T1214] usb 2-1: config 2 interface 131 altsetting 254 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 303.071161][ T5891] usb 5-1: USB disconnect, device number 28 [ 303.101363][ T1214] usb 2-1: config 2 interface 131 altsetting 254 has a duplicate endpoint with address 0x9, skipping [ 303.142707][ T1214] usb 2-1: config 2 interface 131 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 303.196038][ T1214] usb 2-1: config 2 interface 131 altsetting 254 has a duplicate endpoint with address 0xC, skipping [ 303.272308][ T1214] usb 2-1: config 2 interface 131 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 303.303530][ T1214] usb 2-1: config 2 interface 131 has no altsetting 0 [ 303.392406][ T1214] usb 2-1: Dual-Role OTG device on HNP port [ 303.406651][ T1214] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice= 7.a9 [ 303.450750][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.458940][ T1214] usb 2-1: Product: Я [ 303.532001][ T1214] usb 2-1: Manufacturer: ࠓ [ 303.597288][ T1214] usb 2-1: SerialNumber: Е [ 303.876834][ T7239] Lens A: ================= START STATUS ================= [ 303.884333][ T7239] Lens A: Focus, Absolute: 0 [ 303.889436][ T7239] Lens A: ================== END STATUS ================== [ 304.041137][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 304.042496][ T5891] usb 1-1: USB disconnect, device number 25 [ 304.090292][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 304.119402][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 304.155014][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 304.185083][ T5891] quatech2 1-1:0.51: device disconnected [ 304.257361][ T1214] cxacru 2-1:2.131: cxacru_bind: interface has incorrect endpoints [ 304.356558][ T1214] cxacru 2-1:2.131: usbatm_usb_probe: bind failed: -19! [ 304.396268][ T5919] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.410240][ T1214] usb 2-1: USB disconnect, device number 21 [ 304.656759][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 304.757611][ T5919] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 304.765815][ T5919] usb 3-1: config 0 has no interface number 0 [ 304.783587][ T5919] usb 3-1: config 0 interface 246 altsetting 249 bulk endpoint 0x9 has invalid maxpacket 1023 [ 304.809955][ T5919] usb 3-1: config 0 interface 246 has no altsetting 0 [ 304.906353][ T5919] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 304.937039][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.945074][ T5919] usb 3-1: Product: syz [ 304.976417][ T5919] usb 3-1: Manufacturer: syz [ 304.986481][ T5919] usb 3-1: SerialNumber: syz [ 305.008130][ T5919] usb 3-1: config 0 descriptor?? [ 305.020577][ T7241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.332809][ T5919] usb 3-1: USB disconnect, device number 23 [ 305.526246][ T1214] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 305.690012][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.710797][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 305.770295][ T1214] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.817281][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.839417][ T1214] usb 2-1: Product: syz [ 305.853561][ T1214] usb 2-1: Manufacturer: syz [ 305.873839][ T1214] usb 2-1: SerialNumber: syz [ 305.891390][ T1214] usb 2-1: config 0 descriptor?? [ 306.125204][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.144465][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.411456][ T1214] usb 2-1: USB disconnect, device number 22 [ 306.492908][ T6496] udevd[6496]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.610278][ T7276] fuse: Bad value for 'user_id' [ 306.615803][ T7276] fuse: Bad value for 'user_id' [ 306.698994][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 306.708031][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 306.717498][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 306.746299][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 307.118323][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.139654][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.337152][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.498458][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.522883][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.568994][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.594478][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.603852][ T9] usb 4-1: SerialNumber: syz [ 307.850628][ T9] usb 4-1: 0:2 : does not exist [ 307.955556][ T9] usb 4-1: USB disconnect, device number 24 [ 308.398994][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 308.434179][ T7306] ip6tnl1: entered promiscuous mode [ 309.014920][ T7317] netlink: 80 bytes leftover after parsing attributes in process `syz.1.375'. [ 309.640033][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 310.166329][ T1214] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 310.362384][ T7353] team0: entered allmulticast mode [ 310.369197][ T7353] team_slave_0: entered allmulticast mode [ 310.377648][ T7353] team_slave_1: entered allmulticast mode [ 310.384966][ T7353] batadv1: entered allmulticast mode [ 310.391718][ T7353] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 310.414696][ T7353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.386'. [ 310.476391][ T1214] usb 5-1: Using ep0 maxpacket: 8 [ 310.496915][ T1214] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 310.512976][ T1214] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 310.537358][ T1214] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 310.552570][ T7353] libceph: resolve '0..' (ret=-3): failed [ 310.590948][ T1214] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 310.622011][ T1214] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 310.696556][ T1214] usb 5-1: Product: syz [ 310.710984][ T1214] usb 5-1: Manufacturer: syz [ 310.737017][ T1214] usb 5-1: config 0 descriptor?? [ 310.751332][ T1214] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 310.772589][ T1214] usb 5-1: Detected FT2232C/D [ 310.795606][ T7363] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 310.811565][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(full) [ 310.811598][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.811609][ T7363] Call Trace: [ 310.811618][ T7363] [ 310.811625][ T7363] dump_stack_lvl+0xe8/0x150 [ 310.811669][ T7363] sysfs_warn_dup+0x8e/0xa0 [ 310.811698][ T7363] sysfs_do_create_link_sd+0xc0/0x110 [ 310.811741][ T7363] device_add_class_symlinks+0x1cf/0x240 [ 310.811774][ T7363] device_add+0x475/0xb70 [ 310.811807][ T7363] wiphy_register+0x1d73/0x2d50 [ 310.811847][ T7363] ? __pfx_wiphy_register+0x10/0x10 [ 310.811868][ T7363] ? __pfx_netdev_run_todo+0x10/0x10 [ 310.811895][ T7363] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 310.811931][ T7363] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 310.811963][ T7363] ieee80211_register_hw+0x3562/0x4200 [ 310.812008][ T7363] ? ieee80211_register_hw+0x1481/0x4200 [ 310.812047][ T7363] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 310.812091][ T7363] ? __hrtimer_setup+0x181/0x200 [ 310.812115][ T7363] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 310.812147][ T7363] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 310.812204][ T7363] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 310.812227][ T7363] ? kstrndup+0xbf/0x160 [ 310.812262][ T7363] hwsim_new_radio_nl+0xf35/0x1bd0 [ 310.812312][ T7363] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 310.812347][ T7363] ? rcu_is_watching+0x15/0xb0 [ 310.812374][ T7363] ? trace_kmalloc+0x2a/0x110 [ 310.812402][ T7363] ? __nla_parse+0x40/0x60 [ 310.812426][ T7363] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 310.812458][ T7363] genl_family_rcv_msg_doit+0x22a/0x330 [ 310.812489][ T7363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 310.812530][ T7363] ? bpf_lsm_capable+0x9/0x20 [ 310.812556][ T7363] ? security_capable+0x7e/0x2c0 [ 310.812592][ T7363] genl_rcv_msg+0x61c/0x7a0 [ 310.812624][ T7363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.812648][ T7363] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 310.812674][ T7363] ? __lock_acquire+0x6b5/0x2cf0 [ 310.812720][ T7363] netlink_rcv_skb+0x232/0x4b0 [ 310.812741][ T7363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.812768][ T7363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.812809][ T7363] ? down_read+0x272/0x2e0 [ 310.812832][ T7363] ? genl_rcv+0xd/0x40 [ 310.812856][ T7363] genl_rcv+0x28/0x40 [ 310.812878][ T7363] netlink_unicast+0x80f/0x9b0 [ 310.812916][ T7363] ? __pfx_netlink_unicast+0x10/0x10 [ 310.812947][ T7363] ? netlink_sendmsg+0x650/0xb40 [ 310.812966][ T7363] ? skb_put+0x11b/0x210 [ 310.812993][ T7363] netlink_sendmsg+0x813/0xb40 [ 310.813024][ T7363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.813047][ T7363] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.813078][ T7363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.813102][ T7363] ____sys_sendmsg+0x972/0x9f0 [ 310.813124][ T7363] ? futex_unqueue+0x211/0x240 [ 310.813156][ T7363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.813189][ T7363] ? import_iovec+0x73/0xa0 [ 310.813214][ T7363] ___sys_sendmsg+0x2a5/0x360 [ 310.813243][ T7363] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.813275][ T7363] ? futex_wait+0x29a/0x380 [ 310.813330][ T7363] ? __fget_files+0x2a/0x420 [ 310.813348][ T7363] ? __fget_files+0x3a0/0x420 [ 310.813379][ T7363] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.813408][ T7363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.813444][ T7363] ? rcu_is_watching+0x15/0xb0 [ 310.813484][ T7363] do_syscall_64+0x14d/0xf80 [ 310.813508][ T7363] ? trace_irq_disable+0x3b/0x150 [ 310.813525][ T7363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.813544][ T7363] ? clear_bhb_loop+0x40/0x90 [ 310.813570][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.813590][ T7363] RIP: 0033:0x7f64a159c819 [ 310.813610][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.813626][ T7363] RSP: 002b:00007f64a2536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.813648][ T7363] RAX: ffffffffffffffda RBX: 00007f64a1815fa0 RCX: 00007f64a159c819 [ 310.813661][ T7363] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 310.813674][ T7363] RBP: 00007f64a1632c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.813685][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.813696][ T7363] R13: 00007f64a1816038 R14: 00007f64a1815fa0 R15: 00007f64a193fa48 [ 310.813739][ T7363] [ 311.362278][ T1214] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 311.371120][ T1214] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 311.385792][ T1214] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.422307][ T1214] usb 5-1: USB disconnect, device number 29 [ 311.449686][ T1214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.459848][ T1214] ftdi_sio 5-1:0.0: device disconnected [ 311.539932][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'. [ 311.666462][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 311.862733][ T7380] syzkaller0: entered promiscuous mode [ 311.874968][ T10] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 311.886662][ T7380] syzkaller0: entered allmulticast mode [ 311.893553][ T10] usb 2-1: config 0 has no interface number 0 [ 311.900742][ T10] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 311.965983][ T10] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 312.031806][ T10] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 312.066084][ T10] usb 2-1: config 0 interface 11 has no altsetting 0 [ 312.101681][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 312.115122][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.189077][ T10] usb 2-1: config 0 descriptor?? [ 312.229388][ T7368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.247292][ T7368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 312.277353][ T10] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 312.333986][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 312.357542][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 312.377573][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 312.385583][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 312.425565][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 312.461361][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 312.479875][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 312.529309][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 312.618299][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 312.648752][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 312.690439][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 312.697972][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 312.722242][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 312.756802][ T10] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 312.795742][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 312.976753][ T10] usb 2-1: USB disconnect, device number 23 [ 312.992545][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 313.020012][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 313.033342][ T10] keyspan 2-1:0.11: device disconnected [ 313.156259][ T982] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 313.186727][ T1214] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 313.199238][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 313.251924][ T7419] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 313.286866][ T982] usb 3-1: device descriptor read/64, error -71 [ 313.359232][ T1214] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 313.368313][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.384667][ T1214] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 313.400997][ T1214] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 313.414393][ T1214] usb 5-1: Manufacturer: syz [ 313.422988][ T1214] usb 5-1: config 0 descriptor?? [ 313.488617][ T1214] rc_core: IR keymap rc-hauppauge not found [ 313.495163][ T1214] Registered IR keymap rc-empty [ 313.500798][ T7426] fuse: Bad value for 'user_id' [ 313.509299][ T1214] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 313.519795][ T7426] fuse: Bad value for 'user_id' [ 313.531649][ T1214] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 313.556098][ T982] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 313.717188][ T982] usb 3-1: device descriptor read/64, error -71 [ 313.795647][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 313.829286][ T982] usb usb3-port1: attempt power cycle [ 313.841978][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 314.198597][ T982] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 314.236914][ T982] usb 3-1: device descriptor read/8, error -71 [ 314.286965][ T5891] usb 5-1: USB disconnect, device number 30 [ 314.366901][ T1214] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 314.376403][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 314.478389][ T982] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 314.509388][ T982] usb 3-1: device descriptor read/8, error -71 [ 314.526268][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 314.528304][ T1214] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 314.534192][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 314.546202][ T1214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.576228][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.576315][ T1214] usb 2-1: config 0 has no interface number 0 [ 314.590443][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.594550][ T1214] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 314.604589][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.624562][ T1214] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.624693][ T982] usb usb3-port1: unable to enumerate USB device [ 314.645471][ T9] usb 4-1: Product: syz [ 314.649770][ T9] usb 4-1: Manufacturer: syz [ 314.654681][ T9] usb 4-1: SerialNumber: syz [ 314.659349][ T1214] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 314.663528][ T9] usb 4-1: config 0 descriptor?? [ 314.677708][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.685882][ T1214] usb 2-1: Product: syz [ 314.692183][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 314.696222][ T1214] usb 2-1: Manufacturer: syz [ 314.701631][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 314.720988][ T1214] usb 2-1: SerialNumber: syz [ 314.739816][ T1214] usb 2-1: config 0 descriptor?? [ 314.746094][ T7447] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 314.764586][ T1214] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 314.771337][ T1214] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 315.047214][ T7457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.417'. [ 315.203555][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 315.299624][ T9] em28xx 4-1:0.0: chip ID is em28178 [ 316.090458][ T5919] usb 4-1: USB disconnect, device number 25 [ 316.099884][ T5919] em28xx 4-1:0.0: Disconnecting em28xx [ 316.136728][ T5919] em28xx 4-1:0.0: Freeing device [ 317.602437][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.610218][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.829413][ T7470] FAULT_INJECTION: forcing a failure. [ 317.829413][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.889047][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(full) [ 317.889068][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 317.889075][ T7470] Call Trace: [ 317.889080][ T7470] [ 317.889086][ T7470] dump_stack_lvl+0xe8/0x150 [ 317.889107][ T7470] should_fail_ex+0x412/0x560 [ 317.889129][ T7470] _copy_from_user+0x2d/0xb0 [ 317.889143][ T7470] memdup_user+0x5e/0xd0 [ 317.889159][ T7470] msr_io+0x116/0x8b0 [ 317.889177][ T7470] ? __pfx_do_get_msr+0x10/0x10 [ 317.889193][ T7470] ? __pfx_msr_io+0x10/0x10 [ 317.889209][ T7470] ? __srcu_check_read_flavor+0x10b/0x250 [ 317.889227][ T7470] kvm_arch_vcpu_ioctl+0x1330/0x2c70 [ 317.889244][ T7470] ? kvm_arch_vcpu_ioctl+0x12f3/0x2c70 [ 317.889259][ T7470] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 317.889273][ T7470] ? unwind_next_frame+0xa5/0x23c0 [ 317.889302][ T7470] ? is_bpf_text_address+0x26/0x2b0 [ 317.889318][ T7470] ? is_bpf_text_address+0x292/0x2b0 [ 317.889329][ T7470] ? is_bpf_text_address+0x26/0x2b0 [ 317.889342][ T7470] ? kernel_text_address+0xa5/0xe0 [ 317.889355][ T7470] ? __kernel_text_address+0xd/0x30 [ 317.889367][ T7470] ? unwind_get_return_address+0x4d/0x90 [ 317.889382][ T7470] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.889394][ T7470] ? arch_stack_walk+0xfb/0x150 [ 317.889418][ T7470] ? stack_trace_save+0xa9/0x100 [ 317.889429][ T7470] ? __pfx_stack_trace_save+0x10/0x10 [ 317.889442][ T7470] ? kasan_save_free_info+0x46/0x50 [ 317.889471][ T7470] ? stack_depot_save_flags+0x33/0x810 [ 317.889503][ T7470] ? __lock_acquire+0x6b5/0x2cf0 [ 317.889527][ T7470] ? tomoyo_path_number_perm+0x501/0x630 [ 317.889550][ T7470] ? security_file_ioctl+0xc3/0x2a0 [ 317.889564][ T7470] ? __se_sys_ioctl+0x47/0x170 [ 317.889576][ T7470] ? do_syscall_64+0x14d/0xf80 [ 317.889591][ T7470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.889611][ T7470] ? __mutex_trylock_common+0x158/0x260 [ 317.889631][ T7470] ? __pfx___mutex_trylock_common+0x10/0x10 [ 317.889649][ T7470] ? rcu_is_watching+0x15/0xb0 [ 317.889665][ T7470] ? trace_contention_end+0x3d/0x150 [ 317.889682][ T7470] ? __mutex_lock+0x319/0x1300 [ 317.889701][ T7470] ? kasan_quarantine_put+0xbb/0x1f0 [ 317.889749][ T7470] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 317.889763][ T7470] ? __pfx___mutex_lock+0x10/0x10 [ 317.889778][ T7470] ? tomoyo_path_number_perm+0x219/0x630 [ 317.889796][ T7470] ? do_vfs_ioctl+0x1166/0x1530 [ 317.889811][ T7470] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 317.889827][ T7470] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 317.889842][ T7470] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 317.889852][ T7470] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 317.889879][ T7470] ? __fget_files+0x2a/0x420 [ 317.889892][ T7470] ? __fget_files+0x2a/0x420 [ 317.889901][ T7470] ? __fget_files+0x3a0/0x420 [ 317.889911][ T7470] ? __fget_files+0x2a/0x420 [ 317.889923][ T7470] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.889938][ T7470] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 317.889949][ T7470] __se_sys_ioctl+0xfc/0x170 [ 317.889965][ T7470] do_syscall_64+0x14d/0xf80 [ 317.889978][ T7470] ? trace_irq_disable+0x3b/0x150 [ 317.889988][ T7470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.890004][ T7470] ? clear_bhb_loop+0x40/0x90 [ 317.890027][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.890046][ T7470] RIP: 0033:0x7fed0fd9c819 [ 317.890070][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.890085][ T7470] RSP: 002b:00007fed10bb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.890124][ T7470] RAX: ffffffffffffffda RBX: 00007fed10015fa0 RCX: 00007fed0fd9c819 [ 317.890133][ T7470] RDX: 0000200000000000 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 317.890141][ T7470] RBP: 00007fed10bb9090 R08: 0000000000000000 R09: 0000000000000000 [ 317.890158][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.890165][ T7470] R13: 00007fed10016038 R14: 00007fed10015fa0 R15: 00007fed1013fa48 [ 317.890189][ T7470] [ 318.359592][ T5899] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 318.369706][ T5919] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 318.547281][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 318.587240][ T5899] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 318.637270][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.649864][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.658301][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.694013][ T5919] usb 4-1: Product: syz [ 318.920914][ T10] usb 2-1: USB disconnect, device number 24 [ 318.952188][ T5899] usb 3-1: config 0 descriptor?? [ 318.981233][ T5919] usb 4-1: Manufacturer: syz [ 318.986882][ T5919] usb 4-1: SerialNumber: syz [ 318.993716][ T5899] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 319.154735][ T7492] syzkaller0: entered promiscuous mode [ 319.160372][ T7492] syzkaller0: entered allmulticast mode [ 320.111017][ T7507] program syz.3.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.141422][ T5899] gspca_sonixj: reg_w1 err -110 [ 320.151647][ T5899] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 320.936071][ T7508] team0: left allmulticast mode [ 320.941137][ T7508] team_slave_0: left allmulticast mode [ 320.947005][ T7508] team_slave_1: left allmulticast mode [ 320.952579][ T7508] batadv1: left allmulticast mode [ 321.000974][ T7508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.928595][ T5919] cdc_ncm 4-1:1.0: bind() failure [ 321.938566][ T5919] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 321.986380][ T5919] cdc_ncm 4-1:1.1: bind() failure [ 322.026027][ T5899] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 322.074589][ T5919] usb 4-1: USB disconnect, device number 26 [ 322.199378][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.211739][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.247989][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.282431][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 322.321551][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 322.350235][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.360171][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.483750][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.501764][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 322.548010][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 322.580861][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.885979][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.899737][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.972319][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.989596][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.022150][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.048212][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 323.054878][ T5899] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.085517][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.152137][ T5899] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 323.359818][ T5899] usb 5-1: USB disconnect, device number 31 [ 323.430620][ T982] usb 3-1: USB disconnect, device number 28 [ 323.902865][ T7546] adutux: No device or device unplugged -19 [ 323.916327][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 324.070504][ T5899] usb 1-1: device descriptor read/64, error -71 [ 324.316248][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 324.446311][ T5899] usb 1-1: device descriptor read/64, error -71 [ 324.556516][ T5899] usb usb1-port1: attempt power cycle [ 324.656289][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 324.805443][ T7567] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 324.826404][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 324.834586][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 324.853784][ T10] usb 2-1: config 0 has no interface number 0 [ 324.876242][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 324.892739][ T982] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 324.906944][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 324.920035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.936674][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 324.937464][ T10] usb 2-1: Product: syz [ 324.959293][ T10] usb 2-1: Manufacturer: syz [ 324.968764][ T5899] usb 1-1: device descriptor read/8, error -71 [ 324.975851][ T10] usb 2-1: SerialNumber: syz [ 325.022777][ T10] usb 2-1: config 0 descriptor?? [ 325.110287][ T982] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 325.181609][ T982] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 325.209085][ T982] usb 3-1: config 1 interface 0 has no altsetting 0 [ 325.237488][ T982] usb 3-1: string descriptor 0 read error: -22 [ 325.243870][ T982] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 325.260283][ T5899] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 325.280421][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.286964][ T5899] usb 1-1: device descriptor read/8, error -71 [ 325.397006][ T5899] usb usb1-port1: unable to enumerate USB device [ 325.415833][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 325.446113][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 325.482077][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 325.504551][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 325.528398][ T5919] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 325.556071][ T7560] i2c i2c-0: dtv_property_process_set: SET cmd 0xde914bfd undefined [ 325.669686][ T982] usbhid 3-1:1.0: can't add hid device: -71 [ 325.702586][ T982] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 325.727118][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.727742][ T982] usb 3-1: USB disconnect, device number 29 [ 325.767426][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 325.794442][ T5919] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 325.804131][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.845714][ T5919] usb 5-1: config 0 descriptor?? [ 326.094553][ T5919] Bluetooth: Can't get state to change to load ram patch err [ 326.106623][ T5919] Bluetooth: Loading patch file failed [ 326.115540][ T5919] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 326.397013][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 326.551281][ T10] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 326.562652][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.573536][ T10] usb 3-1: config 1 has no interface number 0 [ 326.581201][ T10] usb 3-1: config 1 interface 188 has no altsetting 0 [ 326.593055][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 326.605110][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.614786][ T10] usb 3-1: Product: syz [ 326.619632][ T10] usb 3-1: Manufacturer: syz [ 326.624299][ T10] usb 3-1: SerialNumber: syz [ 326.700110][ T7607] xt_policy: output policy not valid in PREROUTING and INPUT [ 326.740466][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 326.842958][ T5919] usb 3-1: USB disconnect, device number 30 [ 327.429651][ T10] usb 2-1: USB disconnect, device number 25 [ 328.185125][ T5919] usb 5-1: USB disconnect, device number 32 [ 328.462594][ T7635] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 328.967466][ T7648] ptrace attach of "./syz-executor exec"[5843] was attempted by " /sys/kernel/debug/sync/sw_sync [ 328.986305][ T5919] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 329.376120][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 329.386124][ T5919] usb 3-1: can't read configurations, error -71 [ 330.186502][ T5891] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 330.333576][ T7679] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.345402][ T7679] block device autoloading is deprecated and will be removed. [ 330.353249][ T5891] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 330.361954][ T5891] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 330.375530][ T5891] usb 5-1: config 171 has no interface number 0 [ 330.389782][ T5891] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 330.400401][ T5891] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 330.410741][ T5891] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 330.427280][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 330.436564][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.444654][ T5891] usb 5-1: Product: syz [ 330.449040][ T5891] usb 5-1: Manufacturer: syz [ 330.453841][ T5891] usb 5-1: SerialNumber: syz [ 330.462181][ T7664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.476266][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 330.636270][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 330.643265][ T5899] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 330.651984][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.662079][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.678404][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.704686][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.741723][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.762172][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.014592][ T7686] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 331.025440][ T7682] netlink: 'syz.4.474': attribute type 21 has an invalid length. [ 331.033650][ T7682] netlink: 156 bytes leftover after parsing attributes in process `syz.4.474'. [ 331.138895][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 331.154436][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 331.309221][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.388456][ T7675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 331.457858][ T7690] program syz.2.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.496545][ T5891] ath6kl: Failed to submit usb control message: -110 [ 331.505799][ T5891] ath6kl: unable to send the bmi data to the device: -110 [ 331.513563][ T5891] ath6kl: Unable to send get target info: -110 [ 331.532295][ T5891] ath6kl: Failed to init ath6kl core: -110 [ 331.549652][ T5891] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 331.581497][ T5919] usb 2-1: USB disconnect, device number 26 [ 332.069702][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.146513][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.366252][ T982] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 333.451432][ T5940] usb 5-1: USB disconnect, device number 33 [ 333.530408][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.558919][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.588115][ T982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.606319][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 333.624480][ T982] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.644643][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.678183][ T982] usb 3-1: config 0 descriptor?? [ 333.786289][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 333.866185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 333.885188][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.898404][ T7736] input: syz1 as /devices/virtual/input/input20 [ 333.901464][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 333.917289][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.947764][ T9] usb 2-1: config 0 descriptor?? [ 334.068564][ T7740] input: syz0 as /devices/virtual/input/input21 [ 334.124318][ T982] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 334.161603][ T982] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 334.178751][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.180047][ T7740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.206997][ T982] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 334.448160][ T7744] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 334.476724][ T982] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 334.490830][ T7725] xt_CT: No such helper "snmp_trap" [ 334.622005][ T10] usb 3-1: USB disconnect, device number 33 [ 334.638904][ T982] usb 1-1: device descriptor read/64, error -71 [ 334.646292][ T7727] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.492'. [ 334.661145][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.711516][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.739823][ T5919] usb 2-1: USB disconnect, device number 27 [ 334.897570][ T982] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 334.920537][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 334.920556][ T30] audit: type=1326 audit(1775293072.206:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 334.961067][ T30] audit: type=1326 audit(1775293072.206:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 334.986812][ T30] audit: type=1326 audit(1775293072.206:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.010351][ T30] audit: type=1326 audit(1775293072.206:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.034135][ T30] audit: type=1326 audit(1775293072.206:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.056765][ T982] usb 1-1: device descriptor read/64, error -71 [ 335.076074][ T30] audit: type=1326 audit(1775293072.246:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.107022][ T30] audit: type=1326 audit(1775293072.246:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.135041][ T30] audit: type=1326 audit(1775293072.246:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.169584][ T982] usb usb1-port1: attempt power cycle [ 335.181832][ T30] audit: type=1326 audit(1775293072.246:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.215242][ T30] audit: type=1326 audit(1775293072.246:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0fd9c819 code=0x7ffc0000 [ 335.566730][ T982] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 335.587152][ T982] usb 1-1: device descriptor read/8, error -71 [ 335.946327][ T982] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 335.992850][ T982] usb 1-1: device descriptor read/8, error -71 [ 336.026242][ T5919] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 336.131844][ T982] usb usb1-port1: unable to enumerate USB device [ 336.356261][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 336.369258][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 336.394164][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 336.434231][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 336.458114][ T5919] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 336.478923][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.498496][ T5919] usb 3-1: Product: syz [ 336.508469][ T5919] usb 3-1: Manufacturer: syz [ 336.513346][ T5919] usb 3-1: SerialNumber: syz [ 336.528577][ T5919] usb 3-1: config 0 descriptor?? [ 336.587211][ T5919] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 336.617382][ T7769] loop5: detected capacity change from 0 to 7 [ 336.631771][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 336.638950][ T7769] Dev loop5: unable to read RDB block 7 [ 336.645511][ T7769] loop5: unable to read partition table [ 336.655271][ T7769] loop5: partition table beyond EOD, truncated [ 336.677016][ T7769] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 336.920695][ T5919] usb 3-1: USB disconnect, device number 34 [ 336.920713][ C0] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 336.935428][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 337.245855][ T7776] syz.1.505 (7776): drop_caches: 2 [ 337.291885][ T7781] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 337.291885][ T7781] The task syz.3.501 (7781) triggered the difference, watch for misbehavior. [ 337.940132][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 338.169683][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 338.181355][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 338.193248][ T9] usb 2-1: config 0 has no interface number 0 [ 338.220601][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.254374][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 338.278655][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 338.291702][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.310165][ T9] usb 2-1: Product: syz [ 338.314465][ T9] usb 2-1: Manufacturer: syz [ 338.319331][ T9] usb 2-1: SerialNumber: syz [ 338.325938][ T9] usb 2-1: config 0 descriptor?? [ 338.487795][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 338.546365][ T982] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 338.646363][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 338.664792][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 338.677090][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 338.680927][ T7813] loop5: detected capacity change from 0 to 7 [ 338.685167][ T10] usb 1-1: Product: syz [ 338.700203][ T6518] Dev loop5: unable to read RDB block 7 [ 338.705864][ T6518] loop5: unable to read partition table [ 338.713333][ T10] usb 1-1: Manufacturer: syz [ 338.718327][ T10] usb 1-1: SerialNumber: syz [ 338.724523][ T6518] loop5: partition table beyond EOD, truncated [ 338.734217][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.744503][ T10] usb 1-1: config 0 descriptor?? [ 338.752195][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.753332][ T7813] Dev loop5: unable to read RDB block 7 [ 338.764112][ T10] usbtest 1-1:0.0: FX2 device [ 338.768010][ T7813] loop5: unable to read partition table [ 338.772148][ T10] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 338.781281][ T7813] loop5: partition table beyond EOD, truncated [ 338.795072][ T7813] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 338.795124][ T982] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 338.833390][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.851873][ T982] usb 4-1: SerialNumber: syz [ 338.945715][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 338.961267][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input23 [ 339.097891][ T982] usb 4-1: 0:2 : does not exist [ 339.150785][ T5919] usb 2-1: USB disconnect, device number 28 [ 339.476695][ T982] usb 4-1: USB disconnect, device number 27 [ 339.522998][ T5919] appletouch 2-1:0.85: input: appletouch disconnected [ 339.649701][ T5899] usb 1-1: USB disconnect, device number 34 [ 340.346593][ T5919] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 340.533920][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.546884][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.558135][ T5919] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.574159][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.588991][ T5919] usb 1-1: SerialNumber: syz [ 340.618632][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 340.642007][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 340.642028][ T30] audit: type=1326 audit(1775293077.926:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.671657][ T30] audit: type=1326 audit(1775293077.926:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.702105][ T30] audit: type=1326 audit(1775293077.926:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.732562][ T30] audit: type=1326 audit(1775293077.926:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.806272][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 340.826453][ T5899] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 340.834694][ T5899] usb 4-1: config 0 has no interface number 0 [ 340.844792][ T5919] usb 1-1: 0:2 : does not exist [ 340.852315][ T5899] usb 4-1: config 0 interface 12 has no altsetting 0 [ 340.863704][ T30] audit: type=1326 audit(1775293077.926:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.913672][ T5899] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 340.935157][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.935283][ T30] audit: type=1326 audit(1775293077.926:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 340.965014][ T5899] usb 4-1: Product: syz [ 340.980618][ T5899] usb 4-1: Manufacturer: syz [ 340.985267][ T5899] usb 4-1: SerialNumber: syz [ 341.004912][ T5919] usb 1-1: USB disconnect, device number 35 [ 341.016749][ T5899] usb 4-1: config 0 descriptor?? [ 341.053591][ T30] audit: type=1326 audit(1775293077.926:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 341.104599][ T6518] udevd[6518]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.133928][ T30] audit: type=1326 audit(1775293077.926:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 341.160719][ T30] audit: type=1326 audit(1775293077.926:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 341.186683][ T30] audit: type=1326 audit(1775293077.926:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.2.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64a159c819 code=0x7ffc0000 [ 341.200581][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 341.420552][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 341.447653][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 341.455856][ T10] usb 5-1: config 0 has no interface number 0 [ 341.463038][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.477585][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 341.523804][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 341.552086][ T10] usb 5-1: Product: syz [ 341.561986][ T10] usb 5-1: SerialNumber: syz [ 341.581298][ T10] usb 5-1: config 0 descriptor?? [ 341.591239][ T7849] loop5: detected capacity change from 0 to 7 [ 341.599227][ T7849] Dev loop5: unable to read RDB block 7 [ 341.606874][ T7849] loop5: unable to read partition table [ 341.610154][ T10] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 341.622472][ T7849] loop5: partition table beyond EOD, truncated [ 341.625251][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input24 [ 341.683620][ T7849] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 342.108848][ T5899] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 342.116590][ T5899] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 342.124221][ T5899] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 342.133107][ T5899] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 342.156345][ T5899] usb 4-1: USB disconnect, device number 28 [ 342.236331][ T5919] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 342.406237][ T5919] usb 2-1: Invalid ep0 maxpacket: 32 [ 342.536350][ T5919] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 342.672090][ T7860] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 342.686216][ T5919] usb 2-1: Invalid ep0 maxpacket: 32 [ 342.702248][ T5919] usb usb2-port1: attempt power cycle [ 342.738527][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 342.908379][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 342.917833][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.929704][ T9] usb 1-1: config 0 descriptor?? [ 342.953491][ T9] cp210x 1-1:0.0: cp210x converter detected [ 342.988851][ T5899] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 343.056274][ T5919] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 343.076843][ T5919] usb 2-1: Invalid ep0 maxpacket: 32 [ 343.149598][ T5899] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 343.158833][ T5899] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 343.169594][ T5899] usb 4-1: config 171 has no interface number 0 [ 343.181317][ T5899] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 343.192663][ T5899] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.204554][ T5899] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.218654][ T5919] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 343.232174][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 343.241674][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.250029][ T5899] usb 4-1: Product: syz [ 343.254618][ T5899] usb 4-1: Manufacturer: syz [ 343.261003][ T5919] usb 2-1: Invalid ep0 maxpacket: 32 [ 343.266667][ T5899] usb 4-1: SerialNumber: syz [ 343.271858][ T5919] usb usb2-port1: unable to enumerate USB device [ 343.285689][ T7862] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 343.351887][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.361226][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.433281][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.444140][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.459614][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 343.472542][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 343.490325][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 343.505483][ T9] usb 1-1: USB disconnect, device number 36 [ 343.527106][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 343.541808][ T9] cp210x 1-1:0.0: device disconnected [ 343.704664][ T7865] netlink: 'syz.3.531': attribute type 21 has an invalid length. [ 343.712797][ T7865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.531'. [ 343.724878][ T7865] netlink: 'syz.3.531': attribute type 21 has an invalid length. [ 343.733656][ T7865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.531'. [ 343.910082][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 343.917106][ C0] ------------[ cut here ]------------ [ 343.922843][ C0] URB ffff8880356c6600 submitted while active [ 343.929020][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: ksoftirqd/0/15 [ 343.939047][ C0] Modules linked in: [ 343.943508][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 343.952794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 343.962975][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 343.968469][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 b7 51 f8 fa 49 83 3e 00 74 40 e8 bc 02 8e fa 48 8d 3d 95 60 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 02 8e fa eb 05 e8 9a 02 [ 343.988132][ C0] RSP: 0018:ffffc90000147700 EFLAGS: 00010083 [ 343.994225][ C0] RAX: ffffffff8737b214 RBX: ffff8880356c6600 RCX: 0000000000040000 [ 344.002210][ C0] RDX: ffffc90002191000 RSI: ffff8880356c6600 RDI: ffffffff901f12b0 [ 344.010266][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 344.018239][ C0] R10: dffffc0000000000 R11: fffff52000028ee0 R12: 0000000000000820 [ 344.026281][ C0] R13: ffff88802a428030 R14: ffff8880356c6608 R15: dffffc0000000000 [ 344.034262][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 344.043304][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.049901][ C0] CR2: 000000110c3db00c CR3: 000000004b49c000 CR4: 00000000003526f0 [ 344.057890][ C0] Call Trace: [ 344.061167][ C0] [ 344.064102][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.069945][ C0] ? ___ratelimit+0x58c/0x8d0 [ 344.074641][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 344.080037][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 344.085450][ C0] dummy_timer+0xbbd/0x45d0 [ 344.090170][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 344.095174][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 344.101000][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.106498][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.111466][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.117386][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.122365][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.127323][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 344.132579][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 344.138308][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 344.144397][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 344.149524][ C0] handle_softirqs+0x22a/0x870 [ 344.154290][ C0] ? schedule+0x90/0x360 [ 344.158526][ C0] ? run_ksoftirqd+0x36/0x60 [ 344.163123][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 344.168152][ C0] run_ksoftirqd+0x36/0x60 [ 344.172579][ C0] smpboot_thread_fn+0x541/0xa50 [ 344.177523][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 344.182638][ C0] kthread+0x388/0x470 [ 344.186713][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 344.192266][ C0] ? __pfx_kthread+0x10/0x10 [ 344.196850][ C0] ret_from_fork+0x51e/0xb90 [ 344.201456][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 344.206573][ C0] ? __switch_to+0xc7d/0x1450 [ 344.211248][ C0] ? __pfx_kthread+0x10/0x10 [ 344.215831][ C0] ret_from_fork_asm+0x1a/0x30 [ 344.220690][ C0] [ 344.223722][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.230994][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 344.240179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.250397][ C0] Call Trace: [ 344.253668][ C0] [ 344.256593][ C0] vpanic+0x56c/0xa60 [ 344.260573][ C0] ? __pfx__printk+0x10/0x10 [ 344.265149][ C0] ? __pfx_vpanic+0x10/0x10 [ 344.269641][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 344.274918][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 344.280123][ C0] panic+0xc5/0xd0 [ 344.283840][ C0] ? __pfx_panic+0x10/0x10 [ 344.288277][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 344.293212][ C0] __warn+0x315/0x4f0 [ 344.297190][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 344.302041][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 344.306890][ C0] __report_bug+0x29a/0x540 [ 344.311404][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 344.316801][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 344.321667][ C0] ? __pfx___report_bug+0x10/0x10 [ 344.326709][ C0] ? dev_printk_emit+0xee/0x140 [ 344.331565][ C0] report_bug_entry+0x19a/0x290 [ 344.336415][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 344.341280][ C0] ? usb_submit_urb+0x83/0x18b0 [ 344.346129][ C0] handle_bug+0xce/0x200 [ 344.350371][ C0] exc_invalid_op+0x1a/0x50 [ 344.354873][ C0] asm_exc_invalid_op+0x1a/0x20 [ 344.359731][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 344.365194][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 b7 51 f8 fa 49 83 3e 00 74 40 e8 bc 02 8e fa 48 8d 3d 95 60 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 02 8e fa eb 05 e8 9a 02 [ 344.384976][ C0] RSP: 0018:ffffc90000147700 EFLAGS: 00010083 [ 344.391043][ C0] RAX: ffffffff8737b214 RBX: ffff8880356c6600 RCX: 0000000000040000 [ 344.399096][ C0] RDX: ffffc90002191000 RSI: ffff8880356c6600 RDI: ffffffff901f12b0 [ 344.407077][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 344.415057][ C0] R10: dffffc0000000000 R11: fffff52000028ee0 R12: 0000000000000820 [ 344.423040][ C0] R13: ffff88802a428030 R14: ffff8880356c6608 R15: dffffc0000000000 [ 344.431039][ C0] ? usb_submit_urb+0x74/0x18b0 [ 344.435928][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.441824][ C0] ? ___ratelimit+0x58c/0x8d0 [ 344.446591][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 344.452315][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 344.457691][ C0] dummy_timer+0xbbd/0x45d0 [ 344.462202][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 344.467139][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 344.472953][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.478322][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.483273][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.489072][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.494015][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 344.498945][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 344.504585][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 344.510316][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 344.516379][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 344.521492][ C0] handle_softirqs+0x22a/0x870 [ 344.526262][ C0] ? schedule+0x90/0x360 [ 344.530502][ C0] ? run_ksoftirqd+0x36/0x60 [ 344.535108][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 344.540243][ C0] run_ksoftirqd+0x36/0x60 [ 344.544672][ C0] smpboot_thread_fn+0x541/0xa50 [ 344.549610][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 344.554644][ C0] kthread+0x388/0x470 [ 344.558708][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 344.564177][ C0] ? __pfx_kthread+0x10/0x10 [ 344.568762][ C0] ret_from_fork+0x51e/0xb90 [ 344.573349][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 344.578453][ C0] ? __switch_to+0xc7d/0x1450 [ 344.583139][ C0] ? __pfx_kthread+0x10/0x10 [ 344.587733][ C0] ret_from_fork_asm+0x1a/0x30 [ 344.592678][ C0] [ 345.703935][ C0] Shutting down cpus with NMI [ 345.709289][ C0] Kernel Offset: disabled [ 345.713644][ C0] Rebooting in 86400 seconds..