last executing test programs: 37m45.68005985s ago: executing program 1 (id=45): socket$inet(0xa, 0x801, 0x84) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0), 0x0) fanotify_init(0x200, 0x0) socket$inet(0xa, 0x801, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x10008001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) socket$tipc(0x1e, 0x2, 0x0) epoll_create1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 37m42.126820626s ago: executing program 1 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 37m38.911912473s ago: executing program 1 (id=51): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000e, 0x11, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0x4, 0x1, 0x3ff, 0x3, 0x4002004c2, 0x1000, 0x9, 0x10001, 0xfffffffffffffffb, 0x8, 0x4, 0x0, 0x8, 0x4000000da91], 0x41000, 0x2008c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 37m37.929924357s ago: executing program 1 (id=53): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) 37m33.824730016s ago: executing program 1 (id=55): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_create1(0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4000, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000140000000000739078ac1414bbac1414351c7fd752c0a00759b8109f9e61f801113407c7afd60b88a0d265cc1a42918c31ab12ccda88cca8951ba783f5b2ba24555f003832d764d792d7b4026185001bc3e911a913c3324c52ffbba02ebcaadb4aba1223a2f0c8ccd2a10f68ec98a582cc92d07726539b1120dfa6d8cd2a06102c9354d050310db25645f520adf3153bfb53c4b70d77ea0f0b198643723da7c0811007176cc4ebda4ca2c4922ae743cb793ab459c35c7aaa53aa3ce3abcf726cacf9ed989dbc0b28c4f1b701"], 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40080a1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) 37m30.289934321s ago: executing program 1 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 37m14.901438653s ago: executing program 32 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x4005) 23m25.86811285s ago: executing program 2 (id=1521): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r2], 0x20) 23m25.665867785s ago: executing program 2 (id=1522): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBhYGRgZWBgYGNQZIWIMTBBqPZT/AkrPhErbQPnNUHohTB+D9ro1zAxnTnrqai2TZWZgbGBgqLilvW7NKT+wmFxqj5Gb5GJ2BmaG0NQji4orq7ITc3JSTzCwMlQwMvFBzbim0izB6fBHnsMhSZOZgYHBxyOLmRUqx5apcPbMB3mQJxgerWDeWOeZ11hXmDo1L40T5vSNMxs7GxtXTqyLSmNZxdiS4rKpqZORyWGLmsDmo9sgatpXPUxyYO3hgPBOHIyyA9ErqmZO+KI0m9HwO8MdHuYVEhoaThJXJCwaTBiO1Nk2uDJUwKxgTFJjE2vbcmZOCDM/G8MChZbkE0yhRzmWzpSwOCBUdfLnVHYGmNIzPIeP86wp6BM0Oi7B4LRQ8L8MQ8Wt5ISGhjKNtUxLbRd8KdL4K+G12tgpg8HdnmkZLEBZGkDkSihPFqwnIXmFh46mplFKckLDJoWEJLcCQ+X9vbYhqwUaGJCiTYWBgWE7IyxuoSEKj59RMApGwSgYBaNgFIyCUTAKRsEoGAUjAQACAAD//3aieJo=") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@cswp={0x58, 0x114, 0x7, {{0x80000000, 0x2}, &(0x7f0000000280)=0x1ad, 0x0, 0x9, 0x6, 0x7fff, 0x3, 0x3, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000000300)=""/212, 0xd4}, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/26, 0x1a}, {&(0x7f0000000e00)=""/153, 0x99}, {&(0x7f0000000ec0)=""/12, 0xc}], 0x4}}], 0xa0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x8) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 23m24.513541713s ago: executing program 2 (id=1524): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 23m23.843414959s ago: executing program 2 (id=1528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) unshare(0x20040600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x26) keyctl$invalidate(0x15, r3) add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x200000e, 0x11, 0xffffffffffffffff, 0x100000000) 23m22.744670566s ago: executing program 2 (id=1531): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x111) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) 23m20.744314924s ago: executing program 2 (id=1533): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$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") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@cswp={0x58, 0x114, 0x7, {{0x80000000, 0x2}, &(0x7f0000000280)=0x1ad, 0x0, 0x9, 0x6, 0x7fff, 0x3, 0x3, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000000300)=""/212, 0xd4}, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/26, 0x1a}, {&(0x7f0000000e00)=""/153, 0x99}, {&(0x7f0000000ec0)=""/12, 0xc}], 0x5}}], 0xa0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x8) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 23m4.990227647s ago: executing program 33 (id=1533): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$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") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@cswp={0x58, 0x114, 0x7, {{0x80000000, 0x2}, &(0x7f0000000280)=0x1ad, 0x0, 0x9, 0x6, 0x7fff, 0x3, 0x3, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000000300)=""/212, 0xd4}, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000d00)=""/106, 0x6a}, {&(0x7f0000000d80)=""/26, 0x1a}, {&(0x7f0000000e00)=""/153, 0x99}, {&(0x7f0000000ec0)=""/12, 0xc}], 0x5}}], 0xa0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x8) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r6, 0x1) 19m53.998234401s ago: executing program 4 (id=1789): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 19m49.691846915s ago: executing program 4 (id=1795): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) close(r2) 19m48.235184721s ago: executing program 4 (id=1797): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) getegid() read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) flock(0xffffffffffffffff, 0x6) semop(0x0, &(0x7f0000000200)=[{0x0, 0xff43, 0x800}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0x16, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 19m45.283903373s ago: executing program 4 (id=1800): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) 19m43.647989792s ago: executing program 4 (id=1803): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 19m35.545243909s ago: executing program 4 (id=1807): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBhYGRgZWBgYGNQZIWIMTBBqPZT/AkrPhErbQPnNUHohTB+D9ro1zAxnTnrqai2TZWZgbGBgqLilvW7NKT+wmFxqj5Gb5GJ2BmaG0NQji4orq7ITc3JSTzCwMlQwMvFBzbim0izB6fBHnsMhSZOZgYHBxyOLmRUqx5apcPbMB3mQJxgerWDeWOeZ11hXmDo1L40T5vSNMxs7GxtXTqyLSmNZxdiS4rKpqZORyWGLmsDmo9sgatpXPUxyYO3hgPBOHIyyA9ErqmZO+KI0m9HwO8MdHuYVEhoaThJXJCwaTBiO1Nk2uDJUwKxgTFJjE2vbcmZOCDM/G8MChZbkE0yhRzmWzpSwOCBUdfLnVHYGmNIzPIeP86wp6BM0Oi7B4LRQ8L8MQ8Wt5ISGhjKNtUxLbRd8KdL4K+G12tgpg8HdnmkZLEBZGkDkSihPFqwnIXmFh46mplFKckLDJoWEJLcCQ+X9vbYhqwUaGJCiTYWBgWE7IyxuoSEKj59RMApGwSgYBaNgFIyCUTAKRsEoGAUjAQACAAD//3aieJo=") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@rdma_args={0x24, 0x114, 0x1, {{0x5, 0x2}, {0x0}, 0x0}}], 0x48}, 0x0) 19m19.550094057s ago: executing program 34 (id=1807): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$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") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@rdma_args={0x24, 0x114, 0x1, {{0x5, 0x2}, {0x0}, 0x0}}], 0x48}, 0x0) 17m53.059691525s ago: executing program 6 (id=1980): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) getpid() socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 17m51.852902425s ago: executing program 6 (id=1983): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17m49.648074239s ago: executing program 6 (id=1990): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17m48.130160605s ago: executing program 6 (id=1995): add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsmount(r0, 0x0, 0x9) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r5, &(0x7f0000000280)=""/189, 0xbd) 17m46.065910805s ago: executing program 6 (id=1997): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x111) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 17m43.301479452s ago: executing program 6 (id=2002): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 17m25.869994525s ago: executing program 35 (id=2002): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 10.439659283s ago: executing program 0 (id=4490): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.090056862s ago: executing program 7 (id=4495): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000005c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.945371635s ago: executing program 0 (id=4498): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716", 0x23, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000008c0)={0x2, &(0x7f0000000100)=[{0x517d, 0x3, 0xc, 0xfffff000}, {0x5fe, 0xf, 0x1, 0x3}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf1, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.854015387s ago: executing program 0 (id=4500): 7.7296921s ago: executing program 0 (id=4502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x48040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r0], 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.825582417s ago: executing program 7 (id=4503): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fd, @local}, @dest_unreach={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}}, 0x3e) 5.597742693s ago: executing program 0 (id=4504): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000b40)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) cachestat(r0, &(0x7f00000002c0)={0x3, 0x2ed9}, &(0x7f0000000340), 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='selinuxfs\x00', 0x20000, &(0x7f0000000980)='noreMovery') r3 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x400e40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './config/usb_gadget/g_uac2/functions/uac2.usb0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff6}, {}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40850) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a400, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.361675428s ago: executing program 3 (id=4505): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="400c0100000021"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0x1, 0x4, "470dcb36"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.977528508s ago: executing program 5 (id=4506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 4.790754192s ago: executing program 5 (id=4507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x6, 0x50, 0x8, 0x5, 0x363, 0x6}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0x0, 0x2, 0x2, {0x2, 0x11}}, &(0x7f0000000ac0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "666db16fa0c5ed6d385cf0d445f3ccd07d8c9e3fcb726980489dd296e7bc00a9a1dd40a35f45509c89db8c6d0758e4997971f919958d0cf49959daacaa1f9b25"}}, 0x0, 0x0}, 0x0) 4.625961686s ago: executing program 7 (id=4508): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716", 0x23, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000008c0)={0x2, &(0x7f0000000100)=[{0x517d, 0x3, 0xc, 0xfffff000}, {0x5fe, 0xf, 0x1, 0x3}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf1, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.601452317s ago: executing program 7 (id=4509): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x880, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 4.530773959s ago: executing program 7 (id=4510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x43, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 4.213903416s ago: executing program 3 (id=4511): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000005c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.207350221s ago: executing program 0 (id=4512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x87, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x7, 0x1, [{0x5, 0x7}], 0xbf}]}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.938049398s ago: executing program 7 (id=4513): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff000000070581020002000705820200020007"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000003100)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.673900889s ago: executing program 5 (id=4514): arch_prctl$ARCH_GET_GS(0x1004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) r4 = accept$alg(r2, 0x0, 0x0) r5 = dup3(r4, r2, 0x0) sendfile(r5, r1, 0x0, 0x1000009) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x5c}}, 0x80084) 547.791217ms ago: executing program 3 (id=4515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000780)=[{0x0, 0x3, {0x0, 0x1, 0x2}, {0x2, 0xf0, 0x1}, 0xfe, 0x1}, {0x1, 0x1, {0x1, 0x0, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 351.279012ms ago: executing program 5 (id=4516): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fd, @local}, @dest_unreach={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}}, 0x3e) 249.904584ms ago: executing program 3 (id=4517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000380)}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 190.839186ms ago: executing program 3 (id=4518): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb5", 0x26, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000008c0)={0x2, &(0x7f0000000100)=[{0x517d, 0x3, 0xc, 0xfffff000}, {0x5fe, 0xf, 0x1, 0x3}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf1, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 169.350316ms ago: executing program 5 (id=4519): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r2}]) dup3(r2, r0, 0x80000) 66.069669ms ago: executing program 3 (id=4520): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000b40)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) cachestat(r0, &(0x7f00000002c0)={0x3, 0x2ed9}, &(0x7f0000000340), 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='selinuxfs\x00', 0x20000, &(0x7f0000000980)='noreMovery') r3 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x400e40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './config/usb_gadget/g_uac2/functions/uac2.usb0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff6}, {}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40850) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a400, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 5 (id=4521): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xb, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x5, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x10001, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x2, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): -1: config 127 has an invalid interface number: 57 but max is 0 [ 2190.460326][T14552] usb 4-1: config 127 has no interface number 0 [ 2190.466691][T14552] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2190.505112][T14552] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 2190.520276][T14552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.535175][T14552] usb 4-1: Product: syz [ 2190.544055][T14552] usb 4-1: Manufacturer: syz [ 2190.552173][T14552] usb 4-1: SerialNumber: syz [ 2190.581527][T20512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2191.033057][T20512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2191.261584][T20521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3831'. [ 2191.277812][T14552] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2191.370216][T14879] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2191.550537][T14879] usb 1-1: Using ep0 maxpacket: 8 [ 2191.607231][T14879] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2191.616762][T14879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2191.625515][T14879] usb 1-1: Product: syz [ 2191.630670][T14879] usb 1-1: Manufacturer: syz [ 2191.641401][T14879] usb 1-1: SerialNumber: syz [ 2191.696667][T14879] usb 1-1: config 0 descriptor?? [ 2191.731737][T14552] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2191.738765][T14879] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2191.750752][T14552] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2191.934063][T14552] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2192.029528][T14552] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2192.246886][T14879] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 2192.261480][T14879] sq905: probe of 1-1:0.0 failed with error -71 [ 2192.297032][T14879] usb 1-1: USB disconnect, device number 40 [ 2192.593119][T14552] asix 4-1:127.57 eth17: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, da:bb:83:9a:94:a9 [ 2192.641830][T14552] usb 4-1: USB disconnect, device number 52 [ 2192.659126][T14552] asix 4-1:127.57 eth17: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 2192.878156][T20507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2196.199928][T20556] netlink: 'syz.0.3841': attribute type 4 has an invalid length. [ 2196.208660][T20556] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3841'. [ 2196.520240][T10709] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2196.724391][T10709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2196.749393][T10709] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2196.767308][T10709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2196.776632][T10709] usb 4-1: Product: syz [ 2196.782732][T10709] usb 4-1: Manufacturer: syz [ 2196.807035][T10709] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input241 [ 2197.132730][T10709] usb 4-1: USB disconnect, device number 53 [ 2197.740276][T10709] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2197.934955][T10709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2197.964058][T10709] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2197.980956][T10709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2198.010038][T10709] usb 4-1: Product: syz [ 2198.020304][T10709] usb 4-1: Manufacturer: syz [ 2198.055608][T10709] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input242 [ 2198.320546][T10709] usb 4-1: USB disconnect, device number 54 [ 2200.167190][T20572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2203.429408][T20639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2206.800270][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2207.010302][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2207.041766][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.060188][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2207.079532][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.090389][ T9] usb 1-1: config 0 descriptor?? [ 2207.311128][T15580] Bluetooth: hci4: adv larger than maximum supported [ 2207.311218][T15580] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 2207.318632][T15580] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2207.334193][ T9] usb 1-1: USB disconnect, device number 41 [ 2208.450975][T20686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2209.020300][T14552] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2209.920619][T14552] usb 1-1: Using ep0 maxpacket: 32 [ 2209.943969][T14552] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2209.953709][T14552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.970009][T14552] usb 1-1: Product: syz [ 2209.975861][T14552] usb 1-1: Manufacturer: syz [ 2209.989104][T14552] usb 1-1: SerialNumber: syz [ 2209.998041][T14552] usb 1-1: config 0 descriptor?? [ 2210.012192][T14552] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2211.341702][T20747] bridge0: port 4(wlan1) entered disabled state [ 2211.503022][T20747] mac80211_hwsim hwsim13 wlan1 (unregistering): left allmulticast mode [ 2211.512340][T20747] mac80211_hwsim hwsim13 wlan1 (unregistering): left promiscuous mode [ 2211.529338][T20747] bridge0: port 4(wlan1) entered disabled state [ 2212.138932][T14552] gspca_ov534_9: reg_r err -71 [ 2212.490301][T14552] gspca_ov534_9: Unknown sensor 0000 [ 2212.490397][T14552] ov534_9: probe of 1-1:0.0 failed with error -22 [ 2212.975049][T14552] usb 1-1: USB disconnect, device number 42 [ 2214.428010][T15580] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2214.746714][T20749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2217.776852][T14552] Process accounting resumed [ 2217.943417][T20830] Process accounting resumed [ 2219.230247][T14877] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2219.420525][T14877] usb 4-1: Using ep0 maxpacket: 32 [ 2219.438450][T14877] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2219.448164][T14877] usb 4-1: config 0 has no interface number 0 [ 2219.464799][T14877] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2219.474616][T14877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.483813][T14877] usb 4-1: Product: syz [ 2219.489061][T14877] usb 4-1: Manufacturer: syz [ 2219.497384][T14877] usb 4-1: SerialNumber: syz [ 2219.506220][T14877] usb 4-1: config 0 descriptor?? [ 2219.519811][T14877] smsc95xx v2.0.0 [ 2220.427117][T20818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2221.165832][T14877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2221.278301][T14877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2221.393446][T14877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2221.501444][T14877] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 2221.760220][T14877] usb 4-1: USB disconnect, device number 55 [ 2221.826951][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.833479][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.846238][T20878] loop3: detected capacity change from 0 to 16 [ 2222.875897][T20878] erofs: (device loop3): mounted with root inode @ nid 36. [ 2225.339172][T20905] Config c/1 of g1 needs at least one function. [ 2225.347032][T20905] udc dummy_udc.0: failed to start g1: -22 [ 2225.360376][T20905] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 2225.368640][T20905] UDC core: g1: couldn't find an available UDC or it's busy [ 2226.641563][T20890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2227.534601][T15580] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 2229.129131][T20953] loop0: detected capacity change from 0 to 64 [ 2230.253864][T20980] loop5: detected capacity change from 0 to 64 [ 2232.798629][T21001] Unsupported ieee802154 address type: 0 [ 2232.897818][T21008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'. [ 2233.183186][T21012] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3967'. [ 2233.199790][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3967'. [ 2233.857553][T21014] loop3: detected capacity change from 0 to 64 [ 2234.273490][T19623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2234.300570][T19623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2234.311568][T19623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2234.326724][T19623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2234.350963][T19623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2234.360459][T19623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2234.681745][T21022] chnl_net:caif_netlink_parms(): no params data found [ 2234.929740][T21022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.974803][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.014994][T21022] bridge_slave_0: entered allmulticast mode [ 2235.131909][T21022] bridge_slave_0: entered promiscuous mode [ 2235.267101][T21042] netlink: 'syz.3.3972': attribute type 10 has an invalid length. [ 2235.629124][T21042] team0: Port device virt_wifi0 added [ 2235.721606][T21022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.787573][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.857805][T21022] bridge_slave_1: entered allmulticast mode [ 2235.915760][T21022] bridge_slave_1: entered promiscuous mode [ 2235.949369][T21022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2235.962572][T21022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2236.004779][T21022] team0: Port device team_slave_0 added [ 2236.014978][T21022] team0: Port device team_slave_1 added [ 2236.087270][T21022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2236.110246][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2236.156012][T21022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2236.189009][T21022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2236.210913][T21022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2236.353896][T21022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2236.461432][T19623] Bluetooth: hci0: command tx timeout [ 2236.796069][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 2237.246770][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2237.300286][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2237.313856][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2237.344457][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2237.352032][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2237.363915][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2237.390628][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2237.398097][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2237.495530][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2237.535909][ T5004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.559053][ T9] usb 1-1: string descriptor 0 read error: -22 [ 2237.565540][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2237.586845][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.620492][T21022] hsr_slave_0: entered promiscuous mode [ 2237.628567][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 2237.638623][T21022] hsr_slave_1: entered promiscuous mode [ 2237.660542][T21022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2237.681101][T21022] Cannot create hsr debugfs directory [ 2237.929028][ T5004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.129254][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3978'. [ 2238.185750][T21059] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3978'. [ 2238.268850][T14879] usb 1-1: USB disconnect, device number 43 [ 2238.613999][T19623] Bluetooth: hci0: command tx timeout [ 2238.849133][ T5004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.071212][ T5004] bond0: (slave netdevsim0): Releasing backup interface [ 2239.104575][ T5004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.346288][T21079] loop7: detected capacity change from 0 to 16 [ 2239.376451][T21079] erofs: (device loop7): mounted with root inode @ nid 36. [ 2240.200467][ T5004] tipc: Left network mode [ 2240.700607][T19623] Bluetooth: hci0: command tx timeout [ 2240.889107][ T5004] bridge0: port 3(macvlan2) entered disabled state [ 2240.965903][ T5004] macvlan2 (unregistering): left allmulticast mode [ 2240.974820][ T5004] macvlan2 (unregistering): left promiscuous mode [ 2240.982107][ T5004] bridge0: port 3(macvlan2) entered disabled state [ 2242.336586][T21022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2242.477642][T21022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2242.546163][T21022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2242.679412][T21022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2242.780591][T19623] Bluetooth: hci0: command tx timeout [ 2242.930354][T14552] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2242.995013][ T5004] hsr_slave_0: left promiscuous mode [ 2243.003442][ T5004] hsr_slave_1: left promiscuous mode [ 2243.029515][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2243.039211][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2243.054616][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2243.064185][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2243.077694][ T5004] bridge_slave_1: left allmulticast mode [ 2243.084803][ T5004] bridge_slave_1: left promiscuous mode [ 2243.099364][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.111628][ T5004] bridge_slave_0: left allmulticast mode [ 2243.117304][ T5004] bridge_slave_0: left promiscuous mode [ 2243.123303][T14552] usb 4-1: Using ep0 maxpacket: 16 [ 2243.145843][T14552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.167231][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.185010][T14552] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2243.216349][T14552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.253590][T14552] usb 4-1: config 0 descriptor?? [ 2243.277765][ T5004] veth1_macvtap: left promiscuous mode [ 2243.295594][ T5004] veth0_macvtap: left promiscuous mode [ 2243.309537][ T5004] veth1_vlan: left promiscuous mode [ 2243.318238][ T5004] veth0_vlan: left promiscuous mode [ 2243.529768][T19623] Bluetooth: hci1: adv larger than maximum supported [ 2243.529848][T19623] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2243.534007][T14552] usb 4-1: USB disconnect, device number 56 [ 2243.632152][T21130] loop0: detected capacity change from 0 to 16 [ 2243.659977][T21130] erofs: (device loop0): mounted with root inode @ nid 36. [ 2247.036037][T21168] loop0: detected capacity change from 0 to 16 [ 2247.136364][T21168] erofs: (device loop0): mounted with root inode @ nid 36. [ 2247.661668][ T5004] team0 (unregistering): Port device team_slave_1 removed [ 2247.729835][ T5004] team0 (unregistering): Port device team_slave_0 removed [ 2247.816876][ T5004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2247.840226][T14552] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2247.920783][ T5004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.044111][T14552] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.067198][T14552] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2248.091695][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.124306][T14552] usb 1-1: config 0 descriptor?? [ 2248.152480][T14552] pwc: Askey VC010 type 2 USB webcam detected. [ 2248.379931][T14552] pwc: send_video_command error -71 [ 2248.386977][T14552] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2248.409423][T14552] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 2248.446959][T14552] usb 1-1: USB disconnect, device number 44 [ 2248.833771][ T5004] bond0 (unregistering): Released all slaves [ 2249.014221][T14552] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2249.252524][T14552] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.310263][T14552] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2249.348868][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.371367][T14552] usb 1-1: config 0 descriptor?? [ 2249.381520][T14552] pwc: Askey VC010 type 2 USB webcam detected. [ 2249.477633][T21022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2249.760541][T21022] 8021q: adding VLAN 0 to HW filter on device team0 [ 2249.789584][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.796838][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2249.814790][T14552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2249.825114][T14552] pwc: recv_control_msg error -32 req 02 val 2700 [ 2249.832657][T14552] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2249.851139][T14552] pwc: recv_control_msg error -32 req 04 val 1000 [ 2249.858798][T14552] pwc: recv_control_msg error -32 req 04 val 1300 [ 2249.867050][T14552] pwc: recv_control_msg error -32 req 04 val 1400 [ 2249.884231][T14552] pwc: recv_control_msg error -32 req 02 val 2000 [ 2249.929252][T14552] pwc: recv_control_msg error -32 req 02 val 2100 [ 2249.990091][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.997282][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2250.006125][T14552] pwc: recv_control_msg error -32 req 04 val 1500 [ 2250.013757][T14552] pwc: recv_control_msg error -32 req 02 val 2500 [ 2250.027543][T14552] pwc: recv_control_msg error -32 req 02 val 2400 [ 2250.036552][T14552] pwc: recv_control_msg error -32 req 02 val 2600 [ 2250.045040][T14552] pwc: recv_control_msg error -32 req 02 val 2900 [ 2250.053338][T14552] pwc: recv_control_msg error -71 req 02 val 2800 [ 2250.062084][T14552] pwc: recv_control_msg error -71 req 04 val 1100 [ 2250.069117][T14552] pwc: recv_control_msg error -71 req 04 val 1200 [ 2250.078486][T14552] pwc: Registered as video103. [ 2250.171471][T14552] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input243 [ 2250.342802][T14552] usb 1-1: USB disconnect, device number 45 [ 2250.713374][T21199] trusted_key: encrypted_key: insufficient parameters specified [ 2251.380347][T21201] loop7: detected capacity change from 0 to 16 [ 2251.398264][T21201] erofs: (device loop7): mounted with root inode @ nid 36. [ 2252.699116][T21216] UDC core: g1: couldn't find an available UDC or it's busy [ 2252.836244][T21022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2254.535350][T21236] loop3: detected capacity change from 0 to 16 [ 2254.590734][T21236] erofs: (device loop3): mounted with root inode @ nid 36. [ 2255.811537][T21022] veth0_vlan: entered promiscuous mode [ 2255.844181][T21022] veth1_vlan: entered promiscuous mode [ 2255.875931][T21244] UDC core: g1: couldn't find an available UDC or it's busy [ 2256.008295][T21022] veth0_macvtap: entered promiscuous mode [ 2256.043795][T21022] veth1_macvtap: entered promiscuous mode [ 2256.109137][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2256.128664][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.158600][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2256.186545][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.233727][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2256.259609][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.281482][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2256.310266][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.360800][T21022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2256.489203][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2256.519807][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.569668][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2256.596846][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.640823][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2256.680295][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2256.690485][T21022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2256.701940][T21022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2257.213917][T21258] loop7: detected capacity change from 0 to 16 [ 2257.233948][T21258] erofs: (device loop7): mounted with root inode @ nid 36. [ 2257.261275][T21022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2257.342504][T21022] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.383431][T21022] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.474125][T21022] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.489421][T21022] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2257.907201][T21265] UDC core: g1: couldn't find an available UDC or it's busy [ 2257.962468][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2258.001411][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.124018][T15919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2258.138161][T15919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2258.654610][T14877] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2258.931001][T14877] usb 8-1: Using ep0 maxpacket: 16 [ 2259.055370][T14877] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 2259.144155][T14877] usb 8-1: config 0 has no interface number 0 [ 2259.247861][T14877] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2259.269186][T14877] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2259.308164][T14877] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2259.340128][T14877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.368804][T14877] usb 8-1: Product: syz [ 2259.379195][T14877] usb 8-1: Manufacturer: syz [ 2259.389596][T14877] usb 8-1: SerialNumber: syz [ 2259.396410][T21282] loop3: detected capacity change from 0 to 16 [ 2259.421303][T14877] usb 8-1: config 0 descriptor?? [ 2259.452064][T21273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2259.459406][T21273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2259.478915][T21282] erofs: (device loop3): mounted with root inode @ nid 36. [ 2259.500829][T11784] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2259.692850][T11784] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2259.708050][T21273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2259.711738][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.743943][T21273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2259.753706][T11784] usb 6-1: config 0 descriptor?? [ 2259.788219][T11784] pwc: Creative Labs Webcam 5 detected. [ 2259.875176][T21289] UDC core: g1: couldn't find an available UDC or it's busy [ 2259.975167][T14877] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2259.999258][T14877] asix: probe of 8-1:0.34 failed with error -61 [ 2260.416016][T11784] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2260.436751][T11784] pwc: recv_control_msg error -32 req 02 val 2700 [ 2260.458029][T11784] pwc: recv_control_msg error -32 req 04 val 1600 [ 2260.673226][T11784] pwc: recv_control_msg error -71 req 04 val 1000 [ 2260.705520][T11784] pwc: recv_control_msg error -71 req 04 val 1300 [ 2260.742834][T11784] pwc: recv_control_msg error -71 req 04 val 1400 [ 2260.760476][T11784] pwc: recv_control_msg error -71 req 02 val 2000 [ 2260.783994][T11784] pwc: recv_control_msg error -71 req 02 val 2100 [ 2260.800325][T11784] pwc: recv_control_msg error -71 req 06 val 0600 [ 2260.811302][T11784] pwc: recv_control_msg error -71 req 04 val 1500 [ 2260.822182][T11784] pwc: recv_control_msg error -71 req 02 val 2500 [ 2260.829495][T11784] pwc: recv_control_msg error -71 req 02 val 2400 [ 2260.839113][T11784] pwc: recv_control_msg error -71 req 02 val 2600 [ 2260.854603][T11784] pwc: recv_control_msg error -71 req 02 val 2900 [ 2260.863784][T11784] pwc: recv_control_msg error -71 req 02 val 2800 [ 2260.875921][T11784] pwc: recv_control_msg error -71 req 04 val 1100 [ 2260.888020][T11784] pwc: recv_control_msg error -71 req 04 val 1200 [ 2260.896637][T11784] pwc: Failed to power off camera (-71) [ 2260.913792][T11784] pwc: Registered as video103. [ 2260.945407][T11784] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input244 [ 2260.997737][T11784] usb 6-1: USB disconnect, device number 33 [ 2261.513601][T14877] usb 8-1: USB disconnect, device number 32 [ 2261.794697][T21311] loop7: detected capacity change from 0 to 16 [ 2261.934050][T21311] erofs: (device loop7): mounted with root inode @ nid 36. [ 2262.601342][T21316] UDC core: g1: couldn't find an available UDC or it's busy [ 2262.852768][T19623] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 2262.953946][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4054'. [ 2263.129916][T21335] loop7: detected capacity change from 0 to 16 [ 2263.138653][T21335] erofs: (device loop7): mounted with root inode @ nid 36. [ 2263.220908][ T5834] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2263.522126][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.533688][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.544514][ T5834] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2263.560623][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.595272][ T5834] usb 1-1: config 0 descriptor?? [ 2264.300946][ T5834] usb 1-1: language id specifier not provided by device, defaulting to English [ 2264.372344][T21344] UDC core: g1: couldn't find an available UDC or it's busy [ 2264.694790][ T5834] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input245 [ 2264.911702][ T5834] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input246 [ 2264.992714][ T5834] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input247 [ 2265.042632][ T5834] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input248 [ 2265.196942][ T5834] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2265.210198][T18149] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2265.311212][ T5834] usb 1-1: USB disconnect, device number 46 [ 2265.325246][T21356] loop7: detected capacity change from 0 to 16 [ 2265.389632][T21356] erofs: (device loop7): mounted with root inode @ nid 36. [ 2265.453397][T18149] usb 6-1: Using ep0 maxpacket: 32 [ 2265.475837][T18149] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 2265.521078][T18149] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.567411][T18149] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2265.582382][T21357] fido_id[21357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2265.616252][T18149] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2265.648457][T18149] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 2265.678778][T18149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.708815][T18149] usb 6-1: config 0 descriptor?? [ 2266.176004][T18149] input: HID 044f:b323 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:044F:B323.0003/input/input249 [ 2266.303676][T18149] thrustmaster 0003:044F:B323.0003: input,hidraw0: USB HID v80.00 Joystick [HID 044f:b323] on usb-dummy_hcd.5-1/input0 [ 2266.360479][T18149] thrustmaster 0003:044F:B323.0003: can't find FF field in output reports [ 2266.487386][T18149] usb 6-1: USB disconnect, device number 34 [ 2266.708908][T21369] fido_id[21369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2266.769850][T21372] UDC core: g1: couldn't find an available UDC or it's busy [ 2266.873495][T19623] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2266.884486][T19623] Bluetooth: hci4: Injecting HCI hardware error event [ 2266.894872][T19623] Bluetooth: hci4: hardware error 0x00 [ 2267.313307][T15580] Bluetooth: hci0: unexpected event 0x0f length: 13 > 4 [ 2267.336848][T21384] loop7: detected capacity change from 0 to 16 [ 2267.347965][T21384] erofs: (device loop7): mounted with root inode @ nid 36. [ 2267.971017][T21397] UDC core: g1: couldn't find an available UDC or it's busy [ 2268.940344][T19623] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2269.102378][T21407] netlink: 'syz.5.4085': attribute type 10 has an invalid length. [ 2269.111233][T21407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4085'. [ 2269.120616][T21407] netlink: 'syz.5.4085': attribute type 10 has an invalid length. [ 2269.128831][T21407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4085'. [ 2269.400761][T21411] loop0: detected capacity change from 0 to 16 [ 2269.442911][T21411] erofs: (device loop0): mounted with root inode @ nid 36. [ 2269.665919][T18149] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2269.882702][T18149] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2269.925083][T18149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.971129][T18149] usb 4-1: config 0 descriptor?? [ 2270.016075][T18149] pwc: Creative Labs Webcam 5 detected. [ 2271.340370][T19623] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2271.349526][T19623] Bluetooth: hci0: Injecting HCI hardware error event [ 2271.360950][T15580] Bluetooth: hci0: hardware error 0x00 [ 2272.004554][T21420] UDC core: g1: couldn't find an available UDC or it's busy [ 2272.685985][T21436] loop7: detected capacity change from 0 to 16 [ 2272.726728][T21436] erofs: (device loop7): mounted with root inode @ nid 36. [ 2273.240455][T11782] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2273.467822][T18149] pwc: send_video_command error -71 [ 2273.475360][T18149] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2273.483462][T18149] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 2273.498241][T18149] usb 4-1: USB disconnect, device number 57 [ 2273.510174][T11782] usb 8-1: Using ep0 maxpacket: 32 [ 2273.525058][T11782] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2273.534419][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.544551][T11782] usb 8-1: Product: syz [ 2273.548761][T11782] usb 8-1: Manufacturer: syz [ 2273.553965][T11782] usb 8-1: SerialNumber: syz [ 2273.572418][T11782] usb 8-1: config 0 descriptor?? [ 2273.590972][T11782] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2273.899318][T21459] UDC core: g1: couldn't find an available UDC or it's busy [ 2274.060239][T15580] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2275.011114][T11782] gspca_ov534_9: reg_r err -71 [ 2275.347632][T21474] loop3: detected capacity change from 0 to 16 [ 2275.360533][T11782] gspca_ov534_9: Unknown sensor 0000 [ 2275.360672][T11782] ov534_9: probe of 8-1:0.0 failed with error -22 [ 2275.379249][T21474] erofs: (device loop3): mounted with root inode @ nid 36. [ 2275.415975][T11782] usb 8-1: USB disconnect, device number 33 [ 2276.000461][T11782] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2276.158364][T21483] UDC core: g1: couldn't find an available UDC or it's busy [ 2276.193406][T11782] usb 8-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2276.203186][T11782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.218689][T11782] usb 8-1: config 0 descriptor?? [ 2276.231110][T11782] pwc: Creative Labs Webcam 5 detected. [ 2276.258868][T21442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2276.645701][T21492] autofs4:pid:21492:autofs_fill_super: called with bogus options [ 2276.695866][T21494] loop0: detected capacity change from 0 to 16 [ 2276.720739][T21494] erofs: (device loop0): mounted with root inode @ nid 36. [ 2276.871932][T11782] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2276.889724][T11782] pwc: recv_control_msg error -32 req 02 val 2700 [ 2276.904173][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 2276.922948][T11782] pwc: recv_control_msg error -32 req 04 val 1600 [ 2276.942422][T11782] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2276.954987][T11782] pwc: recv_control_msg error -71 req 04 val 1000 [ 2276.962382][T11782] pwc: recv_control_msg error -71 req 04 val 1300 [ 2276.969660][T11782] pwc: recv_control_msg error -71 req 04 val 1400 [ 2276.977519][T11782] pwc: recv_control_msg error -71 req 02 val 2000 [ 2276.985880][T11782] pwc: recv_control_msg error -71 req 02 val 2100 [ 2276.994446][T11782] pwc: recv_control_msg error -71 req 06 val 0600 [ 2277.003793][T11782] pwc: recv_control_msg error -71 req 04 val 1500 [ 2277.015634][T11782] pwc: recv_control_msg error -71 req 02 val 2500 [ 2277.023161][T11782] pwc: recv_control_msg error -71 req 02 val 2400 [ 2277.032195][T11782] pwc: recv_control_msg error -71 req 02 val 2600 [ 2277.043386][T11782] pwc: recv_control_msg error -71 req 02 val 2900 [ 2277.060998][T11782] pwc: recv_control_msg error -71 req 02 val 2800 [ 2277.073582][T11782] pwc: recv_control_msg error -71 req 04 val 1100 [ 2277.090820][T11782] pwc: recv_control_msg error -71 req 04 val 1200 [ 2277.132127][T11782] pwc: Failed to power off camera (-71) [ 2277.148926][T11782] pwc: Registered as video103. [ 2277.160386][T14879] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 2277.170970][T11782] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input250 [ 2277.228369][T11782] usb 8-1: USB disconnect, device number 34 [ 2277.366820][T14879] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2277.398952][T14879] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2277.430008][T14879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2277.448201][T14879] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2277.466663][T14879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.510813][T14879] usb 6-1: config 0 descriptor?? [ 2277.539369][T21509] kvm: Disabled LAPIC found during irq injection [ 2278.063943][T14879] input: HID 17ef:6062 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:17EF:6062.0004/input/input251 [ 2278.486296][T14879] lenovo 0003:17EF:6062.0004: input,hidraw0: USB HID v80.00 Joystick [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 2278.518879][T14879] usb 6-1: USB disconnect, device number 35 [ 2278.547818][T21534] loop3: detected capacity change from 0 to 16 [ 2278.573239][T21534] erofs: (device loop3): mounted with root inode @ nid 36. [ 2278.789755][T21535] fido_id[21535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2279.002703][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4127'. [ 2279.127776][T21546] trusted_key: encrypted_key: insufficient parameters specified [ 2279.153420][T21546] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 2279.240456][T21546] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 2279.270539][T11782] IPVS: starting estimator thread 0... [ 2279.370433][T21551] IPVS: using max 18 ests per chain, 43200 per kthread [ 2279.610389][T11782] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 2279.951033][T11782] usb 6-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2280.002708][T11782] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 25408, setting to 64 [ 2280.024458][T11782] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2280.125567][T11782] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2280.135950][T11782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.310224][T11782] usb 6-1: Product: syz [ 2280.325514][T11782] usb 6-1: Manufacturer: syz [ 2280.360327][T11782] usb 6-1: SerialNumber: syz [ 2280.420868][T21512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2280.594977][T21546] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2280.702206][ C0] usb 6-1: received EP1 urb->status = -2 [ 2280.738903][T11782] usb 6-1: unable to init card! (ret=-71) [ 2280.796321][T11782] snd-usb-caiaq: probe of 6-1:1.0 failed with error -71 [ 2280.932291][T21566] loop0: detected capacity change from 0 to 16 [ 2280.966581][T21566] erofs: (device loop0): mounted with root inode @ nid 36. [ 2281.267615][T11782] usb 6-1: USB disconnect, device number 36 [ 2282.168248][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4139'. [ 2283.275954][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.285465][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.594842][T21610] loop5: detected capacity change from 0 to 16 [ 2283.700389][T21610] erofs: (device loop5): mounted with root inode @ nid 36. [ 2284.750483][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4150'. [ 2285.870435][ T5834] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2286.075266][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 2286.082967][ T5834] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2286.091725][ T5834] usb 4-1: config 0 has no interface number 0 [ 2286.120715][ T5834] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2286.139030][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.148027][ T5834] usb 4-1: Product: syz [ 2286.154572][ T5834] usb 4-1: Manufacturer: syz [ 2286.159454][ T5834] usb 4-1: SerialNumber: syz [ 2286.222834][ T5834] usb 4-1: config 0 descriptor?? [ 2286.245324][ T5834] smsc95xx v2.0.0 [ 2286.302934][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'. [ 2286.375233][T21646] loop7: detected capacity change from 0 to 16 [ 2286.401055][T21646] erofs: (device loop7): mounted with root inode @ nid 36. [ 2287.130202][T10709] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2288.390277][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2288.447500][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2288.466169][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2288.480202][ T5834] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 2288.503347][ T5834] usb 4-1: USB disconnect, device number 58 [ 2288.622633][T10709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.636988][T10709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.649930][T10709] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2288.659804][T10709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.698831][T10709] usb 1-1: config 0 descriptor?? [ 2289.332745][T10709] usb 1-1: language id specifier not provided by device, defaulting to English [ 2289.510227][T21658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4163'. [ 2289.735078][T10709] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 2289.764320][T10709] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 2289.779753][T10709] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 2289.792629][T10709] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 2289.808477][T10709] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 2289.863476][T10709] usb 1-1: USB disconnect, device number 47 [ 2291.179058][T21681] loop3: detected capacity change from 0 to 16 [ 2291.236755][T21681] erofs: (device loop3): mounted with root inode @ nid 36. [ 2291.738612][T21697] ªªªªªª: renamed from vlan0 (while UP) [ 2293.032687][T21716] loop7: detected capacity change from 0 to 16 [ 2293.060221][T14879] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2293.099508][T21716] erofs: (device loop7): mounted with root inode @ nid 36. [ 2293.263551][T14879] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2293.494761][T14879] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2293.507890][T14879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2293.514630][T14879] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2293.524076][T14879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.534545][T14879] usb 6-1: config 0 descriptor?? [ 2293.967487][T14879] usbhid 6-1:0.0: can't add hid device: -71 [ 2294.007396][T14879] usbhid: probe of 6-1:0.0 failed with error -71 [ 2294.048980][T14879] usb 6-1: USB disconnect, device number 37 [ 2295.599605][T21767] fuse: Bad value for 'fd' [ 2295.790394][T14552] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2296.011499][T14552] usb 8-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2296.045713][T14552] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2296.082344][T14552] usb 8-1: config 0 descriptor?? [ 2296.104102][T14552] pwc: Creative Labs Webcam 5 detected. [ 2297.480322][T14877] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2297.670590][T14877] usb 4-1: Using ep0 maxpacket: 32 [ 2297.690420][T14877] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 2297.707150][T14877] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.718779][T14877] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2297.738438][T14877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2297.745848][T14877] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 2297.852400][T14552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2297.860441][T14877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.872364][T14552] pwc: recv_control_msg error -32 req 02 val 2700 [ 2297.902664][T14877] usb 4-1: config 0 descriptor?? [ 2298.083067][T14552] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2298.092856][T14552] pwc: recv_control_msg error -71 req 04 val 1000 [ 2298.099784][T14552] pwc: recv_control_msg error -71 req 04 val 1300 [ 2298.107497][T14552] pwc: recv_control_msg error -71 req 04 val 1400 [ 2298.116815][T14552] pwc: recv_control_msg error -71 req 02 val 2000 [ 2298.130147][T14552] pwc: recv_control_msg error -71 req 02 val 2100 [ 2298.139720][T14552] pwc: recv_control_msg error -71 req 06 val 0600 [ 2298.152808][T14552] pwc: recv_control_msg error -71 req 04 val 1500 [ 2298.159975][T14552] pwc: recv_control_msg error -71 req 02 val 2500 [ 2298.169784][T14552] pwc: recv_control_msg error -71 req 02 val 2400 [ 2298.192109][T14552] pwc: recv_control_msg error -71 req 02 val 2600 [ 2298.204190][T14552] pwc: recv_control_msg error -71 req 02 val 2900 [ 2298.211355][T14552] pwc: recv_control_msg error -71 req 02 val 2800 [ 2298.225061][T14552] pwc: recv_control_msg error -71 req 04 val 1100 [ 2298.234324][T14552] pwc: recv_control_msg error -71 req 04 val 1200 [ 2298.246050][T14552] pwc: Failed to power off camera (-71) [ 2298.256448][T14552] pwc: Registered as video103. [ 2298.270391][T14552] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input252 [ 2298.304017][T14552] usb 8-1: USB disconnect, device number 35 [ 2298.326131][T14877] usbhid 4-1:0.0: can't add hid device: -71 [ 2298.354713][T14877] usbhid: probe of 4-1:0.0 failed with error -71 [ 2298.400779][T14877] usb 4-1: USB disconnect, device number 59 [ 2299.068948][T14877] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2299.336395][T21788] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4200'. [ 2299.355608][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4200'. [ 2299.725727][T14877] usb 6-1: Using ep0 maxpacket: 8 [ 2300.270259][T14877] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 2300.279404][T14877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2300.305422][T14877] usb 6-1: Product: syz [ 2300.309676][T14877] usb 6-1: Manufacturer: syz [ 2300.318981][T14877] usb 6-1: SerialNumber: syz [ 2300.344218][T14877] usb 6-1: config 0 descriptor?? [ 2300.352597][T21797] fuse: Bad value for 'fd' [ 2300.383246][T14877] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 2300.566347][T14877] gspca_sn9c2028: read1 error -32 [ 2300.779476][T14877] gspca_sn9c2028: read1 error -71 [ 2300.830858][T14877] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 2300.851025][T14877] usb 6-1: USB disconnect, device number 38 [ 2301.290253][T18149] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2301.514119][T18149] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2301.550314][T18149] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2301.556148][T21824] fuse: Bad value for 'fd' [ 2301.582148][T18149] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2301.589404][T18149] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2301.608910][T18149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.621721][T18149] usb 4-1: config 0 descriptor?? [ 2301.730185][T14877] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2301.871780][T21833] jffs2: notice: (21833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2302.067031][T18149] usbhid 4-1:0.0: can't add hid device: -71 [ 2302.100973][T18149] usbhid: probe of 4-1:0.0 failed with error -71 [ 2302.137705][T18149] usb 4-1: USB disconnect, device number 60 [ 2302.152023][T14877] usb 6-1: Using ep0 maxpacket: 32 [ 2302.160786][T14877] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2302.168922][T14877] usb 6-1: config 0 has no interface number 0 [ 2302.185501][T14877] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2302.194798][T14877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.203081][T14877] usb 6-1: Product: syz [ 2302.207314][T14877] usb 6-1: Manufacturer: syz [ 2302.211998][T14877] usb 6-1: SerialNumber: syz [ 2302.241789][T14877] usb 6-1: config 0 descriptor?? [ 2302.252763][T14877] smsc95xx v2.0.0 [ 2303.679769][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2303.777700][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2304.033324][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2304.093649][T14877] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 2304.103888][T14877] usb 6-1: USB disconnect, device number 39 [ 2304.573546][T14879] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2305.070235][T14879] usb 1-1: Using ep0 maxpacket: 8 [ 2305.303341][T14879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.378804][T14879] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2305.434043][T14879] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2305.454508][T14879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2305.471067][T14879] usb 1-1: Product: syz [ 2305.475537][T14879] usb 1-1: Manufacturer: syz [ 2305.480940][T14879] usb 1-1: SerialNumber: syz [ 2305.500883][T14879] usb 1-1: config 0 descriptor?? [ 2305.700317][T14877] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 2305.908511][T14877] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2306.060704][T14877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.068767][T14877] usb 4-1: Product: syz [ 2306.074510][T14877] usb 4-1: Manufacturer: syz [ 2306.079169][T14877] usb 4-1: SerialNumber: syz [ 2306.086332][T14877] usb 4-1: config 0 descriptor?? [ 2306.309349][T14877] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2307.260490][T10709] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2307.310427][T14879] usb 1-1: USB disconnect, device number 48 [ 2307.476135][T10709] usb 8-1: Using ep0 maxpacket: 32 [ 2307.491965][T10709] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2307.511213][T10709] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 2307.519082][T10709] usb 8-1: can't read configurations, error -71 [ 2307.552832][T14877] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 2307.583885][T14877] usb 4-1: USB disconnect, device number 61 [ 2307.675206][T21909] loop5: detected capacity change from 0 to 16 [ 2307.695655][T21909] erofs: (device loop5): mounted with root inode @ nid 36. [ 2307.984849][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4243'. [ 2308.090211][T14877] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2308.314774][T14877] usb 1-1: Using ep0 maxpacket: 32 [ 2308.328530][T14877] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2308.356771][T14877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.365202][T14877] usb 1-1: Product: syz [ 2308.369783][T14877] usb 1-1: Manufacturer: syz [ 2308.374855][T14877] usb 1-1: SerialNumber: syz [ 2308.386707][T14877] usb 1-1: config 0 descriptor?? [ 2308.397994][T14877] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2308.430496][T14879] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2308.620198][T14879] usb 6-1: Using ep0 maxpacket: 8 [ 2308.629307][T14879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.643973][T14879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2308.655540][T14879] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2308.664880][T14879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2308.673187][T14879] usb 6-1: Product: syz [ 2308.677744][T14879] usb 6-1: Manufacturer: syz [ 2308.682496][T14879] usb 6-1: SerialNumber: syz [ 2308.689412][T14879] usb 6-1: config 0 descriptor?? [ 2308.692064][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2308.863219][ T9] usb 4-1: device descriptor read/64, error -71 [ 2308.919754][T21938] loop7: detected capacity change from 0 to 16 [ 2308.931661][T21938] erofs: (device loop7): mounted with root inode @ nid 36. [ 2309.141226][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2309.300206][ T9] usb 4-1: device descriptor read/64, error -71 [ 2309.424981][ T9] usb usb4-port1: attempt power cycle [ 2309.610144][T14552] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2309.805933][T14552] usb 8-1: Using ep0 maxpacket: 32 [ 2309.816987][T14552] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2309.825654][T14877] gspca_ov534_9: reg_r err -71 [ 2309.831491][T14552] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 2309.839138][T14552] usb 8-1: can't read configurations, error -71 [ 2309.853503][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2309.891675][ T9] usb 4-1: device descriptor read/8, error -71 [ 2310.160344][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2310.191556][ T9] usb 4-1: device descriptor read/8, error -71 [ 2310.230281][T14877] gspca_ov534_9: Unknown sensor 0000 [ 2310.230356][T14877] ov534_9: probe of 1-1:0.0 failed with error -22 [ 2310.249644][T14877] usb 1-1: USB disconnect, device number 49 [ 2310.311245][ T9] usb usb4-port1: unable to enumerate USB device [ 2310.438603][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4253'. [ 2310.824585][T21960] kvm: Disabled LAPIC found during irq injection [ 2311.046150][T21966] loop7: detected capacity change from 0 to 16 [ 2311.078431][T21966] erofs: (device loop7): mounted with root inode @ nid 36. [ 2311.204527][T14552] usb 6-1: USB disconnect, device number 40 [ 2311.680206][T14879] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2311.707951][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'. [ 2311.881238][T14879] usb 8-1: Using ep0 maxpacket: 32 [ 2311.897649][T14879] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2311.906506][T14879] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2311.933435][T14879] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2311.950476][T14879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2311.961330][T14879] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2312.001048][T14879] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2312.014532][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2312.024784][T14879] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2312.040917][T14879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.083942][T14879] usb 8-1: config 0 descriptor?? [ 2312.220477][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2312.261135][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2312.292783][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2312.313968][ T9] usb 4-1: can't read configurations, error -71 [ 2312.319151][T21969] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2312.330109][T14879] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2312.620309][T14879] usb 8-1: USB disconnect, device number 40 [ 2312.646675][T14879] usblp0: removed [ 2312.944816][T21990] kvm: Disabled LAPIC found during irq injection [ 2313.129965][T21995] loop3: detected capacity change from 0 to 16 [ 2313.147728][T21995] erofs: (device loop3): mounted with root inode @ nid 36. [ 2313.352372][T14552] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2313.578390][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4272'. [ 2314.944287][T14552] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2314.960267][T14552] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2314.970255][T14552] usb 6-1: Product: syz [ 2314.978418][T14552] usb 6-1: SerialNumber: syz [ 2315.013623][T14552] usb 6-1: config 0 descriptor?? [ 2315.061140][T22024] autofs4:pid:22024:autofs_fill_super: called with bogus options [ 2315.278388][T14552] hso 6-1:0.0: Failed to find BULK IN ep [ 2315.660484][T14879] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2315.870209][T14879] usb 8-1: Using ep0 maxpacket: 32 [ 2315.887452][T14879] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2315.899844][T14879] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2315.934784][T14879] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2315.949674][T14879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2315.961278][T14879] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2315.974685][T14879] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2315.989659][T14879] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2316.003515][T14879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.053780][T14879] usb 8-1: config 0 descriptor?? [ 2316.089981][T14877] usb 6-1: USB disconnect, device number 41 [ 2316.258244][T22033] loop5: detected capacity change from 0 to 16 [ 2316.278059][T22029] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2316.287191][T14879] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2316.311566][T22033] erofs: (device loop5): mounted with root inode @ nid 36. [ 2316.569087][T14877] usb 8-1: USB disconnect, device number 41 [ 2316.589948][T14877] usblp0: removed [ 2316.649383][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4281'. [ 2316.660259][T11782] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2316.868293][T11782] usb 1-1: Using ep0 maxpacket: 32 [ 2316.905998][T11782] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2316.937612][T11782] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2316.957419][T11782] usb 1-1: can't read configurations, error -71 [ 2319.596263][T22057] loop0: detected capacity change from 0 to 16 [ 2319.651382][T22057] erofs: (device loop0): mounted with root inode @ nid 36. [ 2319.822288][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4290'. [ 2320.230316][T14552] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2320.400349][T11782] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2320.430164][T14552] usb 1-1: Using ep0 maxpacket: 32 [ 2320.437677][T14552] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2320.446374][T14552] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2320.455775][T14552] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2320.465229][T14552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2320.475257][T14552] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2320.485153][T14552] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2320.498728][T14552] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2320.507905][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.518562][T14552] usb 1-1: config 0 descriptor?? [ 2320.590171][T11782] usb 8-1: Using ep0 maxpacket: 8 [ 2320.597991][T11782] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2320.610254][T14877] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2320.611405][T11782] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2320.632785][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2320.643815][T11782] usb 8-1: Product: syz [ 2320.648007][T11782] usb 8-1: Manufacturer: syz [ 2320.656829][T11782] usb 8-1: SerialNumber: syz [ 2320.665532][T11782] usb 8-1: config 0 descriptor?? [ 2320.738706][T14552] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2320.740303][T22070] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2320.810308][T14877] usb 6-1: Using ep0 maxpacket: 32 [ 2320.821135][T14877] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2320.829244][T14877] usb 6-1: config 0 has no interface number 0 [ 2320.841476][T14877] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2320.850868][T14877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.858902][T14877] usb 6-1: Product: syz [ 2320.863917][T14877] usb 6-1: Manufacturer: syz [ 2320.877001][T14877] usb 6-1: SerialNumber: syz [ 2320.890802][T14877] usb 6-1: config 0 descriptor?? [ 2320.910389][T14877] smsc95xx v2.0.0 [ 2320.982765][T14552] usb 1-1: USB disconnect, device number 52 [ 2321.003140][T14552] usblp0: removed [ 2321.322909][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2321.336928][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2321.756568][T14877] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2321.773247][T14877] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 2321.807541][T14877] usb 6-1: USB disconnect, device number 42 [ 2322.471044][T22092] loop5: detected capacity change from 0 to 16 [ 2322.472078][T22090] jffs2: notice: (22090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 2322.509794][T22092] erofs: (device loop5): mounted with root inode @ nid 36. [ 2322.926032][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4302'. [ 2323.147643][T11782] usb 8-1: USB disconnect, device number 42 [ 2323.190180][T14552] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2323.380355][T14552] usb 1-1: Using ep0 maxpacket: 8 [ 2323.391252][T14552] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 2323.401089][T14552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 2323.409223][T14552] usb 1-1: Product: syz [ 2323.413966][T14552] usb 1-1: Manufacturer: syz [ 2323.418624][T14552] usb 1-1: SerialNumber: syz [ 2323.427436][T14552] usb 1-1: config 0 descriptor?? [ 2323.437059][T14552] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 2323.470327][T11784] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2323.590254][T11782] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2323.639787][T14552] gspca_sn9c2028: read1 error -32 [ 2323.660333][T11784] usb 6-1: Using ep0 maxpacket: 32 [ 2323.668674][T11784] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2323.677394][T11784] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2323.686964][T11784] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2323.696113][T11784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2323.706196][T11784] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2323.716583][T11784] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2323.731978][T11784] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2323.741748][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.760294][T11784] usb 6-1: config 0 descriptor?? [ 2323.793689][T11782] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2323.805301][T11782] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2323.818894][T11782] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2323.828323][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.837411][T11782] usb 8-1: Product: syz [ 2323.847051][T11782] usb 8-1: Manufacturer: syz [ 2323.851976][T14552] gspca_sn9c2028: read1 error -71 [ 2323.857162][T14552] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 2323.872170][T11782] usb 8-1: SerialNumber: syz [ 2323.891816][T14552] usb 1-1: USB disconnect, device number 53 [ 2323.979544][T11784] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2324.000728][T22110] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2324.094962][T22115] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2324.237766][T14552] usb 6-1: USB disconnect, device number 43 [ 2324.269489][T14552] usblp0: removed [ 2324.716945][T22115] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2324.945101][T11782] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2324.960525][T11782] cdc_ncm 8-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 2324.979715][T11782] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 2325.164658][T11782] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2325.379699][T10709] usb 8-1: USB disconnect, device number 43 [ 2325.399050][T10709] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 2325.536770][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4314'. [ 2326.000571][T14552] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2326.280528][T14552] usb 1-1: Using ep0 maxpacket: 8 [ 2326.288610][T14552] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2326.322673][T14552] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2326.332345][T14552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2326.353376][T14552] usb 1-1: Product: syz [ 2326.357621][T14552] usb 1-1: Manufacturer: syz [ 2326.384284][T14552] usb 1-1: SerialNumber: syz [ 2326.411669][T14552] usb 1-1: config 0 descriptor?? [ 2326.730364][T10709] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2326.930335][T10709] usb 6-1: Using ep0 maxpacket: 32 [ 2326.957878][T10709] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2326.980132][T10709] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2326.988859][T10709] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2327.011871][T10709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2327.040199][T10709] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2327.049966][T10709] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2327.100394][T10709] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2327.109885][T10709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.165755][T10709] usb 6-1: config 0 descriptor?? [ 2327.386420][T22156] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2327.397339][T10709] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2327.632221][T14552] usb 6-1: USB disconnect, device number 44 [ 2327.681022][T14552] usblp0: removed [ 2327.791494][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4325'. [ 2328.610179][ T5834] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2328.807199][ T5834] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2328.823530][ T5834] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2328.838209][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2328.866161][T11782] usb 1-1: USB disconnect, device number 54 [ 2328.890909][ T5834] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2328.926358][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.969071][ T5834] usb 6-1: config 0 descriptor?? [ 2329.402168][ T5834] usbhid 6-1:0.0: can't add hid device: -71 [ 2329.412061][ T5834] usbhid: probe of 6-1:0.0 failed with error -71 [ 2329.421269][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 2329.462606][ T5834] usb 6-1: USB disconnect, device number 45 [ 2329.859057][T22219] syzkaller1: entered promiscuous mode [ 2329.868591][T22219] syzkaller1: entered allmulticast mode [ 2330.450376][T11782] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2330.710657][T11782] usb 6-1: Using ep0 maxpacket: 32 [ 2330.739914][T11782] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2330.748651][T11782] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2330.757632][T11782] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2330.770781][T11782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2330.782018][T11782] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2330.800322][T11782] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2330.832293][T11782] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2330.842599][T22233] autofs4:pid:22233:autofs_fill_super: called with bogus options [ 2330.860756][T11782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.876047][T11782] usb 6-1: config 0 descriptor?? [ 2331.090193][ T5834] IPVS: starting estimator thread 0... [ 2331.109303][T22224] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2331.120845][T11782] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2331.144233][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4345'. [ 2331.190309][T22242] IPVS: using max 17 ests per chain, 40800 per kthread [ 2331.401067][T11782] usb 6-1: USB disconnect, device number 46 [ 2331.425533][T11782] usblp0: removed [ 2331.750389][T14552] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 2331.790134][ T5834] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2331.973848][T14552] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2331.980812][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 2332.001107][ T5834] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.011679][ T5834] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2332.023503][T14552] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2332.057434][ T5834] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2332.068001][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.078060][ T5834] usb 8-1: Product: syz [ 2332.085102][ T5834] usb 8-1: Manufacturer: syz [ 2332.091817][ T5834] usb 8-1: SerialNumber: syz [ 2332.127011][ T5834] usb 8-1: config 0 descriptor?? [ 2332.132899][T14552] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2332.139576][T14552] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2332.173221][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.203982][T14552] usb 1-1: config 0 descriptor?? [ 2333.346268][T14552] usbhid 1-1:0.0: can't add hid device: -71 [ 2333.352556][T14552] usbhid: probe of 1-1:0.0 failed with error -71 [ 2333.362953][T14552] usb 1-1: USB disconnect, device number 55 [ 2334.089148][T14552] IPVS: starting estimator thread 0... [ 2334.194881][T22271] IPVS: using max 26 ests per chain, 62400 per kthread [ 2334.280805][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 2334.750161][ T5834] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2335.098566][T11782] usb 8-1: USB disconnect, device number 44 [ 2335.910118][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 2335.927799][ T5834] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2335.941221][ T5834] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2335.953979][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2335.964442][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2335.978356][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2335.998647][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2336.013065][ T5834] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2336.023964][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.048934][ T5834] usb 6-1: config 0 descriptor?? [ 2336.170336][T10709] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2336.275542][ T5834] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2336.286797][T22287] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2336.360383][T14877] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 2336.371733][T10709] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2336.398080][T10709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.419653][T10709] usb 1-1: config 0 descriptor?? [ 2336.441761][T10709] cp210x 1-1:0.0: cp210x converter detected [ 2336.518156][ T5834] usb 6-1: USB disconnect, device number 47 [ 2336.553613][T14877] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2336.566365][ T5834] usblp0: removed [ 2336.583574][T14877] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2336.612419][T14877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2336.619656][T14877] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2336.633699][T14877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.671223][T14877] usb 4-1: config 0 descriptor?? [ 2337.061532][T10709] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2337.069330][T10709] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 2337.106109][T10709] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2337.113352][T14877] usbhid 4-1:0.0: can't add hid device: -71 [ 2337.119387][T14877] usbhid: probe of 4-1:0.0 failed with error -71 [ 2337.157476][T10709] usb 1-1: USB disconnect, device number 56 [ 2337.170945][T14877] usb 4-1: USB disconnect, device number 68 [ 2337.217773][T10709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2337.231528][T10709] cp210x 1-1:0.0: device disconnected [ 2337.368697][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4368'. [ 2337.780240][T10709] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2338.640128][T10709] usb 8-1: Using ep0 maxpacket: 16 [ 2338.705268][T10709] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2338.750954][T10709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.782656][T10709] usb 8-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2338.799276][T10709] usb 8-1: config 1 interface 0 has no altsetting 0 [ 2338.815860][T10709] usb 8-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice=80.40 [ 2338.826115][T10709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.837714][T10709] usb 8-1: Product: syz [ 2338.843103][T10709] usb 8-1: Manufacturer: syz [ 2338.848012][T10709] usb 8-1: SerialNumber: syz [ 2339.106143][T10709] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 2339.128471][T10709] usb 8-1: MIDIStreaming interface descriptor not found [ 2339.196831][T10709] usb 8-1: USB disconnect, device number 45 [ 2339.256645][T15393] udevd[15393]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2339.440277][T18149] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2339.621536][T18149] usb 4-1: Using ep0 maxpacket: 32 [ 2339.629121][T18149] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2339.638382][T18149] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2339.651111][T18149] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2339.660405][T18149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2339.678330][T18149] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2339.689115][T18149] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2339.702376][T18149] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2339.712139][T18149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.731123][T18149] usb 4-1: config 0 descriptor?? [ 2339.867969][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4377'. [ 2339.944960][T18149] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2339.963259][T22340] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2340.205678][T18149] usb 4-1: USB disconnect, device number 69 [ 2340.218199][T18149] usblp0: removed [ 2340.452276][T22316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2342.088583][T22377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4386'. [ 2342.440434][T10709] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2342.560434][ T5834] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2342.630480][T10709] usb 8-1: Using ep0 maxpacket: 32 [ 2342.640681][T20473] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2342.649395][T10709] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2342.659107][T10709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.668089][T10709] usb 8-1: Product: syz [ 2342.672714][T10709] usb 8-1: Manufacturer: syz [ 2342.678574][T10709] usb 8-1: SerialNumber: syz [ 2342.681051][T18149] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2342.695904][T10709] usb 8-1: config 0 descriptor?? [ 2342.706712][T10709] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2342.713140][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2342.842545][T20473] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2342.851982][T20473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2342.867637][T20473] usb 4-1: config 0 descriptor?? [ 2342.880164][T18149] usb 6-1: Using ep0 maxpacket: 32 [ 2342.887756][T20473] pwc: Creative Labs Webcam 5 detected. [ 2342.888758][T18149] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2342.907527][T18149] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2342.919053][T18149] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2342.932835][T18149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2342.960093][T18149] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2342.969812][T18149] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2342.992934][T18149] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2343.006704][T18149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.010841][ T5834] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2343.038574][T18149] usb 6-1: config 0 descriptor?? [ 2343.180265][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2343.256888][T22388] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2343.267417][T18149] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2343.300500][ T5834] usb usb1-port1: attempt power cycle [ 2343.484688][T20473] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2343.498147][T18149] usb 6-1: USB disconnect, device number 48 [ 2343.504389][T20473] pwc: recv_control_msg error -32 req 02 val 2700 [ 2343.519818][T18149] usblp0: removed [ 2343.720207][T20473] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2343.730615][ T5834] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2343.738760][T20473] pwc: recv_control_msg error -71 req 04 val 1000 [ 2343.747656][T20473] pwc: recv_control_msg error -71 req 04 val 1300 [ 2343.755012][T20473] pwc: recv_control_msg error -71 req 04 val 1400 [ 2343.764720][T20473] pwc: recv_control_msg error -71 req 02 val 2000 [ 2343.773099][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2343.779564][T20473] pwc: recv_control_msg error -71 req 02 val 2100 [ 2343.790152][T20473] pwc: recv_control_msg error -71 req 06 val 0600 [ 2343.797011][T20473] pwc: recv_control_msg error -71 req 04 val 1500 [ 2343.808109][T20473] pwc: recv_control_msg error -71 req 02 val 2500 [ 2343.815679][T20473] pwc: recv_control_msg error -71 req 02 val 2400 [ 2343.823165][T20473] pwc: recv_control_msg error -71 req 02 val 2600 [ 2343.830274][T20473] pwc: recv_control_msg error -71 req 02 val 2900 [ 2343.839326][T20473] pwc: recv_control_msg error -71 req 02 val 2800 [ 2343.849103][T20473] pwc: recv_control_msg error -71 req 04 val 1100 [ 2343.856236][T20473] pwc: recv_control_msg error -71 req 04 val 1200 [ 2343.863448][T20473] pwc: Failed to power off camera (-71) [ 2343.880425][T20473] pwc: Registered as video103. [ 2343.900550][T20473] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input253 [ 2343.946345][T20473] usb 4-1: USB disconnect, device number 70 [ 2343.965198][T17182] udevd[17182]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2344.060558][ T5834] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2344.113592][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2344.153185][T10709] gspca_ov534_9: reg_r err -71 [ 2344.250338][ T5834] usb usb1-port1: unable to enumerate USB device [ 2344.325204][T22395] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f800 [ 2344.420338][T14879] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2344.550127][T10709] gspca_ov534_9: Unknown sensor 0000 [ 2344.550228][T10709] ov534_9: probe of 8-1:0.0 failed with error -22 [ 2344.576879][T10709] usb 8-1: USB disconnect, device number 46 [ 2344.611866][T14879] usb 6-1: Using ep0 maxpacket: 8 [ 2344.669074][T14879] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2344.706729][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.752322][T14879] usb 6-1: config 0 has no interface number 0 [ 2344.798032][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.871907][T14879] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2344.983126][T14879] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 2345.093713][T14879] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2345.217011][T14879] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2345.336580][T14879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.613326][T14879] usb 6-1: config 0 descriptor?? [ 2345.628480][T14879] ldusb 6-1:0.55: Interrupt in endpoint not found [ 2345.746954][T10709] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 2345.824638][T10709] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2345.852668][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 2345.876148][T18149] usb 6-1: USB disconnect, device number 49 [ 2346.046984][T22411] fido_id[22411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2346.520892][T18149] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 2346.710588][T18149] usb 8-1: Using ep0 maxpacket: 32 [ 2346.718674][T18149] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2346.727836][T18149] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2346.742665][T18149] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2346.752134][T11784] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2346.760829][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2346.771510][T18149] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2346.781464][T14552] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2346.792885][T18149] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2346.818976][T18149] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2346.828636][T18149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.904916][T18149] usb 8-1: config 0 descriptor?? [ 2346.967615][T11784] usb 1-1: Using ep0 maxpacket: 8 [ 2347.036126][T14552] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 2347.167077][T14552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.366785][T11784] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2347.490235][T11784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2347.590254][T11784] usb 1-1: Product: syz [ 2347.594704][T14552] usb 4-1: config 0 descriptor?? [ 2347.604486][T22415] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2347.625875][T18149] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2347.654140][T11784] usb 1-1: Manufacturer: syz [ 2347.705618][T11784] usb 1-1: SerialNumber: syz [ 2347.824087][T14552] pwc: Creative Labs Webcam 5 detected. [ 2347.832173][T11784] usb 1-1: config 0 descriptor?? [ 2347.842893][T11784] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2347.953403][T18149] usb 8-1: USB disconnect, device number 47 [ 2347.963403][T18149] usblp0: removed [ 2348.200300][T14879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2348.248870][T11784] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 2348.256816][T11784] sq905: probe of 1-1:0.0 failed with error -32 [ 2348.267773][T11784] usb 1-1: USB disconnect, device number 61 [ 2348.380128][T14879] usb 6-1: Using ep0 maxpacket: 32 [ 2348.392149][T14879] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2348.401603][T14879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.403328][T14552] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2348.418737][T14879] usb 6-1: Product: syz [ 2348.419340][T14552] pwc: recv_control_msg error -32 req 02 val 2700 [ 2348.423811][T14879] usb 6-1: Manufacturer: syz [ 2348.439549][T14879] usb 6-1: SerialNumber: syz [ 2348.447044][T14879] usb 6-1: config 0 descriptor?? [ 2348.456573][T14879] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2348.648691][T14552] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2348.670839][T14552] pwc: recv_control_msg error -71 req 04 val 1000 [ 2348.691211][T14552] pwc: recv_control_msg error -71 req 04 val 1300 [ 2348.702180][T14552] pwc: recv_control_msg error -71 req 04 val 1400 [ 2348.709367][T14552] pwc: recv_control_msg error -71 req 02 val 2000 [ 2348.725277][T14552] pwc: recv_control_msg error -71 req 02 val 2100 [ 2348.733110][T14552] pwc: recv_control_msg error -71 req 06 val 0600 [ 2348.741360][T14552] pwc: recv_control_msg error -71 req 04 val 1500 [ 2348.748384][T14552] pwc: recv_control_msg error -71 req 02 val 2500 [ 2348.755680][T14552] pwc: recv_control_msg error -71 req 02 val 2400 [ 2348.763352][T14552] pwc: recv_control_msg error -71 req 02 val 2600 [ 2348.770997][T14552] pwc: recv_control_msg error -71 req 02 val 2900 [ 2348.790568][T14552] pwc: recv_control_msg error -71 req 02 val 2800 [ 2348.801012][T14552] pwc: recv_control_msg error -71 req 04 val 1100 [ 2348.819054][T14552] pwc: recv_control_msg error -71 req 04 val 1200 [ 2348.827833][T14552] pwc: Failed to power off camera (-71) [ 2348.852096][T14552] pwc: Registered as video103. [ 2348.871255][T14552] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input254 [ 2348.925740][T14552] usb 4-1: USB disconnect, device number 71 [ 2348.987048][T22443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 2349.100563][ T5834] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2349.320278][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 2349.333270][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2349.342606][ T5834] usb 8-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2349.356059][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.383435][ T5834] usb 8-1: config 0 descriptor?? [ 2349.530329][T14552] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 2349.595236][T15580] Bluetooth: hci3: adv larger than maximum supported [ 2349.595363][T15580] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2349.616171][ T5834] usbhid 8-1:0.0: can't add hid device: -71 [ 2349.622671][ T5834] usbhid: probe of 8-1:0.0 failed with error -71 [ 2349.633255][ T5834] usb 8-1: USB disconnect, device number 48 [ 2349.736250][T14552] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2349.968866][T14879] gspca_ov534_9: reg_r err -71 [ 2350.522950][T14879] gspca_ov534_9: Unknown sensor 0000 [ 2350.523719][T14879] ov534_9: probe of 6-1:0.0 failed with error -22 [ 2350.596630][T14552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.610247][T14552] usb 4-1: Product: syz [ 2350.614738][T14552] usb 4-1: Manufacturer: syz [ 2350.619394][T14552] usb 4-1: SerialNumber: syz [ 2350.636234][T14552] usb 4-1: config 0 descriptor?? [ 2350.652210][T14879] usb 6-1: USB disconnect, device number 50 [ 2350.886465][T14552] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2351.100827][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4418'. [ 2351.110483][T14877] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2351.300900][T14877] usb 8-1: Using ep0 maxpacket: 32 [ 2351.315226][T14877] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2351.323904][T14877] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2351.336143][T14877] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2351.707273][ T5834] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2351.715264][T14877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2351.726573][T14877] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2351.736774][T14877] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2351.750695][T14877] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2351.759967][T14877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.781397][T14877] usb 8-1: config 0 descriptor?? [ 2351.870379][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2352.124036][T22460] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2352.406829][T14877] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2352.432923][T18149] usb 8-1: USB disconnect, device number 49 [ 2352.467053][T18149] usblp0: removed [ 2352.633620][T14552] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 2352.645562][T14552] usb 4-1: USB disconnect, device number 72 [ 2352.691714][ T5834] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2352.890216][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2353.011013][ T5834] usb usb1-port1: attempt power cycle [ 2353.120343][T14877] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2353.270154][T14552] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 2353.306347][T14877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2353.317607][T14877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2353.328060][T14877] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2353.337418][T14877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.352445][T14877] usb 6-1: config 0 descriptor?? [ 2353.420672][T14552] usb 8-1: device descriptor read/64, error -71 [ 2353.460166][T11784] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2353.467814][ T5834] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2353.502181][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2353.651214][T11784] usb 4-1: Using ep0 maxpacket: 8 [ 2353.658451][T11784] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2353.666049][T11784] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2353.676471][T11784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.688539][T11784] usb 4-1: config 0 descriptor?? [ 2353.695915][T14552] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2353.790328][ T5834] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2353.846365][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2353.860349][T14552] usb 8-1: device descriptor read/64, error -71 [ 2353.972337][T14877] usbhid 6-1:0.0: can't add hid device: -71 [ 2353.978032][T15580] Bluetooth: hci1: adv larger than maximum supported [ 2353.978359][T15580] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2353.992275][T14552] usb usb8-port1: attempt power cycle [ 2353.995325][ T5834] usb usb1-port1: unable to enumerate USB device [ 2353.999067][T11784] usbhid 4-1:0.0: can't add hid device: -71 [ 2354.010702][T11784] usbhid: probe of 4-1:0.0 failed with error -71 [ 2354.015084][T14877] usbhid: probe of 6-1:0.0 failed with error -71 [ 2354.023860][T11784] usb 4-1: USB disconnect, device number 73 [ 2354.049836][T14877] usb 6-1: USB disconnect, device number 51 [ 2354.425572][T14552] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 2354.527098][T14552] usb 8-1: device descriptor read/8, error -71 [ 2354.870111][T14552] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 2355.092664][T14552] usb 8-1: device descriptor read/8, error -71 [ 2355.270328][T14552] usb usb8-port1: unable to enumerate USB device [ 2355.565022][ T5834] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 2355.785831][ T5834] usb 8-1: device descriptor read/64, error -71 [ 2357.060357][ T5834] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 2357.103930][T14552] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2357.260213][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 2357.268892][ T5834] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2357.278201][ T5834] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2357.287446][ T5834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2357.290846][T14552] usb 4-1: Using ep0 maxpacket: 32 [ 2357.298439][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2357.311899][ T5834] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2357.322634][ T5834] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2357.336335][ T5834] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2357.345790][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.356934][T14552] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 2357.372087][ T5834] usb 8-1: config 0 descriptor?? [ 2357.385494][T14552] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.403646][T14552] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2357.418157][T14552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2357.426406][T14552] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 2357.437056][T14552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.450969][T14552] usb 4-1: config 0 descriptor?? [ 2357.606137][ T5834] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2357.618401][T22510] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2357.875468][T14552] usbhid 4-1:0.0: can't add hid device: -71 [ 2357.888247][T14552] usbhid: probe of 4-1:0.0 failed with error -71 [ 2357.908319][ T5834] usb 8-1: USB disconnect, device number 55 [ 2357.920714][T14552] usb 4-1: USB disconnect, device number 74 [ 2357.945474][ T5834] usblp0: removed [ 2358.070299][T11784] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2358.260158][T11784] usb 6-1: Using ep0 maxpacket: 8 [ 2358.267182][T11784] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2358.274498][T11784] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2358.284080][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.296353][T11784] usb 6-1: config 0 descriptor?? [ 2358.740337][T14552] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2360.940405][T14552] usb 4-1: device descriptor read/64, error -71 [ 2361.233104][T14552] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2361.600528][T14552] usb 4-1: device descriptor read/64, error -71 [ 2361.709335][T11784] usbhid 6-1:0.0: can't add hid device: -71 [ 2361.788321][T11784] usbhid: probe of 6-1:0.0 failed with error -71 [ 2361.846267][T14552] usb usb4-port1: attempt power cycle [ 2362.091645][T11784] usb 6-1: USB disconnect, device number 52 [ 2362.530468][T11782] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2362.735651][T11782] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2362.782368][T11782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.831999][T11782] usb 1-1: config 0 descriptor?? [ 2362.990301][T14552] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2363.030815][T14552] usb 4-1: Using ep0 maxpacket: 32 [ 2363.049522][T14552] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2363.082237][T14552] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2363.115255][T14552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2363.126659][T14552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2363.137001][T14552] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2363.148697][T14552] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2363.178969][T14552] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2363.199545][T14552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.218835][T14552] usb 4-1: config 0 descriptor?? [ 2363.633816][T22555] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2363.750712][T14552] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2364.239816][T14552] usb 4-1: USB disconnect, device number 77 [ 2364.282547][T14552] usblp0: removed [ 2364.291252][T11782] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 2364.307424][T11782] [drm] Initialized udl on minor 2 [ 2364.524710][T11782] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2364.555887][T11782] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2364.606471][T11782] usb 1-1: USB disconnect, device number 66 [ 2364.613546][T14552] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2364.641428][T14552] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2365.050176][T11784] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2365.951706][T11784] usb 6-1: Using ep0 maxpacket: 8 [ 2365.962997][T11784] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2365.969926][T11784] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2365.979280][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.994147][T11784] usb 6-1: config 0 descriptor?? [ 2366.130318][T11782] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 2366.160227][T14552] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2366.323166][T11782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.361339][T14552] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2366.384605][T11782] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2366.406230][T14552] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2366.448229][T11782] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2366.483940][T14552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2366.491260][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2366.499352][T11782] usb 8-1: Product: syz [ 2366.511828][T14552] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2366.541240][T11782] usb 8-1: Manufacturer: syz [ 2366.548414][T14552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.593713][T14552] usb 4-1: config 0 descriptor?? [ 2366.797399][T11782] usb 8-1: USB disconnect, device number 56 [ 2367.031071][T14552] usbhid 4-1:0.0: can't add hid device: -71 [ 2367.046042][T14552] usbhid: probe of 4-1:0.0 failed with error -71 [ 2367.077875][T14552] usb 4-1: USB disconnect, device number 78 [ 2367.371067][T11782] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 2367.564453][T11782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.575150][T11782] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2367.604004][T11782] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2367.620309][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2367.635342][T11782] usb 8-1: Product: syz [ 2367.639938][T11782] usb 8-1: Manufacturer: syz [ 2367.790404][ T5834] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2367.819080][T11784] usbhid 6-1:0.0: can't add hid device: -71 [ 2367.831026][T11784] usbhid: probe of 6-1:0.0 failed with error -71 [ 2367.845344][T11784] usb 6-1: USB disconnect, device number 53 [ 2367.982720][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 2368.038488][ T5834] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2368.067912][ T5834] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2368.102632][ T5834] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2368.146380][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2368.190205][ T5834] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2368.226731][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2368.279843][ T5834] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2368.321580][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.459533][ T5834] usb 1-1: config 0 descriptor?? [ 2368.923782][T22595] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2368.944075][ T5834] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2369.019308][ T5834] usb 8-1: USB disconnect, device number 57 [ 2369.182027][T10709] usb 1-1: USB disconnect, device number 67 [ 2369.190966][T10709] usblp0: removed [ 2369.392282][T14879] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2369.490340][T11784] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2369.580284][T14879] usb 6-1: Using ep0 maxpacket: 32 [ 2369.589390][T14879] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 2369.606674][T14879] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2369.617998][T14879] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2369.631622][T14879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2369.638299][T14879] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 2369.648776][T14879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.665574][T14879] usb 6-1: config 0 descriptor?? [ 2369.683466][T11784] usb 4-1: Using ep0 maxpacket: 16 [ 2369.703023][T11784] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 2369.717220][T11784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2369.749096][T11784] usb 4-1: config 0 has no interface number 0 [ 2369.771365][T11784] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2369.800994][T11784] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2369.839007][T11784] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2369.869578][T11784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.879239][T11784] usb 4-1: Product: syz [ 2369.884151][T11784] usb 4-1: Manufacturer: syz [ 2369.888793][T11784] usb 4-1: SerialNumber: syz [ 2369.896718][T11784] usb 4-1: config 0 descriptor?? [ 2369.914690][T22613] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2369.924818][T11784] asix: probe of 4-1:0.34 failed with error -22 [ 2370.110168][T10709] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 2370.133125][T14879] usbhid 6-1:0.0: can't add hid device: -71 [ 2370.141034][T14879] usbhid: probe of 6-1:0.0 failed with error -71 [ 2370.153347][T14879] usb 6-1: USB disconnect, device number 54 [ 2370.220168][ T5834] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 2370.313554][T10709] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2370.323868][T10709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.334459][T10709] usb 8-1: config 0 descriptor?? [ 2370.349427][T10709] cp210x 8-1:0.0: cp210x converter detected [ 2370.433180][ T5834] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2370.444372][ T5834] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2370.459430][ T5834] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2370.466269][ T5834] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2370.475628][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.490621][ T5834] usb 1-1: config 0 descriptor?? [ 2370.757662][T10709] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2370.961548][ T5834] usbhid 1-1:0.0: can't add hid device: -71 [ 2371.026186][ T5834] usbhid: probe of 1-1:0.0 failed with error -71 [ 2371.277699][ T5834] usb 1-1: USB disconnect, device number 68 [ 2371.543313][T10709] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2371.766475][T10709] usb 8-1: USB disconnect, device number 58 [ 2371.784199][T10709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2371.872272][T10709] cp210x 8-1:0.0: device disconnected [ 2372.251991][T14879] usb 4-1: USB disconnect, device number 79 [ 2372.516341][T10709] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 2372.724990][T10709] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2372.746340][T10709] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2372.757377][T14879] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2372.767528][T10709] usb 8-1: Product: syz [ 2372.772795][T10709] usb 8-1: SerialNumber: syz [ 2372.783100][T10709] usb 8-1: config 0 descriptor?? [ 2372.976814][T14879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.997968][T14879] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2373.019991][T10709] hso 8-1:0.0: Failed to find BULK IN ep [ 2373.029033][T14879] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2373.046415][T14879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2373.055126][T14879] usb 4-1: Product: syz [ 2373.059721][T14879] usb 4-1: Manufacturer: syz [ 2373.216831][T22647] fuse: Bad value for 'group_id' [ 2373.233639][T21261] usb 8-1: USB disconnect, device number 59 [ 2373.305054][T10709] usb 4-1: USB disconnect, device number 80 [ 2373.900254][T11784] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2373.910354][T10709] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2374.084082][T11784] usb 6-1: Using ep0 maxpacket: 32 [ 2374.092006][T11784] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2374.101470][T11784] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2374.114056][T11784] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2374.123416][T11784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2374.133218][T11784] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2374.143380][T11784] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2374.158601][T11784] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2374.167836][T10709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2374.179195][T10709] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2374.192718][T11784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.199165][T10709] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2374.215570][T10709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2374.218667][T11784] usb 6-1: config 0 descriptor?? [ 2374.223864][ T5834] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2374.236511][T10709] usb 4-1: Product: syz [ 2374.236534][T10709] usb 4-1: Manufacturer: syz [ 2374.370504][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2374.468712][T22652] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2374.477763][T11784] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2374.640225][ T5834] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2374.706208][T11784] usb 6-1: USB disconnect, device number 55 [ 2374.736523][T11784] usblp0: removed [ 2374.790769][ T5834] usb 1-1: device descriptor read/64, error -71 [ 2374.921597][ T5834] usb usb1-port1: attempt power cycle [ 2375.050721][T10709] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 2375.242252][T10709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2375.272561][T10709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2375.288678][T10709] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2375.302248][T10709] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2375.312628][T10709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.328382][T10709] usb 8-1: config 0 descriptor?? [ 2375.350165][ T5834] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2375.392297][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2375.742354][ T5834] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2375.960820][ T5834] usb 1-1: device descriptor read/8, error -71 [ 2376.145221][ T5834] usb usb1-port1: unable to enumerate USB device [ 2376.167092][T14879] usb 4-1: USB disconnect, device number 81 [ 2376.301252][T10709] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 2376.454063][T10709] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2377.339279][T10709] usb 8-1: USB disconnect, device number 60 [ 2378.010131][T11784] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 2378.141512][T21261] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2378.160295][T10709] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2378.192913][T11784] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2378.201576][T11782] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 2378.209903][T11784] usb 1-1: config 0 has no interface number 0 [ 2378.216734][T11784] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2378.225724][T11784] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2378.235511][T11784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.243755][T11784] usb 1-1: Product: syz [ 2378.248050][T11784] usb 1-1: Manufacturer: syz [ 2378.252993][T11784] usb 1-1: SerialNumber: syz [ 2378.260275][T11784] usb 1-1: config 0 descriptor?? [ 2378.332651][T21261] usb 6-1: Using ep0 maxpacket: 32 [ 2378.339591][T21261] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2378.348164][T21261] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2378.360835][T21261] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2378.369922][T21261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2378.374013][T10709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.381421][T11782] usb 8-1: device descriptor read/64, error -71 [ 2378.396262][T21261] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2378.407251][T21261] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2378.415159][T10709] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2378.425596][T21261] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2378.443142][T21261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.455129][T21261] usb 6-1: config 0 descriptor?? [ 2378.465224][T10709] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2378.490254][T10709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2378.501533][T10709] usb 4-1: Product: syz [ 2378.505748][T10709] usb 4-1: Manufacturer: syz [ 2378.668650][T22693] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2378.678104][T21261] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2378.690707][T11782] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 2378.734809][T10709] usb 4-1: USB disconnect, device number 82 [ 2378.850250][T11782] usb 8-1: device descriptor read/64, error -71 [ 2378.915994][T21261] usb 6-1: USB disconnect, device number 56 [ 2378.929804][T21261] usblp0: removed [ 2378.970482][T11782] usb usb8-port1: attempt power cycle [ 2379.092304][T11784] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2379.314439][T10709] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2379.390252][T11782] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 2379.423699][T11782] usb 8-1: device descriptor read/8, error -71 [ 2379.506193][T10709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.523452][T10709] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2379.524715][T11784] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 2379.549628][T11784] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 2379.562354][T10709] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2379.570679][T11784] CoreChips: probe of 1-1:0.41 failed with error -71 [ 2379.573077][T10709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2379.586513][T10709] usb 4-1: Product: syz [ 2379.591344][T10709] usb 4-1: Manufacturer: syz [ 2379.596759][T11784] usb 1-1: USB disconnect, device number 73 [ 2379.710204][T11782] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2379.741015][T11782] usb 8-1: device descriptor read/8, error -71 [ 2379.861451][T11782] usb usb8-port1: unable to enumerate USB device [ 2380.451822][T11784] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 2380.701461][T11784] usb 8-1: device descriptor read/64, error -71 [ 2381.147748][T11784] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2382.405481][T18149] usb 4-1: USB disconnect, device number 83 [ 2383.470346][T14552] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2383.560473][T10709] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2383.650136][T14552] usb 1-1: Using ep0 maxpacket: 32 [ 2383.662169][T14552] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2383.670674][T14552] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2383.679313][T14552] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2383.688961][T14552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2383.699204][T14552] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2383.709380][T14552] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2383.724001][T14552] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2383.731265][T10709] usb 6-1: device descriptor read/64, error -71 [ 2383.734390][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.776530][T14552] usb 1-1: config 0 descriptor?? [ 2383.810399][ T5834] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2384.000180][T14552] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2384.000214][T22720] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 2384.025820][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 2384.031327][T10709] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2384.052312][ T5834] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 2384.067027][ T5834] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.078834][ T5834] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2384.090856][T18149] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2384.101128][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2384.107910][ T5834] usb 8-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 2384.117493][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.129521][ T5834] usb 8-1: config 0 descriptor?? [ 2384.200401][T10709] usb 6-1: device descriptor read/64, error -71 [ 2384.260174][T18149] usb 4-1: device descriptor read/64, error -71 [ 2384.283149][T14879] usb 1-1: USB disconnect, device number 74 [ 2384.304673][T14879] usblp0: removed [ 2384.320651][T10709] usb usb6-port1: attempt power cycle [ 2384.532319][T18149] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2384.545121][ T5834] usbhid 8-1:0.0: can't add hid device: -71 [ 2384.552071][ T5834] usbhid: probe of 8-1:0.0 failed with error -71 [ 2384.562389][ T5834] usb 8-1: USB disconnect, device number 67 [ 2384.690140][T18149] usb 4-1: device descriptor read/64, error -71 [ 2384.741003][T10709] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2384.781004][T10709] usb 6-1: device descriptor read/8, error -71 [ 2384.812108][T18149] usb usb4-port1: attempt power cycle [ 2385.060318][T10709] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2385.091133][T10709] usb 6-1: device descriptor read/8, error -71 [ 2385.130263][T14552] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2385.215161][T10709] usb usb6-port1: unable to enumerate USB device [ 2385.251989][T18149] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2385.292810][T18149] usb 4-1: device descriptor read/8, error -71 [ 2385.352727][T14552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2385.365027][T14552] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2385.374731][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.386273][T14552] usb 1-1: config 0 descriptor?? [ 2385.410422][T11782] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2385.560306][T18149] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2385.590953][T18149] usb 4-1: device descriptor read/8, error -71 [ 2385.598901][T11782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2385.610315][T11782] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2385.631144][T11782] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2385.640751][T14552] usbhid 1-1:0.0: can't add hid device: -71 [ 2385.646805][T14552] usbhid: probe of 1-1:0.0 failed with error -71 [ 2385.654674][T11782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2385.667512][T14552] usb 1-1: USB disconnect, device number 75 [ 2385.673595][T11782] usb 8-1: Product: syz [ 2385.679395][T11782] usb 8-1: Manufacturer: syz [ 2385.711045][T18149] usb usb4-port1: unable to enumerate USB device [ 2385.899825][T18149] usb 8-1: USB disconnect, device number 68 [ 2386.230150][T14552] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2386.460404][T18149] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2386.472310][T14552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2386.516184][T14552] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2386.549485][T14552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.652088][T14552] usb 1-1: config 0 descriptor?? [ 2386.838324][T18149] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2386.977756][T18149] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2387.412586][T18149] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 2387.437335][T18149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2387.454287][T18149] usb 8-1: Product: syz [ 2387.461300][T18149] usb 8-1: Manufacturer: syz [ 2387.571272][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 2387.618229][T22739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.633603][T22739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2388.080814][T14552] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 2388.089344][T14552] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input255 [ 2388.163302][ C0] ================================================================================ [ 2388.172691][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 2388.181401][ C0] index 547 is out of range for type 'const int[34]' [ 2388.188131][ C0] CPU: 0 PID: 11782 Comm: kworker/0:9 Not tainted syzkaller #0 [ 2388.195728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2388.205837][ C0] Workqueue: events console_callback [ 2388.211255][ C0] Call Trace: [ 2388.214589][ C0] [ 2388.217548][ C0] dump_stack_lvl+0x18c/0x250 [ 2388.222412][ C0] ? show_regs_print_info+0x20/0x20 [ 2388.227734][ C0] ? load_image+0x420/0x420 [ 2388.232347][ C0] ubsan_epilogue+0xa/0x30 [ 2388.236834][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 2388.242635][ C0] aiptek_irq+0x1eb8/0x2920 [ 2388.247292][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 2388.252430][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 2388.258241][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 2388.263674][ C0] dummy_timer+0xa58/0x34e0 [ 2388.268327][ C0] ? dummy_free_streams+0x520/0x520 [ 2388.273586][ C0] ? dummy_free_streams+0x520/0x520 [ 2388.278838][ C0] __hrtimer_run_queues+0x525/0xc10 [ 2388.284140][ C0] ? hrtimer_interrupt+0x980/0x980 [ 2388.289309][ C0] ? read_tsc+0x9/0x20 [ 2388.293477][ C0] hrtimer_run_softirq+0x177/0x290 [ 2388.298641][ C0] handle_softirqs+0x27d/0x820 [ 2388.303438][ C0] ? read_tsc+0x9/0x20 [ 2388.307554][ C0] ? ktime_get+0x24b/0x280 [ 2388.311996][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2388.316780][ C0] ? do_softirq+0x1a0/0x1a0 [ 2388.321331][ C0] __irq_exit_rcu+0xd3/0x190 [ 2388.325988][ C0] ? irq_exit_rcu+0x20/0x20 [ 2388.330556][ C0] irq_exit_rcu+0x9/0x20 [ 2388.334832][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2388.340587][ C0] [ 2388.343594][ C0] [ 2388.346646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2388.352754][ C0] RIP: 0010:console_lock+0x0/0x1b0 [ 2388.357901][ C0] Code: c1 0f 8c 15 fe ff ff 48 c7 c7 ec ab 8c 8e e8 87 0f 74 00 e9 04 fe ff ff e8 6d 8c 1b 00 e9 c8 fd ff ff 0f 1f 84 00 00 00 00 00 0f 1e fa 55 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df e8 47 [ 2388.377620][ C0] RSP: 0018:ffffc9000cab7b18 EFLAGS: 00000293 [ 2388.383809][ C0] RAX: ffffffff84ae3bd5 RBX: ffffffff81593f75 RCX: ffff88802a649e00 [ 2388.391820][ C0] RDX: 0000000000000000 RSI: ffffffff8b1d32c0 RDI: ffffffff8d8c29e0 [ 2388.399845][ C0] RBP: ffffc9000cab7bb0 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 2388.407840][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: 1ffff92001956f64 [ 2388.415831][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: dffffc0000000000 [ 2388.423840][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.429636][ C0] ? console_callback+0x65/0x440 [ 2388.434651][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2388.440091][ C0] console_callback+0x6a/0x440 [ 2388.444914][ C0] ? vc_scrolldelta_helper+0x220/0x220 [ 2388.450447][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2388.455774][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.461526][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.467279][ C0] process_scheduled_works+0xa60/0x1600 [ 2388.472932][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2388.478474][ C0] ? assign_work+0x3cc/0x5d0 [ 2388.483129][ C0] worker_thread+0xa5e/0xfe0 [ 2388.487808][ C0] kthread+0x2fa/0x390 [ 2388.491929][ C0] ? pr_cont_work+0x550/0x550 [ 2388.496694][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2388.501365][ C0] ret_from_fork+0x48/0x80 [ 2388.505845][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2388.510454][ C0] ret_from_fork_asm+0x11/0x20 [ 2388.515299][ C0] [ 2388.518339][ C0] ================================================================================ [ 2388.527670][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 2388.534925][ C0] CPU: 0 PID: 11782 Comm: kworker/0:9 Not tainted syzkaller #0 [ 2388.542530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2388.552629][ C0] Workqueue: events console_callback [ 2388.557997][ C0] Call Trace: [ 2388.561299][ C0] [ 2388.564177][ C0] dump_stack_lvl+0x18c/0x250 [ 2388.568876][ C0] ? show_regs_print_info+0x20/0x20 [ 2388.574112][ C0] ? load_image+0x420/0x420 [ 2388.578703][ C0] panic+0x2ca/0x720 [ 2388.582675][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 2388.587252][ C0] check_panic_on_warn+0x84/0xa0 [ 2388.592248][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 2388.598021][ C0] aiptek_irq+0x1eb8/0x2920 [ 2388.602544][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 2388.607589][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 2388.613327][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 2388.618718][ C0] dummy_timer+0xa58/0x34e0 [ 2388.623290][ C0] ? dummy_free_streams+0x520/0x520 [ 2388.628541][ C0] ? dummy_free_streams+0x520/0x520 [ 2388.633784][ C0] __hrtimer_run_queues+0x525/0xc10 [ 2388.639007][ C0] ? hrtimer_interrupt+0x980/0x980 [ 2388.644159][ C0] ? read_tsc+0x9/0x20 [ 2388.648275][ C0] hrtimer_run_softirq+0x177/0x290 [ 2388.653439][ C0] handle_softirqs+0x27d/0x820 [ 2388.658248][ C0] ? read_tsc+0x9/0x20 [ 2388.662339][ C0] ? ktime_get+0x24b/0x280 [ 2388.666789][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2388.671621][ C0] ? do_softirq+0x1a0/0x1a0 [ 2388.676212][ C0] __irq_exit_rcu+0xd3/0x190 [ 2388.680864][ C0] ? irq_exit_rcu+0x20/0x20 [ 2388.685424][ C0] irq_exit_rcu+0x9/0x20 [ 2388.689718][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2388.695374][ C0] [ 2388.698330][ C0] [ 2388.701295][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2388.707293][ C0] RIP: 0010:console_lock+0x0/0x1b0 [ 2388.712421][ C0] Code: c1 0f 8c 15 fe ff ff 48 c7 c7 ec ab 8c 8e e8 87 0f 74 00 e9 04 fe ff ff e8 6d 8c 1b 00 e9 c8 fd ff ff 0f 1f 84 00 00 00 00 00 0f 1e fa 55 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df e8 47 [ 2388.732057][ C0] RSP: 0018:ffffc9000cab7b18 EFLAGS: 00000293 [ 2388.738179][ C0] RAX: ffffffff84ae3bd5 RBX: ffffffff81593f75 RCX: ffff88802a649e00 [ 2388.746209][ C0] RDX: 0000000000000000 RSI: ffffffff8b1d32c0 RDI: ffffffff8d8c29e0 [ 2388.754231][ C0] RBP: ffffc9000cab7bb0 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 2388.762269][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: 1ffff92001956f64 [ 2388.770298][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: dffffc0000000000 [ 2388.778329][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.784117][ C0] ? console_callback+0x65/0x440 [ 2388.789167][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2388.794603][ C0] console_callback+0x6a/0x440 [ 2388.799432][ C0] ? vc_scrolldelta_helper+0x220/0x220 [ 2388.804980][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2388.810257][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.816046][ C0] ? process_scheduled_works+0x975/0x1600 [ 2388.821878][ C0] process_scheduled_works+0xa60/0x1600 [ 2388.827511][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2388.833047][ C0] ? assign_work+0x3cc/0x5d0 [ 2388.837701][ C0] worker_thread+0xa5e/0xfe0 [ 2388.842378][ C0] kthread+0x2fa/0x390 [ 2388.846507][ C0] ? pr_cont_work+0x550/0x550 [ 2388.851246][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2388.855886][ C0] ret_from_fork+0x48/0x80 [ 2388.860369][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2388.865017][ C0] ret_from_fork_asm+0x11/0x20 [ 2388.869852][ C0] [ 2388.873511][ C0] Kernel Offset: disabled [ 2388.877853][ C0] Rebooting in 86400 seconds..