last executing test programs: 15.62584199s ago: executing program 0 (id=3141): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0), 0x0, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf0314c28d0473bb216e8b51c38fbb64969f949c0d9c42d74040c0895567667aef57ae8901cfbffffff4c27af8474950649f113"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) 13.266296849s ago: executing program 0 (id=3147): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000080)={0x40, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.984386163s ago: executing program 3 (id=3155): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x4}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000000000000000800000000000000000000000080001"], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x1fffff, "3bdcc24bce0080000000000000f59a469993fbe93b07002700"}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x2, 0x80001) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0xeeee8000, 0x0, r7}) r8 = eventfd(0x3ff) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1ff, 0x50000, 0x0, r8, 0x4}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c44d4a043e3b614fd00"}) ptrace$pokeuser(0x6, r0, 0x40, 0x9) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) 10.015848684s ago: executing program 0 (id=3160): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f00000006c0)="e9e9987d1e0bcf67a50ba81e32b6e48e1e75b148ab2431f350", 0x19}, {&(0x7f0000000200)="f1e0bb4eb5a8daacaf47dccecf96a4a749f42643c96cc28e14d0abcb244414bce8cb7251234e6f89b08c6c456a87e8d83537cba0c238cb292f159d364b17c796ba", 0x41}, {&(0x7f0000000480)="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", 0x16d}, {&(0x7f0000001240)="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", 0x537}], 0x5, 0x0, 0x0, 0x2c}, 0x20044804) 9.926175503s ago: executing program 0 (id=3161): r0 = syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0xfffffffffffffff4, 0x0, &(0x7f0000001400)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x19}, [@jmp={0x5, 0x1, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/43) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004340)=@newtaction={0x14, 0x76, 0x1, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x4) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000002180)) fchdir(r0) 7.20349972s ago: executing program 3 (id=3167): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c140538", 0x53}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='name', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.556381688s ago: executing program 0 (id=3171): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0), 0x0, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf0314c28d0473bb216e8b51c38fbb64969f949c0d9c42d74040c0895567667aef57ae8901cfbffffff4c27af8474950649f113"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) 5.902561713s ago: executing program 4 (id=3174): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000080)=',', 0x1}, {&(0x7f00000006c0)="e9e9987d1e0bcf67a50ba81e32b6e48e1e75b148ab2431f350", 0x19}, {&(0x7f0000000200)="f1e0bb4eb5a8daacaf47dccecf96a4a749f42643c96cc28e14d0abcb244414bce8cb7251234e6f89b08c6c456a87e8d83537cba0c238cb292f159d364b17c796ba", 0x41}, {&(0x7f0000000480)="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", 0x16d}, {&(0x7f0000001240)="b2210d91b934957ed7ecedd97cdaf8d1d8264a9451466805e67b566b91a156c4cafde272cf6dd84149fdb1df35fdad261617f43a49d46837b252987cac0ff006d1d293b23b28f2e0bc1e00a482cb1dff446b67fc9a9b38a0febfeeea260495789f4cd5b05d86d93b84d85eaa0773bb47ec58e27d848721be92c68bed8893e7013af16b0bde975899fec5866331ea69b6b148408c68e9bbd4b2d32a1593bea83fa39119e715a0633ee967ae1f436191b6becdc5ccbfa38247832e8e40d85605e3b8388da279e1974c71214849d13f5a5221421b68d0f9fbb15ae6633ddac96fc71aeee079d15d11f47b77a715ad7df7739efc4677e281b12aaba9e301d21eaa3ad8cd6b8615e7bd0c0583e35748bd0bc9315d453e840a2091bfc8cda8283182d37d876d266321dd0cad306f7dae5b0e1953dfcd8d3ef4b2ecfe31c92330584b1db0c7a46180b35c5010e889641d6e47bc3001e831e8873fba777765e8a3cb1b4c7fa9bf3e11f8af87739f499dcaf53e76d2e803ac3be34e0b229186bc754d5391ec547f073249ffa951123cbf198f2609dc3b2ae77a9b7ff3053e3377dcd7a702d92e7a50e0f5ba50dbf6aa647b335ecd2f7013d2625d1ec96aad98fc9841e166d6e5d3acd2b500af0382bda92cdce851920c1f2c0a675e987a63fd4ae4c6a8fe03d848221ac953106b35b5165e1ad14c8b76618985025eab6dc5721396cd1c20d184c742a7deba2afa17626040a6d80c2f0234adfac6805b9b5304156304a542ffee8eaaeacfde79ac6a495ce0cb501429acca26d4ca5361f2f027bb1355766ea3ec8f16361b21c64efceafee4d3b3fa7c6774e513e39aad7d83a128f93558fadd3d92a1657d0517a66451e2c29c9df472ca3d118479fe9603ca0adb3f21ba0873b45ad31a13259709d471bbb9237469aae18ec8dc9a81b1fcea8ee9ce0a95f8db70ee660f6d7b3c1205e3b643f9d6ec6d402b14ec1895b80fc9e1d06810abfe1a042171593c99a2a2c858a06f5488cdbeb9625833f47393758e6f453d14dd2342fe18fec462005d5d00c72e344e7d59474465b00bd69d05e3954b48d4075a75dda55e7629e94148121be4b6742783dbee965086e62a253e5889583ab745899044bda4ad8e9212f27de49dd555bd56c6841b565ea4e681385f10a823254f926b0209259b84e6bfced89906d5380bc8146bea637197e845cc7031febd1c8e0e8cc7e8ed8accd1efa03160daeae504fe8957237b17ac86f30e73660d7914456f1a7be0f0a1326286acc77247b9364d3a0de7414199c7ccff23c9d2f8a214054024314e430e7c38eb9199854eab5816c6c5f9c4a1d6ed4f27f3b378ed87815f4656952c7f3c0d9ca009585866abc5a6867de61db15c54a747bc342885ceedc2e675223dc195a2339dc5a5b24e89d4631db95f6de592994456069b9078a305db505688c19545a6c52679fc8ef9c67b33d589e6f178c1d447b2abf6ab187df7568e5ac0c143223be7d928c015338416a0961c9d63eaaf14ed2a8c557a2e829cfdbb5a9ecd3e7128f8f6ec6e1426063ef79c1ee26493ab9ee2922c934bad9da3552c9a98322d0b50511240e4d2923e63f49a3d8efb95e7504d2d8bf436763dee8a46fe78e6cd66e68affbb2f29d0ee45645999c74607c56c85c3789cef2d5b0eacbcdef9775878b4e8934d1fb4d1dc75c8ffbd8ba63356f217e668143bae48e0b010a4038c650653f267ce57045ab0241f53b820d33e04b60b33a3d36333a5cc80aefa3241f1cc6f793f5091a5e43ef1622c9057b1069d2f23e599af349c1c946a5bf8294dd4f5001580680b7f46bb9ddcc8bd97b3d6815e3b7e3542dd5e61d72631ef8e0762d1fd6dea55744e4b87d280244d1423197716af7b", 0x537}], 0x5, 0x0, 0x0, 0x2c}, 0x20044804) 5.666846001s ago: executing program 4 (id=3175): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x31, {0x31, 0x8, "83efb930f0187ff0478fa22a61a54607dc6f83133facad2bb8b71ea9e43d359cec25cd00"/47}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000002b40)) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x800, 0x40, 0xa03, 0xa, 0x8001, 0xc3f]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a3000000000f400030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b0001006e756d67656e00001c0002800800024000000000080001400000000908000340000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB="02137606030000dff4a5d300fddbdf2500f11800c5060000"], 0x18}}, 0x400c000) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x7) r8 = syz_usb_connect$cdc_ecm(0x3, 0x63, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x8, 0x0, 0xa0, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "aa"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x9, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x7, 0x2, 0x2, 0x4, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x3, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xff, 0x3, 0x3, 0x10, 0x5}, 0xba, &(0x7f0000000380)={0x5, 0xf, 0xba, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0xf2, 0x0, 0x6, 0x0, 0x4}, @generic={0x8d, 0x10, 0x3, "01a6028c608436e6681736f2252d27d6e0393d819a71dfe48ec53c16a5a7fcb4ac780debd28f319ae2d5d6297fc727d1f7fe5bf1387031382023f936cee110117429050989c5796aa24e5682785e446c8ad42a99eaf96e6bb1266f8115dda1e8d7004b732f105f497a5ebf5696bf7d4c5287efc68422648653d4f5793a42fbb74639c6b57c1fcf92652f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0x1, 0x200, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xe, 0x6, 0x5}]}, 0x8, [{0x9f, &(0x7f0000000440)=@string={0x9f, 0x3, "21ae9d6a91a7ee90798f52bf49701828dd8eaa2d31b1357188c451e66a489965951ab236a2a99ef7ce2e0052f7cfd5c2762cad056330d9973663b3aa0fd246ea38ef359930bd4dd6b479fab009254a271ee8cabb6e4a781574211ca96be4cda09e220872a14e77116b5c557543e2bae0db4b39ce48f647bde918f582262bc5058c9ef019b68cdfdb53b5c490d6703f74d9a09e5f08131a52fc8fed36c9"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0xed, &(0x7f0000000580)=@string={0xed, 0x3, "02a9a00244140c5e83dab69b2e2b1beca052197e6091863b80578a0ebfcfd31fe50338bb17db7d16d4d0e9004b7aa8827ce2c836b87f7710b5484e464393f6de6409aa9d5cc92e6f47986821312f186d234d455cd60b27f5eccc9af19c3459ff5dc8af3932b96b5580f45a6fe5b94ef00cfa7e82cd4ab5256d6d91fe243b41a23dbf6b2a2dc24aa0859c82bbfe3b11f219051a255e620f09a14f6d79efe32e17c6e2854b981cba0a157fea8613b92946dd0e6e0b3ec89fe14dacf867b007014c2fbacb89455c95c3408b24c37333bbbfc5e0a81ef7979010084cdfd1d557cbf4d0810cb91851f32d627e29"}}, {0xe9, &(0x7f0000000680)=@string={0xe9, 0x3, "bb38448acded16e7708e4d166cf3e5a9839772c20cf3386baf366526085a519da2ff23cd9a3912f61d70f704bca5b8f1955742a17000d9f0cba70b2bb5a8a9c9428a9629a83d2cb81efeacd035737a8b07cbf741878c4e3ff55c07d03e0cc7b55b65b7dda017970c2a268dd12fd6ad4fe700887cf1820184b443bb8a8c5e6e3ac8c1f735679e4837ae00d60778c57eb6e0795ad32b675e42b3f063ab166872468cd165b7a1ac7c331e016af3e7ed7315565e5d2ae5324b98d6e0cfd818b7158bea1bbb81b3f5093e69a87f119275a433b8999c58df2366a52e8c7adea99d2190c69e15251423aa"}}, {0x55, &(0x7f0000000780)=@string={0x55, 0x3, "2dcd626a02eabf18d877f3ba0dbcbe0eaf10ab6c8d2fa87b90dfff0289e263fcaee6a50edbc9b6e84db0171534cf3a49bc61e50959cba041dda7da93d68db8a80774806cbcfaf87567b05419ee41563f40fa03"}}, {0x94, &(0x7f0000000800)=@string={0x94, 0x3, "d968cc3606668ebbc0c1b89483fd7e071a6d9ae8b10659bd5db4e34fc5771af501c1f92c13b3ad1d0970e96b7e8eb80406ba22b424f69004dc29ff5bf299ef391906dd83093d050ccec9495c318d20cbf9b34c421b5e0c7eead653f36d0033c242908babdf6ff7fc3eaaeea95f51aa957b03136bdbeb7ab76a8c241706e038a4a4b900f0594185a37bc1744c1115e9b3cbf5"}}, {0x61, &(0x7f00000008c0)=@string={0x61, 0x3, "bf5d02eff64cc3953fb2171e2529d98c139b1e7903e5dec4ce85094053d66e4a774bf8312b09735c1bf0d93d36da03c3af0c2c879ef3da8353112dc629fbba0d9f624d83c2a0ce54b8d824f48c78b7f6817c33b16d69e65588866ccb23036f"}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x0, 0x30, 0x43, {0x43, 0xc, "8d35111551cf57728c9693811e2933c80de417f9dee53e35c291e85ab1cf2195a7d4caa7c9f9490f8db70eb43197c3e9124412cb3b09208edcd2a0f335aa416687"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c40)={0x1c, &(0x7f0000000ac0)={0x20, 0xf, 0xd3, "e410388372f3257418b6f5a2f178fb3a5db84f204ace7e75cb2b03ca1cdaead4ccffcc7cb7b65ebab762731c1aab78051208889a63d166ede1c121953c02750e84402d071fe286dad6e0e83293fca50f5f95657bb57503a40e99864385846c8d7c764734e2762b6a95343cabeccf098d4ce23ee01f9f1ecabb791abf708272d9a47fe4443fb47fc49f0e93e1bc323a23b61e73e0f867d386ed54300418f21ee583fc5adc4e8efaadf39eab80eecdf51fcc8c46aacde4ab26ea9ab318871955a1e8053d46bc81dffe00ee1c759284a70b96c5bc"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.435531722s ago: executing program 3 (id=3176): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000140)=[{0x7, 0x8000, 0x65, &(0x7f0000000080)="4924f34d930b5c409f37d4011cd6a87c8a285fb6eba3ab92b4bc4f1ab506923cf30ae2483b8848bcfb8920995c2b1837dc8a31274fd026526299eb77e43ce9381f1438a269192cd68ceb033f508b9c549c91c73ec279e46279ef8b70ebf0680b833820d83a"}, {0x7, 0x2100, 0x0, 0x0}], 0x2}) 4.882520363s ago: executing program 0 (id=3177): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x4}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000000000000000800000000000000000000000080001"], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x1fffff, "3bdcc24bce0080000000000000f59a469993fbe93b07002700"}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x2, 0x80001) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0xeeee8000, 0x0, r7}) r8 = eventfd(0x3ff) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x1ff, 0x50000, 0x0, r8, 0x4}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c44d4a043e3b614fd00"}) ptrace$pokeuser(0x6, r0, 0x40, 0x9) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) 4.779250816s ago: executing program 2 (id=3178): syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040b404840340000102030149026e000301002040080b0201012130080904000000010130000a2401040a00fe0f000009040100000102300009040101010102300009050109ff03090d0b0a2525020000000e0800090402"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) 4.45507021s ago: executing program 1 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x2c, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.390376008s ago: executing program 1 (id=3181): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x272, 0x4000) fsync(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x2000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) tkill(r6, 0x7) wait4(r6, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001480)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x31}, 0x0, 0x2, 0x4, 0x4, 0x22, 'syz0\x00', "054a3deb059c5a0eecf923d7459d1476799c415c61be7a45284936c4ad82b45a", "bb23be595052c56bce3ad5434443ba326bcc6a1de18a2e436b55c7ea4a9f3542", [{0x2, 0x6, {0x0, 0x2}}, {0x63, 0x10, {0x1, 0x81}}, {0x6, 0xca, {0x2, 0x3}}, {0x8, 0xbae, {0x1, 0x7fff}}, {0x6, 0x2, {0x0, 0x7f}}, {0x0, 0x1, {0x2, 0x1000}}, {0xfc, 0x7, {0x2, 0x6}}, {0x3, 0x6, {0x2, 0x2}}, {0x6, 0x8001, {0x3, 0x3}}, {0x9, 0x4, {0x0, 0x2}}, {0x2, 0x0, {0x0, 0x2}}, {0x3, 0x1, {0x2}}, {0x2, 0x3, {0x1, 0x400}}, {0xe4, 0x0, {0x1, 0xffff8001}}, {0x4, 0x6, {0x0, 0x1}}, {0x100, 0xff, {0x0, 0x6}}, {0x8, 0x2, {0x2, 0x1000}}, {0x4, 0x303e, {0x0, 0x7}}, {0x1, 0xf, {0x2, 0x8d}}, {0x8, 0x7, {0x0, 0x5}}, {0x3, 0x1, {0x2, 0x8}}, {0x3, 0x5, {0x1}}, {0x188, 0x3b0, {0x3, 0x9}}, {0x3, 0xfff4, {0x0, 0x6}}, {0x0, 0x2, {0x2, 0x4}}, {0xfeff, 0x3, {0x0, 0x8fc1}}, {0x60f, 0x74c, {0x1, 0x2}}, {0xae8, 0x1, {0x1, 0x1}}, {0x4, 0x5, {0x1, 0xbd}}, {0x4, 0x5, {0x1, 0x1}}, {0xff9e, 0x1, {0x0, 0x5}}, {0x400, 0x6, {0x1, 0x8}}, {0x4, 0x5f, {0x0, 0x2}}, {0x9, 0x22ae, {0x0, 0x8}}, {0x8, 0x4, {0x2, 0x2}}, {0x6, 0x1, {0x2, 0x3}}, {0x2a1, 0x2, {0x1, 0xe}}, {0xfff3, 0x200, {0x2}}, {0x4, 0xe, {0x3, 0x7}}, {0xf3d6, 0xffff, {0x1, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4086, 0xff6}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) setpriority(0x0, r6, 0x2a14b58) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.060602633s ago: executing program 1 (id=3182): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000106307302040000102030109026500030168c0c00904000000010100000a2401ff0f0f0002010205240503"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 3.472771323s ago: executing program 4 (id=3183): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000100), 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 3.016137563s ago: executing program 2 (id=3184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.332797064s ago: executing program 3 (id=3185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x8, 0x7f, 0x8, 0x10000, 0xfb4, 0xf3ae, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1849e, 0x8861}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) 2.182496412s ago: executing program 2 (id=3186): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9", 0xaa}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6", 0xd9}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.072789046s ago: executing program 3 (id=3187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) futex(&(0x7f0000000a00)=0x1, 0x7, 0x1, 0x0, 0x0, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x10, 0x30}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002f88fb", 0xe}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x0, 0x30c4, 0x7fff}, &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000001240)=""/143) 2.064665224s ago: executing program 4 (id=3188): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x31c7, 0x70}}}}, [""]}, 0x28}}, 0x40000804) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x701, 0x0, 0x25dfdbf4, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x8, 0x4, 0xffffffff, 0x0, r4}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) clock_adjtime(0x5, 0x0) fsopen(&(0x7f00000002c0)='selinuxfs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) 2.030081735s ago: executing program 2 (id=3189): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000540)={0x0, 0x1, 0x25, "8e1b6ec8a2195d042a87f93e2190c80e29d26f1088d376c4299af39b41684208", 0x43353039}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000400)={0x5, 0x220, 0x8, {0x0, 0x2710}, {0x77359400}, {0x4}, 0x1, @canfd={{0x4, 0x1}, 0x6, 0x0, 0x0, 0x0, "58975ea83202cd6b7e78c564fd0f86f8022d6b5cd3d2b983c0ced832d28e8bbcd1d7ae554fd6f06a350547aac2f75a84b244117496a7ea74f05166ea7dd43268"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x404c041) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000", 0x17}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') fchdir(r4) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000100)) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010102, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 1.856236511s ago: executing program 3 (id=3190): openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r9, 0x1ff, 0x3, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x7ffd, 0x0, 0x5], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, r11, 0x0, r11], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={r4, 0x0, 0x9, 0x2, 0x1, [0x0, r5, r11, r12], [0xc, 0x8, 0xc, 0x9], [0x10000, 0x41c800b1, 0x9, 0x1ff], [0x9, 0x2a4, 0x101, 0x5]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 629.934916ms ago: executing program 1 (id=3191): unshare(0x2040400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000cab000)) 587.983093ms ago: executing program 2 (id=3192): socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = io_uring_setup(0x28fd, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000300)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 450.258804ms ago: executing program 1 (id=3193): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9", 0xaa}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca", 0xda}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 399.01282ms ago: executing program 2 (id=3194): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000"], 0x5000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80c01) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)=0x80000000) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r5, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@bloom_filter={0x1e, 0x9, 0xbf2, 0x101, 0x4000, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x2}, 0x50) 392.4034ms ago: executing program 1 (id=3195): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000140)=[{0x7, 0x8000, 0x65, &(0x7f0000000080)="4924f34d930b5c409f37d4011cd6a87c8a285fb6eba3ab92b4bc4f1ab506923cf30ae2483b8848bcfb8920995c2b1837dc8a31274fd026526299eb77e43ce9381f1438a269192cd68ceb033f508b9c549c91c73ec279e46279ef8b70ebf0680b833820d83a"}, {0x7, 0x2100, 0x0, 0x0}], 0x2}) 321.407504ms ago: executing program 4 (id=3196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 0s ago: executing program 4 (id=3197): setrlimit(0x8, &(0x7f0000000000)={0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_pidfd_open(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x24000045) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Product=0014, bcdDevice=bb.9d [ 521.400697][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.412153][T14311] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.430858][ T5737] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.456728][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.471649][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.514677][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.523907][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.655013][T14320] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 521.688351][T14320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.705804][T14311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.739494][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.754989][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.793659][ T5847] bond2: (slave syz_tun): link status definitely down, disabling slave [ 521.879209][ T9599] usb 3-1: USB disconnect, device number 82 [ 522.082762][ T5737] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 522.254042][ T5737] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 522.265749][T13582] Bluetooth: hci1: command tx timeout [ 522.508432][ T5737] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 522.580757][ T5737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 522.712811][ T5737] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 522.735977][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 522.750250][ T5737] usb 4-1: Product: syz [ 522.761186][ T5737] usb 4-1: Manufacturer: syz [ 522.769023][ T5737] usb 4-1: SerialNumber: syz [ 522.886042][ T5737] usb 4-1: config 0 descriptor?? [ 523.117950][ T5737] usb 4-1: selecting invalid altsetting 0 [ 523.386875][T14329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.445563][T14329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.609318][T14329] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 523.639254][ T5630] usb 4-1: USB disconnect, device number 92 [ 523.723400][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.726248][ T5705] usb 5-1: USB disconnect, device number 73 [ 524.184021][ T5737] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 524.342863][T13582] Bluetooth: hci1: command tx timeout [ 524.348684][ T5737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.385251][ T5737] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.465469][ T5737] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 524.500148][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 524.528135][ T5737] usb 4-1: Product: syz [ 524.539435][ T5737] usb 4-1: Manufacturer: syz [ 524.575572][ T5737] usb 4-1: SerialNumber: syz [ 524.825296][ T5737] usb 4-1: USB disconnect, device number 93 [ 525.258105][T14373] tipc: Enabling of bearer rejected, already enabled [ 525.522604][ T5737] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 525.577213][T14379] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2920'. [ 525.615925][T14379] pimreg3: entered allmulticast mode [ 525.704773][ T5737] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.740833][ T5737] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 525.765498][ T5737] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.801209][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.860435][T14375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.930941][ T5737] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.227958][T14375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.270090][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.308718][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.423850][T13582] Bluetooth: hci1: command tx timeout [ 526.482926][ T5705] usb 1-1: USB disconnect, device number 85 [ 527.652527][ T5705] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 527.824443][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.835572][ T5705] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 527.846901][ T5705] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 527.858551][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.870615][ T5705] usb 5-1: config 0 descriptor?? [ 527.879718][ T5705] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 527.886882][ T5705] dvb-usb: bulk message failed: -22 (3/0) [ 527.903931][ T5705] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 527.918959][ T5705] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 527.926961][ T5705] usb 5-1: media controller created [ 527.933817][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.977743][ T5705] dvb-usb: bulk message failed: -22 (6/0) [ 527.985749][ T5705] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 528.001624][ T5705] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 528.020572][ T5705] dvb-usb: schedule remote query interval to 150 msecs. [ 528.031586][ T5705] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 528.042933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 528.119898][T14395] dibusb: i2c wr: len=101 is too big! [ 528.119898][T14395] [ 528.175885][ T5705] usb 5-1: USB disconnect, device number 74 [ 528.211563][ T5705] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 528.772212][T14418] syzkaller0: entered promiscuous mode [ 528.780015][T14418] syzkaller0: entered allmulticast mode [ 528.809094][T14418] tipc: Started in network mode [ 528.818957][T14418] tipc: Node identity 2ee65f32696a, cluster identity 4711 [ 528.835011][T14418] tipc: Enabled bearer , priority 0 [ 528.858734][T14417] tipc: Resetting bearer [ 528.881374][T14417] tipc: Disabling bearer [ 529.412501][ T5691] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 529.587879][ T5691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.611106][ T5691] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.629523][ T5691] usb 5-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7 [ 529.644189][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.656796][ T5691] usb 5-1: Product: syz [ 529.664027][ T5691] usb 5-1: Manufacturer: syz [ 529.671197][ T5691] usb 5-1: SerialNumber: syz [ 529.688547][ T5691] usb 5-1: config 0 descriptor?? [ 529.832732][ T5737] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 529.951493][ T5705] usb 5-1: USB disconnect, device number 75 [ 530.017268][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 530.045132][ T5737] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 530.062487][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.070971][ T5737] usb 2-1: Product: syz [ 530.082380][ T5737] usb 2-1: Manufacturer: syz [ 530.088609][ T5737] usb 2-1: SerialNumber: syz [ 530.102299][ T5737] usb 2-1: config 0 descriptor?? [ 530.115999][ T5737] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 530.124542][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 530.138497][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 530.162105][ T5737] dvb-usb: bulk message failed: -22 (5/0) [ 530.169465][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 530.186421][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.202279][ T5737] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 530.211105][ T5737] usb 2-1: media controller created [ 530.235988][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.260297][ T5737] usb 2-1: selecting invalid altsetting 3 [ 530.269362][ T5737] ttusb2: set interface to alts=3 failed [ 530.378918][ T29] audit: type=1326 audit(1782036964.115:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.432619][ T29] audit: type=1326 audit(1782036964.115:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.523065][ T5737] DVB: Unable to find symbol tda10086_attach() [ 530.536353][ T29] audit: type=1326 audit(1782036964.115:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.569816][ T5737] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 530.611875][ T29] audit: type=1326 audit(1782036964.145:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.657864][ T29] audit: type=1326 audit(1782036964.145:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.698683][ T29] audit: type=1326 audit(1782036964.145:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.737403][ T5737] dvb-usb: bulk message failed: -22 (4/0) [ 530.765676][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 530.782807][ T5737] dvb-usb: bulk message failed: -22 (5/0) [ 530.829388][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 530.867926][ T29] audit: type=1326 audit(1782036964.145:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 530.954429][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 531.005124][ T29] audit: type=1326 audit(1782036964.145:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 531.069135][ T5737] usb 2-1: USB disconnect, device number 79 [ 531.134844][ T29] audit: type=1326 audit(1782036964.145:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 531.249599][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 531.250689][ T29] audit: type=1326 audit(1782036964.145:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.2.2938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8bf9ce59 code=0x7ffc0000 [ 531.394248][T14449] tipc: Enabling of bearer rejected, already enabled [ 532.212565][ T5705] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 532.438876][ T5705] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.453573][ T5705] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 532.492847][ T5705] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 532.523345][ T5705] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 532.564260][ T5705] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 532.629057][ T5705] usb 3-1: Manufacturer: syz [ 532.650008][ T5705] usb 3-1: SerialNumber: syz [ 532.904177][ T5705] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 532.951048][ T5705] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input66 [ 532.976589][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 532.984548][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 532.992032][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.002513][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.009597][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.016788][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.025454][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.033608][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 533.040609][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 533.062767][ T5705] usb 3-1: USB disconnect, device number 83 [ 533.102925][ T5737] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 533.306903][ T5737] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 533.350038][ T5737] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 533.418304][ T5737] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 533.477208][ T5737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 533.556816][ T5737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 533.594656][ T5705] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 533.602622][ T5737] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.647315][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.691250][ T5737] usb 1-1: Product: syz [ 533.723162][ T5737] usb 1-1: Manufacturer: syz [ 533.775320][ T5737] cdc_wdm 1-1:1.0: skipping garbage [ 533.811064][ T5737] cdc_wdm 1-1:1.0: skipping garbage [ 533.825739][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.880408][ T5737] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 533.895498][ T5705] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.942026][ T5737] cdc_wdm 1-1:1.0: Unknown control protocol [ 533.976604][ T5705] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7 [ 534.037341][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.089070][ T5705] usb 3-1: Product: syz [ 534.109618][ T5705] usb 3-1: Manufacturer: syz [ 534.142533][ T5705] usb 3-1: SerialNumber: syz [ 534.174998][ T5705] usb 3-1: config 0 descriptor?? [ 534.196891][T14476] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2950'. [ 534.208072][T14476] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2950'. [ 534.218954][T14476] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2950'. [ 534.316918][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.342777][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.632490][ T5705] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 534.773088][ T5712] usb 3-1: USB disconnect, device number 84 [ 534.802583][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 534.839957][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.900754][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 534.968350][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 535.031944][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.110222][ T5705] usb 2-1: config 0 descriptor?? [ 535.322683][ T5712] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 535.505065][ T5712] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.544763][ T5712] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 535.584085][ T5705] nzxt-smart2 0003:1E71:2009.002F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 535.609992][ T5712] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.648470][ T5712] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 535.671936][ T5712] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 535.691760][ T5712] usb 5-1: Manufacturer: syz [ 535.702898][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 535.710999][ T5712] usb 5-1: SerialNumber: syz [ 535.872447][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 535.903294][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 535.934251][ T24] usb 3-1: config 0 has no interface number 0 [ 535.973391][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 535.992423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 536.010992][ T5712] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 536.019457][ T5737] usb 1-1: USB disconnect, device number 86 [ 536.034640][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 536.049476][ T5712] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input67 [ 536.069932][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.096889][ T24] usb 3-1: Product: syz [ 536.106836][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.113907][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.120955][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.128038][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.135086][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.142105][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.149212][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.156264][ C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 536.163085][ C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 536.183869][ T24] usb 3-1: Manufacturer: syz [ 536.192137][ T24] usb 3-1: SerialNumber: syz [ 536.211197][ T5712] usb 5-1: USB disconnect, device number 76 [ 536.226364][ T24] usb 3-1: config 0 descriptor?? [ 536.357718][ T5737] usb 2-1: USB disconnect, device number 80 [ 536.556722][T14496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.674981][ T5705] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 536.852685][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 536.864265][ T5705] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 536.894524][ T5705] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 536.956951][ T5705] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 536.982049][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.007010][ T5705] usb 4-1: Product: syz [ 537.017760][ T5705] usb 4-1: Manufacturer: syz [ 537.035187][ T5705] usb 4-1: SerialNumber: syz [ 537.059657][ T5705] usb 4-1: config 0 descriptor?? [ 537.326173][ T5705] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 537.345411][ T5705] gspca_sunplus: reg_r err -32 [ 537.762528][ T5712] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 537.889463][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 537.917542][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 537.927682][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 537.960216][ T5712] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 537.971818][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 537.995563][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.007316][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 538.037332][ T5712] usb 2-1: config 0 has no interface number 0 [ 538.051803][ T24] usb 3-1: USB disconnect, device number 85 [ 538.066236][ T5712] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.091798][ T5712] usb 2-1: config 0 interface 12 has no altsetting 0 [ 538.106699][ T5712] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 538.122637][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.132927][ T5712] usb 2-1: Product: syz [ 538.137451][ T5712] usb 2-1: Manufacturer: syz [ 538.143106][ T5712] usb 2-1: SerialNumber: syz [ 538.166097][ T5712] usb 2-1: config 0 descriptor?? [ 538.197242][ T5712] f81534 2-1:0.12: required endpoints missing [ 538.474431][ T5705] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 539.292463][ T5705] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 539.354537][ T4942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.362196][ T4942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.369708][ T4942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.380524][ T4942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.393411][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.469885][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.475796][ T24] usb 4-1: USB disconnect, device number 94 [ 539.509432][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.528440][T13379] bond2: (slave syz_tun): Releasing backup interface [ 539.536071][ T5705] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 539.577655][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.620368][ T5705] usb 5-1: config 0 descriptor?? [ 539.935819][T14533] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.944059][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.951735][T14533] bridge_slave_0: entered allmulticast mode [ 539.960649][T14533] bridge_slave_0: entered promiscuous mode [ 539.969541][T14533] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.977580][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.986239][T14533] bridge_slave_1: entered allmulticast mode [ 539.994627][T14533] bridge_slave_1: entered promiscuous mode [ 540.027814][T14533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.040159][T14533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.070951][T14533] team0: Port device team_slave_0 added [ 540.079332][T14533] team0: Port device team_slave_1 added [ 540.107558][T14533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.114735][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.141201][T14533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.154575][T14533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.161709][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.189244][T14533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.236902][T14533] hsr_slave_0: entered promiscuous mode [ 540.244147][T14533] hsr_slave_1: entered promiscuous mode [ 540.250652][T14533] debugfs: 'hsr0' already exists in 'hsr' [ 540.256985][T14533] Cannot create hsr debugfs directory [ 540.270231][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 540.280882][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 540.291664][ T5705] usb 5-1: USB disconnect, device number 77 [ 540.590059][ T5705] usb 2-1: USB disconnect, device number 81 [ 540.730231][T14533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.746693][T14533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.763155][T14533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.784182][T14533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.798621][T14533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.833795][T14533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.861191][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 540.879398][T14533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.927652][T14533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.002742][ T5705] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 541.094272][T14533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.139986][T14533] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.183848][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 541.199810][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.203644][ T5630] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 541.207115][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.232507][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.239700][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.247949][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.278888][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 541.298012][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 541.317777][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.328496][ T5705] usb 2-1: config 0 descriptor?? [ 541.414210][T14533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.454775][T14533] veth0_vlan: entered promiscuous mode [ 541.462581][ T4942] Bluetooth: hci3: command tx timeout [ 541.463285][ T5630] usb 4-1: Using ep0 maxpacket: 32 [ 541.476593][T14533] veth1_vlan: entered promiscuous mode [ 541.486466][ T5630] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 541.497176][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.509296][ T5630] usb 4-1: Product: syz [ 541.514742][ T5630] usb 4-1: Manufacturer: syz [ 541.523352][T14533] veth0_macvtap: entered promiscuous mode [ 541.530554][ T5630] usb 4-1: SerialNumber: syz [ 541.538366][T14533] veth1_macvtap: entered promiscuous mode [ 541.557205][T14533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.567481][ T5630] usb 4-1: config 0 descriptor?? [ 541.581690][ T5630] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 541.586256][T14533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.597076][ T5630] dvb-usb: bulk message failed: -22 (4/0) [ 541.605348][ T5630] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.618288][ T5698] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 541.626980][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.637010][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.638856][ T5630] dvb-usb: bulk message failed: -22 (5/0) [ 541.653703][ T5630] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.668929][ T5630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.674802][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.681799][ T5630] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 541.698180][ T5630] usb 4-1: media controller created [ 541.704360][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.732239][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.756184][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.767677][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.783868][ T5630] usb 4-1: selecting invalid altsetting 3 [ 541.790584][ T5630] ttusb2: set interface to alts=3 failed [ 541.798443][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 541.806939][ T5698] usb 5-1: config 250 has an invalid interface number: 230 but max is 0 [ 541.832671][ T5698] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 541.853374][ T5698] usb 5-1: config 250 has no interface number 0 [ 541.860463][ T5698] usb 5-1: config 250 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.883200][ T5630] DVB: Unable to find symbol tda10086_attach() [ 541.903313][ T5698] usb 5-1: config 250 interface 230 has no altsetting 0 [ 541.914853][ T5630] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 541.935810][ T5698] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 541.955625][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.969923][ T5630] dvb-usb: bulk message failed: -22 (4/0) [ 541.988800][ T5630] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 542.001212][ T5698] usb 5-1: Product: syz [ 542.011012][ T5698] usb 5-1: Manufacturer: syz [ 542.020844][ T5698] usb 5-1: SerialNumber: syz [ 542.027118][ T5630] dvb-usb: bulk message failed: -22 (5/0) [ 542.041876][ T5630] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 542.062527][ T5630] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 542.085506][ T5630] usb 4-1: USB disconnect, device number 95 [ 542.099363][ T5849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.127370][ T5630] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 542.160086][ T5849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.186263][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 542.204360][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 542.225477][ T5705] usb 2-1: USB disconnect, device number 82 [ 542.354556][T14580] input: syz0 as /devices/virtual/input/input69 [ 542.400492][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 542.488007][T14580] ipvlan3: entered allmulticast mode [ 542.559824][T14580] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 542.582681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.676744][T14600] tipc: New replicast peer: 255.255.255.255 [ 542.697313][T14600] tipc: Enabled bearer , priority 10 [ 542.945809][ T5698] ums-usbat 5-1:250.230: USB Mass Storage device detected [ 542.987574][ T5698] ums-usbat 5-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 543.006419][T14608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.107002][ T5698] usb 5-1: USB disconnect, device number 78 [ 543.423071][ T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 543.542672][ T4942] Bluetooth: hci3: command tx timeout [ 543.622984][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 543.654048][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.721670][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.773723][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.802528][ T5737] tipc: Node number set to 1200381746 [ 543.814517][ T24] usb 1-1: config 0 descriptor?? [ 544.012160][T14614] netlink: 'syz.4.2986': attribute type 1 has an invalid length. [ 544.218553][T14614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.433440][T14619] bond6 (unregistering): Released all slaves [ 544.566224][T14624] syzkaller0: entered promiscuous mode [ 544.585379][T14624] syzkaller0: entered allmulticast mode [ 544.621924][T14625] tipc: Enabled bearer , priority 0 [ 544.647334][T14616] tipc: Resetting bearer [ 544.675172][T14616] tipc: Disabling bearer [ 544.943101][ T5737] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 545.125968][ T5737] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 545.179195][ T5737] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 545.236626][ T5737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 545.262551][ T808] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 545.277997][ T5737] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 545.312533][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 545.360865][ T5737] usb 4-1: Product: syz [ 545.379492][T14641] xt_hashlimit: size too large, truncated to 1048576 [ 545.393147][ T5737] usb 4-1: Manufacturer: syz [ 545.427880][ T5737] usb 4-1: SerialNumber: syz [ 545.459928][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 545.490111][ T5737] usb 4-1: config 0 descriptor?? [ 545.506812][ T808] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 545.533269][ T5737] usb 4-1: selecting invalid altsetting 0 [ 545.539864][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.597766][ T808] usb 3-1: Product: syz [ 545.622725][ T4942] Bluetooth: hci3: command tx timeout [ 545.679226][ T808] usb 3-1: Manufacturer: syz [ 545.744119][ T808] usb 3-1: SerialNumber: syz [ 545.761380][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.795063][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.849622][T14629] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 545.879616][ T5737] usb 4-1: USB disconnect, device number 96 [ 545.886386][ T808] usb 3-1: config 0 descriptor?? [ 545.915726][ T808] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 545.964765][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 545.971786][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 545.997941][ T8535] udevd[8535]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.063679][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 546.084405][ T24] usb 1-1: string descriptor 0 read error: -71 [ 546.094982][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 546.119769][ T24] usb 1-1: USB disconnect, device number 87 [ 546.178821][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.281578][ T808] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 546.331393][ T808] usb 3-1: media controller created [ 546.386280][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.456506][ T808] usb 3-1: selecting invalid altsetting 3 [ 546.484419][ T808] ttusb2: set interface to alts=3 failed [ 546.601195][ T808] DVB: Unable to find symbol tda10086_attach() [ 546.608181][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 546.628627][ T808] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 546.650750][ T808] dvb-usb: bulk message failed: -22 (4/0) [ 546.674990][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 546.738946][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 546.772099][ T808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 546.783108][ T5737] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 546.802597][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 546.822301][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.837651][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 546.863992][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 546.886632][ T808] usb 3-1: USB disconnect, device number 86 [ 546.905795][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 546.944907][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.975895][ T5737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.997018][ T24] usb 1-1: config 0 descriptor?? [ 547.003162][ T808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 547.017982][ T5737] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.068317][ T5737] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 547.077815][ T9599] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 547.105105][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 547.131818][ T5737] usb 4-1: Product: syz [ 547.148495][ T5737] usb 4-1: Manufacturer: syz [ 547.167332][ T5737] usb 4-1: SerialNumber: syz [ 547.244511][ T9599] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.273845][ T9599] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 547.300919][ T9599] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.330786][ T9599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.360692][T14649] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 547.419042][ T5630] usb 4-1: USB disconnect, device number 97 [ 547.458352][ T9599] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.678146][T14649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.704587][ T4942] Bluetooth: hci3: command tx timeout [ 547.753961][T14649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.764770][T14649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.874022][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 547.890056][ T9599] usb 5-1: USB disconnect, device number 79 [ 547.904943][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 547.947450][ T24] usb 1-1: USB disconnect, device number 88 [ 548.255699][T14664] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 548.324246][T14664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.415295][T14664] bond2 (unregistering): Released all slaves [ 548.484157][ T5849] bond1: (slave syz_tun): link status definitely down, disabling slave [ 549.183640][ T5630] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 549.262501][ T5698] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 549.384049][ T5630] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 549.458561][ T5630] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 549.473895][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 549.479524][ T5630] usb 3-1: config 0 interface 0 has no altsetting 0 [ 549.490062][ T5698] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 549.500341][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.511015][ T5698] usb 2-1: Product: syz [ 549.517204][ T5630] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.531764][ T5698] usb 2-1: Manufacturer: syz [ 549.585784][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.604627][ T5698] usb 2-1: SerialNumber: syz [ 549.666329][ T5698] usb 2-1: config 0 descriptor?? [ 549.672128][ T5630] usb 3-1: Product: syz [ 549.682741][ T5630] usb 3-1: Manufacturer: syz [ 549.689399][ T5698] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 549.697724][ T5630] usb 3-1: SerialNumber: syz [ 549.702604][ T5698] dvb-usb: bulk message failed: -22 (4/0) [ 549.714258][ T5630] usb 3-1: config 0 descriptor?? [ 549.720588][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 549.734494][ T5630] usb 3-1: selecting invalid altsetting 0 [ 549.749540][ T5698] dvb-usb: bulk message failed: -22 (5/0) [ 549.760211][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 549.833342][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 549.886727][ T5698] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 549.954992][ T5698] usb 2-1: media controller created [ 549.986482][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.013555][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.058803][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.084913][ T9599] usb 3-1: USB disconnect, device number 87 [ 550.201234][ T5698] usb 2-1: selecting invalid altsetting 3 [ 550.222060][ T5698] ttusb2: set interface to alts=3 failed [ 550.321229][ T5698] DVB: Unable to find symbol tda10086_attach() [ 550.336596][ T5698] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 550.365118][ T5698] dvb-usb: bulk message failed: -22 (4/0) [ 550.381641][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 550.409599][ T5698] dvb-usb: bulk message failed: -22 (5/0) [ 550.425498][ T5698] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 550.462499][ T9599] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 550.476868][ T5698] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 550.531543][T14693] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3009'. [ 550.546604][T14693] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3009'. [ 550.562304][ T5698] usb 2-1: USB disconnect, device number 83 [ 550.600033][T14693] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3009'. [ 550.655386][ T9599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.689141][ T5698] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 550.735203][ T9599] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.775686][ T9599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 550.807663][ T9599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 550.850093][ T9599] usb 3-1: Product: syz [ 550.874020][ T9599] usb 3-1: Manufacturer: syz [ 550.900981][ T9599] usb 3-1: SerialNumber: syz [ 550.954608][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 550.954629][ T29] audit: type=1326 audit(1782036984.695:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14701 comm="syz.0.3011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454a19ce59 code=0x0 [ 551.169414][ T5698] usb 3-1: USB disconnect, device number 88 [ 552.086572][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 552.172478][ T5630] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 552.362835][ T5630] usb 3-1: Using ep0 maxpacket: 16 [ 552.383173][ T5630] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.426374][ T5630] usb 3-1: config 0 interface 0 has no altsetting 0 [ 552.437640][ T5630] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 552.448586][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.460335][ T5630] usb 3-1: config 0 descriptor?? [ 552.618580][T14746] fuse: Unknown parameter 'group_id00000000000000000000' [ 552.832564][ T5698] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 552.995310][ T5698] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 553.023619][ T5698] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.054464][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0 [ 553.071858][ T5698] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 553.088049][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.124605][ T5698] usb 2-1: config 0 descriptor?? [ 553.155893][T14745] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 553.290847][ T5630] usbhid 3-1:0.0: can't add hid device: -71 [ 553.316270][ T5630] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 553.346242][ T5630] usb 3-1: USB disconnect, device number 89 [ 553.411013][T14740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.424502][T14740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.809830][T14756] fuse: Unknown parameter 'user_id00000000000000000000' [ 553.831279][ T9599] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 553.992461][ T9599] usb 4-1: Using ep0 maxpacket: 8 [ 554.004249][ T9599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.017399][ T9599] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 554.034852][ T9599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.050125][ T9599] usb 4-1: config 0 descriptor?? [ 554.112693][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 554.139885][T14765] tipc: Enabling of bearer rejected, already enabled [ 554.269400][ T9599] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 554.294293][ T24] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 554.322477][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 554.338744][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.355082][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.379503][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 554.397113][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.415682][ T10] usb 1-1: config 0 descriptor?? [ 554.474964][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 554.532495][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 554.547720][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 554.557546][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 554.588855][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 554.602505][ T24] usb 3-1: Product: syz [ 554.607069][ T24] usb 3-1: Manufacturer: syz [ 554.612174][ T24] usb 3-1: SerialNumber: syz [ 554.623213][ T24] usb 3-1: config 0 descriptor?? [ 554.634628][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.657586][ T24] usb 3-1: selecting invalid altsetting 0 [ 554.687934][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.986646][T14764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.016072][T14764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.056774][ T10] usb 3-1: USB disconnect, device number 90 [ 555.499507][ T5698] usbhid 2-1:0.0: can't add hid device: -71 [ 555.537952][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 555.574742][ T5698] usb 2-1: USB disconnect, device number 84 [ 555.625099][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 555.697360][T14777] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3027'. [ 555.831123][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.867306][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 555.916681][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 555.952683][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 555.971869][ T10] usb 3-1: Product: syz [ 555.990089][ T10] usb 3-1: Manufacturer: syz [ 556.003857][ T10] usb 3-1: SerialNumber: syz [ 556.184963][ T5698] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 556.242066][ T10] usb 3-1: USB disconnect, device number 91 [ 556.252506][ T5705] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 556.344303][ T5698] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.358633][ T5698] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.373601][ T5698] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 556.388340][ T5698] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 556.402541][ T5698] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 556.412049][ T5698] usb 2-1: Manufacturer: syz [ 556.420133][ T5698] usb 2-1: SerialNumber: syz [ 556.443044][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 556.453413][ T5705] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.467876][ T5705] usb 5-1: config 0 interface 0 has no altsetting 0 [ 556.479240][ T5705] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 556.489892][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.502758][ T5705] usb 5-1: config 0 descriptor?? [ 556.608951][ T10] usb 4-1: USB disconnect, device number 98 [ 556.659387][ T5698] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 556.686958][ T5698] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input70 [ 556.702340][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.709422][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.716450][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.723585][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.730766][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.738897][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.746500][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.754901][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 556.761771][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 556.777995][ T5698] usb 2-1: USB disconnect, device number 85 [ 557.068856][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 557.083127][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 557.117616][ T5705] usb 5-1: USB disconnect, device number 80 [ 557.189750][ T10] usb 1-1: USB disconnect, device number 89 [ 557.225642][ T5698] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 557.256457][T14793] warn_alloc: 1 callbacks suppressed [ 557.256476][T14793] syz.2.3033: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 557.294066][T14793] CPU: 0 UID: 0 PID: 14793 Comm: syz.2.3033 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.294103][T14793] Tainted: [L]=SOFTLOCKUP [ 557.294112][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.294127][T14793] Call Trace: [ 557.294136][T14793] [ 557.294150][T14793] dump_stack_lvl+0xe8/0x150 [ 557.294184][T14793] warn_alloc+0x24c/0x270 [ 557.294220][T14793] ? __se_sys_ioctl+0x47/0x170 [ 557.294247][T14793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.294273][T14793] ? __pfx_warn_alloc+0x10/0x10 [ 557.294314][T14793] __vmalloc_node_range_noprof+0x12c/0x1730 [ 557.294346][T14793] ? __mutex_trylock_common+0x15f/0x270 [ 557.294376][T14793] ? __pfx___mutex_trylock_common+0x10/0x10 [ 557.294406][T14793] ? trace_contention_end+0x3d/0x140 [ 557.294434][T14793] ? __mutex_lock+0x30d/0x1550 [ 557.294457][T14793] ? lock_release+0x4b/0x3c0 [ 557.294476][T14793] ? kfree+0x1c5/0x640 [ 557.294504][T14793] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 557.294552][T14793] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 557.294585][T14793] ? tomoyo_path_number_perm+0x219/0x5f0 [ 557.294620][T14793] ? dvb_demux_do_ioctl+0x320/0x540 [ 557.294654][T14793] ? __pfx___mutex_lock+0x10/0x10 [ 557.294676][T14793] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 557.294707][T14793] vmalloc_noprof+0xb2/0xe0 [ 557.294737][T14793] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 557.294768][T14793] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 557.294801][T14793] dvb_demux_do_ioctl+0x45d/0x540 [ 557.294833][T14793] dvb_usercopy+0x199/0x2e0 [ 557.294858][T14793] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 557.294887][T14793] ? __pfx_dvb_usercopy+0x10/0x10 [ 557.294918][T14793] ? __fget_files+0x3a2/0x420 [ 557.294950][T14793] ? __fget_files+0x2a/0x420 [ 557.294984][T14793] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 557.295013][T14793] dvb_demux_ioctl+0x29/0x40 [ 557.295041][T14793] __se_sys_ioctl+0xfc/0x170 [ 557.295066][T14793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.295090][T14793] do_syscall_64+0x174/0x580 [ 557.295111][T14793] ? trace_irq_disable+0x3b/0x140 [ 557.295144][T14793] ? clear_bhb_loop+0x40/0x90 [ 557.295170][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.295192][T14793] RIP: 0033:0x7fba8bf9ce59 [ 557.295213][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.295234][T14793] RSP: 002b:00007fba8cde5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.295258][T14793] RAX: ffffffffffffffda RBX: 00007fba8c215fa0 RCX: 00007fba8bf9ce59 [ 557.295276][T14793] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 557.295292][T14793] RBP: 00007fba8c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 557.295306][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.295320][T14793] R13: 00007fba8c216038 R14: 00007fba8c215fa0 R15: 00007fba8c33fa48 [ 557.295344][T14793] [ 557.296564][T14793] Mem-Info: [ 557.613199][T14793] active_anon:22513 inactive_anon:10 isolated_anon:0 [ 557.613199][T14793] active_file:1 inactive_file:61088 isolated_file:0 [ 557.613199][T14793] unevictable:769 dirty:136 writeback:19 [ 557.613199][T14793] slab_reclaimable:6687 slab_unreclaimable:106621 [ 557.613199][T14793] mapped:40161 shmem:17809 pagetables:1435 [ 557.613199][T14793] sec_pagetables:0 bounce:0 [ 557.613199][T14793] kernel_misc_reclaimable:0 [ 557.613199][T14793] free:1277160 free_pcp:10556 free_cma:0 [ 557.699796][ T5698] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.722500][ T5698] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.734216][ T5698] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.744849][T14793] Node 0 active_anon:90852kB inactive_anon:40kB active_file:4kB inactive_file:244152kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:165544kB dirty:544kB writeback:76kB shmem:70300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14260kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 557.801459][ T5698] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 557.831900][T14793] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 557.872259][ T5698] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 557.881761][ T5698] usb 2-1: Manufacturer: syz [ 557.888079][ T5698] usb 2-1: SerialNumber: syz [ 557.954811][T14793] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.032599][T14793] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 558.070897][T14793] Node 0 DMA32 free:1136116kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82884kB inactive_anon:40kB active_file:4kB inactive_file:244160kB unevictable:1540kB writepending:676kB zspages:0kB present:3129332kB managed:2552000kB mlocked:4kB bounce:0kB free_pcp:56380kB local_pcp:20392kB free_cma:0kB [ 558.119935][T14800] fuse: Unknown parameter 'user_id00000000000000000000' [ 558.141207][ T5698] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 558.153842][ T5698] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input71 [ 558.180270][T14793] lowmem_reserve[]: 0 0 0 0 0 [ 558.188011][T14793] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 558.219645][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.226734][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.233839][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.240967][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.248373][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.255474][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.262571][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.272286][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 558.279147][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 558.294049][ T5698] usb 2-1: USB disconnect, device number 86 [ 558.301485][T14793] lowmem_reserve[]: 0 0 0 0 0 [ 558.306432][T14793] Node 1 Normal free:3947092kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.340526][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 558.446236][T14793] lowmem_reserve[]: 0 0 0 0 0 [ 558.460268][T14793] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.494852][T14793] Node 0 DMA32: 1252*4kB (UE) 475*8kB (UE) 158*16kB (UME) 111*32kB (UME) 148*64kB (UME) 226*128kB (UME) 147*256kB (UME) 66*512kB (UME) 24*1024kB (UM) 26*2048kB (UM) 227*4096kB (UM) = 1132328kB [ 558.532677][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 558.550202][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.569007][T14793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 558.585425][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.598734][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 558.619163][T14793] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 12*16kB (UM) 8*32kB (UM) 7*64kB (UM) 7*128kB (UM) 3*256kB (M) 2*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 961*4096kB (M) = 3947092kB [ 558.639890][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.665087][ T10] usb 4-1: config 0 descriptor?? [ 558.674576][T14793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.705423][T14793] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 558.728339][T14793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.751734][T14793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 558.798227][T14793] 80155 total pagecache pages [ 558.833792][T14793] 1 pages in swap cache [ 558.855655][T14793] Free swap = 124992kB [ 558.871557][T14793] Total swap = 124996kB [ 558.890082][T14793] 2097051 pages RAM [ 558.910363][T14812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3039'. [ 558.919757][T14793] 0 pages HighMem/MovableOnly [ 558.930114][T14793] 427275 pages reserved [ 558.938910][T14793] 0 pages cma reserved [ 559.311458][T14820] syzkaller0: entered promiscuous mode [ 559.347314][T14820] syzkaller0: entered allmulticast mode [ 559.391236][T14830] tipc: Enabled bearer , priority 0 [ 559.455944][T14819] tipc: Resetting bearer [ 559.520752][T14819] tipc: Disabling bearer [ 559.556053][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 559.576964][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 559.616938][ T10] usb 4-1: USB disconnect, device number 99 [ 560.122467][ T9599] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 560.282504][ T9599] usb 1-1: Using ep0 maxpacket: 16 [ 560.299351][ T9599] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.355465][ T9599] usb 1-1: config 0 interface 0 has no altsetting 0 [ 560.368750][ T9599] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 560.381194][ T808] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 560.393059][ T9599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.415958][ T9599] usb 1-1: config 0 descriptor?? [ 560.552718][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 560.569157][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.597651][ T808] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.612812][ T808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 560.639117][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.677577][ T808] usb 4-1: config 0 descriptor?? [ 560.728713][ T9599] usbhid 1-1:0.0: can't add hid device: -71 [ 560.743536][ T9599] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 560.775107][ T9599] usb 1-1: USB disconnect, device number 90 [ 561.602463][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 561.786536][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 95 [ 561.857120][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 561.910027][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.971963][ T10] usb 5-1: config 0 descriptor?? [ 562.009689][T14873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.330924][ T10] ath6kl: Failed to submit usb control message: -71 [ 562.372726][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 562.415460][ T10] ath6kl: Unable to send get target info: -71 [ 562.446671][ T10] ath6kl: Failed to init ath6kl core: -71 [ 562.475210][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 562.509676][ T10] usb 5-1: USB disconnect, device number 81 [ 562.973403][T14894] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3058'. [ 563.013364][T14894] pimreg3: entered allmulticast mode [ 563.064273][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.074120][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.452533][ T9599] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 563.514195][ T10] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 563.593216][ T808] usb 4-1: USB disconnect, device number 100 [ 563.612472][ T9599] usb 5-1: Using ep0 maxpacket: 16 [ 563.644369][ T9599] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.684335][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.711443][ T9599] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.751823][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 563.762084][ T9599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.797921][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 563.820795][ T9599] usb 5-1: config 0 descriptor?? [ 563.831219][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.863638][ T10] usb 2-1: config 0 descriptor?? [ 564.095566][ T24] usb 2-1: USB disconnect, device number 87 [ 564.217858][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 564.382453][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 564.482464][ T808] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 564.542558][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 564.550415][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 564.559551][ T10] usb 4-1: config 0 has no interface number 0 [ 564.568998][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 564.584975][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 564.592801][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 564.601858][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.612188][ T10] usb 4-1: Product: syz [ 564.618981][ T10] usb 4-1: Manufacturer: syz [ 564.624674][ T10] usb 4-1: SerialNumber: syz [ 564.644133][ T808] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 564.646345][ T10] usb 4-1: config 0 descriptor?? [ 564.663374][ T808] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 564.675310][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.717795][ T808] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 564.727194][ T808] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 564.739110][ T808] usb 1-1: Product: syz [ 564.770609][ T808] usb 1-1: Manufacturer: syz [ 564.787746][ T808] usb 1-1: SerialNumber: syz [ 564.811568][ T808] usb 1-1: config 0 descriptor?? [ 564.821283][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.842100][T14917] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 564.859739][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.878500][ T808] usb 1-1: selecting invalid altsetting 0 [ 564.889933][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.912589][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.922743][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.951585][ T24] usb 3-1: config 0 descriptor?? [ 564.974455][T14917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.992305][T14919] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 565.216263][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.241871][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.295415][ T808] usb 1-1: USB disconnect, device number 91 [ 565.401957][ T24] hid_parser_main: 91 callbacks suppressed [ 565.401990][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.441811][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.466053][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.496100][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.523507][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.569255][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.600418][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.625150][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.646274][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.655191][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 565.672935][ T24] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 565.697186][ T24] usb 3-1: USB disconnect, device number 92 [ 565.760583][T14928] fido_id[14928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 565.872555][ T808] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 566.025170][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.040989][ T808] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.057543][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 566.067007][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 566.076396][ T9599] usb 5-1: string descriptor 0 read error: -71 [ 566.083869][ T808] usb 1-1: Product: syz [ 566.092741][ T808] usb 1-1: Manufacturer: syz [ 566.100952][ T9599] usb 5-1: USB disconnect, device number 82 [ 566.110815][ T808] usb 1-1: SerialNumber: syz [ 566.232073][T14932] syzkaller0: entered promiscuous mode [ 566.239085][T14932] syzkaller0: entered allmulticast mode [ 566.352918][ T9599] usb 1-1: USB disconnect, device number 92 [ 566.399147][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 566.409913][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 566.418520][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 566.426378][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 566.439609][ T10] usb 4-1: USB disconnect, device number 101 [ 566.443122][ T808] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 566.624803][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.635807][ T808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 566.645651][ T808] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 566.655796][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.667177][ T808] usb 3-1: config 0 descriptor?? [ 566.676861][ T808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 566.689322][ T808] dvb-usb: bulk message failed: -22 (3/0) [ 566.705914][ T808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 566.726518][ T808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 566.734253][ T808] usb 3-1: media controller created [ 566.742964][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.757770][ T808] dvb-usb: bulk message failed: -22 (6/0) [ 566.772172][ T808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 566.786637][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 566.804149][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 566.812508][ T808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 566.918507][T14930] dibusb: i2c wr: len=101 is too big! [ 566.918507][T14930] [ 566.938933][ T5698] usb 3-1: USB disconnect, device number 93 [ 566.967383][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3076'. [ 567.071600][ T5698] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 567.262519][ T5705] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 567.362616][ T808] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 567.412546][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 567.419489][ T5705] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 567.429517][ T5705] usb 4-1: config 0 has no interface number 0 [ 567.435863][ T5705] usb 4-1: config 0 interface 12 has no altsetting 0 [ 567.444841][ T5705] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 567.454272][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.462861][ T5705] usb 4-1: Product: syz [ 567.467338][ T5705] usb 4-1: Manufacturer: syz [ 567.472007][ T5705] usb 4-1: SerialNumber: syz [ 567.478469][ T5705] usb 4-1: config 0 descriptor?? [ 567.525184][ T808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.539007][ T808] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 567.724646][ T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.734344][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.743976][ T808] usb 5-1: Product: syz [ 567.748695][ T808] usb 5-1: Manufacturer: syz [ 567.756403][ T808] usb 5-1: SerialNumber: syz [ 567.772368][ T808] cdc_mbim 5-1:1.0: skipping garbage [ 567.902586][ T9599] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 567.995620][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 568.062633][ T9599] usb 1-1: Using ep0 maxpacket: 16 [ 568.070151][ T9599] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 568.079658][ T9599] usb 1-1: config 1 has no interface number 0 [ 568.086376][ T9599] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 568.100736][ T9599] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 568.115309][ T9599] usb 1-1: config 1 interface 105 has no altsetting 0 [ 568.125158][ T9599] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 568.134716][ T9599] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 568.143702][ T9599] usb 1-1: Product: syz [ 568.149391][ T9599] usb 1-1: Manufacturer: syz [ 568.155530][ T9599] usb 1-1: SerialNumber: syz [ 568.162937][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 568.166604][T14959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.176274][T14959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.188383][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.213869][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.224375][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 568.234506][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.245388][ T10] usb 3-1: config 0 descriptor?? [ 568.609525][T14959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.617462][T14959] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 568.674954][ T10] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 568.715070][ T5705] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 568.734524][ T5705] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 568.766140][ T5705] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 568.785926][ T5705] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 568.819527][ T5705] usb 4-1: USB disconnect, device number 102 [ 568.836073][ T9599] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3 [ 568.870418][ T9599] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 569.052630][ T5705] usb 1-1: USB disconnect, device number 93 [ 569.111798][T14961] input: syz1 as /devices/virtual/input/input73 [ 569.199128][ T9599] usb 3-1: USB disconnect, device number 94 [ 569.320569][T14996] netlink: 'syz.2.3086': attribute type 1 has an invalid length. [ 569.343715][T14996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.365020][T14996] bond1: (slave syz_tun): Releasing backup interface [ 569.382775][T14996] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 569.471217][ T808] cdc_mbim 5-1:1.0: bind() failure [ 569.486709][ T808] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 569.493957][ T808] cdc_ncm 5-1:1.1: bind() failure [ 569.505189][ T808] usb 5-1: USB disconnect, device number 83 [ 569.962539][ T808] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 570.034541][T15009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3090'. [ 570.077488][T15009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3090'. [ 570.122589][T15009] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3090'. [ 570.161577][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 570.179682][ T808] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 570.190707][ T808] usb 1-1: config 0 has no interface number 0 [ 570.198945][ T808] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.213946][ T808] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.228163][ T808] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 570.249113][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.272913][ T808] usb 1-1: config 0 descriptor?? [ 570.920146][ T808] usbhid 1-1:0.3: can't add hid device: -71 [ 570.934111][ T808] usbhid 1-1:0.3: probe with driver usbhid failed with error -71 [ 570.968058][ T808] usb 1-1: USB disconnect, device number 94 [ 571.238112][T15030] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3099'. [ 571.252919][ T9599] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 571.322635][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 571.413051][ T9599] usb 3-1: Using ep0 maxpacket: 16 [ 571.420338][ T9599] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.432147][ T9599] usb 3-1: config 0 interface 0 has no altsetting 0 [ 571.439248][ T9599] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 571.449256][ T9599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.470074][ T9599] usb 3-1: config 0 descriptor?? [ 571.495629][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.536453][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 571.572185][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 571.592559][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 571.609764][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.637664][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3102'. [ 571.647488][T15028] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 571.665911][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.849053][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.878339][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 571.914455][ T9599] nzxt-smart2 0003:1E71:2009.0032: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 571.920271][T15028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.957522][T15028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.976559][T15028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.014126][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.042237][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.058356][ T5630] usb 2-1: USB disconnect, device number 88 [ 572.066191][ T10] usb 5-1: Product: syz [ 572.076354][ T10] usb 5-1: Manufacturer: syz [ 572.081627][ T10] usb 5-1: SerialNumber: syz [ 572.171625][ T10] cdc_mbim 5-1:1.0: skipping garbage [ 572.336516][T15026] input: syz1 as /devices/virtual/input/input74 [ 572.412553][ T9599] usb 3-1: USB disconnect, device number 95 [ 572.884190][ T9599] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 572.992697][ T5630] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 573.062616][ T9599] usb 1-1: Using ep0 maxpacket: 16 [ 573.069997][ T9599] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.081950][ T9599] usb 1-1: config 0 interface 0 has no altsetting 0 [ 573.089689][ T9599] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 573.099709][ T9599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.111910][ T9599] usb 1-1: config 0 descriptor?? [ 573.152440][ T5630] usb 2-1: Using ep0 maxpacket: 32 [ 573.159712][ T5630] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 573.169735][ T5630] usb 2-1: config 0 has no interface number 0 [ 573.176551][ T5630] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.187096][ T5630] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 573.197437][ T5630] usb 2-1: config 0 interface 12 has no altsetting 0 [ 573.207159][ T5630] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 573.216834][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.225044][ T5630] usb 2-1: Product: syz [ 573.229380][ T5630] usb 2-1: Manufacturer: syz [ 573.234557][ T5630] usb 2-1: SerialNumber: syz [ 573.241730][ T5630] usb 2-1: config 0 descriptor?? [ 573.250248][ T5630] f81534 2-1:0.12: unsupported endpoint max packet size [ 573.633637][ T9599] usbhid 1-1:0.0: can't add hid device: -71 [ 573.648442][ T9599] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 573.669706][ T9599] usb 1-1: USB disconnect, device number 95 [ 573.932096][T15071] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3110'. [ 573.955271][T15071] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3110'. [ 573.974708][T15071] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3110'. [ 574.387400][ T10] cdc_mbim 5-1:1.0: bind() failure [ 574.441089][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 574.480072][ T10] cdc_ncm 5-1:1.1: bind() failure [ 574.549736][ T10] usb 5-1: USB disconnect, device number 84 [ 575.019465][T15086] tipc: Enabling of bearer rejected, already enabled [ 575.802537][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 575.894186][ T5630] usb 2-1: USB disconnect, device number 89 [ 576.003733][ T10] usb 1-1: device descriptor read/64, error -71 [ 576.162718][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 576.268840][ T10] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 576.365001][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 95 [ 576.432767][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 576.442170][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.453378][ T24] usb 5-1: config 0 descriptor?? [ 576.459196][T15103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 576.534577][ T10] usb 1-1: device descriptor read/64, error -71 [ 576.662936][ T10] usb usb1-port1: attempt power cycle [ 576.682692][ T9599] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 576.744923][ T5712] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 576.756366][ T24] ath6kl: Failed to submit usb control message: -71 [ 576.816122][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 576.871659][ T24] ath6kl: Unable to send get target info: -71 [ 576.931237][ T9599] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 576.961366][ T24] ath6kl: Failed to init ath6kl core: -71 [ 576.972822][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.013406][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 577.034123][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 577.054603][ T9599] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 577.074106][ T10] usb 1-1: device descriptor read/8, error -71 [ 577.093481][ T5712] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 577.127854][ T24] usb 5-1: USB disconnect, device number 85 [ 577.139855][ T9599] usb 3-1: config 0 interface 0 has no altsetting 0 [ 577.172833][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.204158][ T9599] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.224330][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.262530][ T9599] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.293466][ T5712] usb 4-1: Product: syz [ 577.303028][ T9599] usb 3-1: Product: syz [ 577.307335][ T5712] usb 4-1: Manufacturer: syz [ 577.320309][ T9599] usb 3-1: Manufacturer: syz [ 577.326413][ T5712] usb 4-1: SerialNumber: syz [ 577.334087][ T9599] usb 3-1: SerialNumber: syz [ 577.378112][ T5712] cdc_mbim 4-1:1.0: skipping garbage [ 577.392725][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 577.407388][ T9599] usb 3-1: config 0 descriptor?? [ 577.466031][ T10] usb 1-1: device descriptor read/8, error -71 [ 577.500394][ T9599] usb 3-1: selecting invalid altsetting 0 [ 577.687251][ T10] usb usb1-port1: unable to enumerate USB device [ 577.800768][T15118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.856568][T15118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.932007][ T10] usb 3-1: USB disconnect, device number 96 [ 578.592513][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 578.775047][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.813893][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 578.863616][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 578.917186][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 578.972457][ T10] usb 3-1: Product: syz [ 578.996758][ T10] usb 3-1: Manufacturer: syz [ 579.028718][ T10] usb 3-1: SerialNumber: syz [ 579.272581][ T5705] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 579.325095][ T808] usb 3-1: USB disconnect, device number 97 [ 579.452485][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 579.475663][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.517807][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.554096][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 579.597061][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.627297][ T5712] cdc_mbim 4-1:1.0: bind() failure [ 579.663696][ T5712] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 579.664175][ T5705] usb 2-1: config 0 descriptor?? [ 579.707226][ T5712] cdc_ncm 4-1:1.1: bind() failure [ 579.757914][ T5712] usb 4-1: USB disconnect, device number 103 [ 579.890226][T15136] syzkaller0: entered promiscuous mode [ 579.899514][T15136] syzkaller0: entered allmulticast mode [ 579.916394][T15136] tipc: Started in network mode [ 579.924547][T15136] tipc: Node identity de32df6eabdd, cluster identity 4711 [ 579.931906][T15136] tipc: Enabled bearer , priority 0 [ 579.938684][T15140] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3125'. [ 579.952192][T15134] tipc: Resetting bearer [ 579.981224][T15134] tipc: Disabling bearer [ 580.041408][T15144] syzkaller0: entered promiscuous mode [ 580.047256][T15144] syzkaller0: entered allmulticast mode [ 580.154318][ T5705] nzxt-smart2 0003:1E71:2009.0033: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 580.272845][T15156] syzkaller0: entered promiscuous mode [ 580.278880][T15156] syzkaller0: entered allmulticast mode [ 580.413696][ T5712] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 580.493988][ T5705] usb 2-1: USB disconnect, device number 90 [ 580.592846][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 580.608860][ T5712] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.632482][ T5712] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.648940][ T5712] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 580.672807][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.693958][ T5712] usb 1-1: config 0 descriptor?? [ 580.761179][T15180] tipc: New replicast peer: 255.255.255.255 [ 580.779959][T15180] tipc: Enabled bearer , priority 10 [ 580.924353][ T5705] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 581.113739][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 581.161260][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.176150][ T5712] nzxt-smart2 0003:1E71:2009.0034: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 581.239591][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 581.268774][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 581.324330][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.390432][ T5705] usb 2-1: config 0 descriptor?? [ 581.624752][ T5712] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 581.652543][T15150] input: syz1 as /devices/virtual/input/input75 [ 581.868206][ T24] usb 1-1: USB disconnect, device number 100 [ 581.875715][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 581.882444][ T5705] nzxt-smart2 0003:1E71:2009.0035: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 581.927265][ T808] tipc: Node number set to 3696749941 [ 581.937974][ T5712] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.032900][ T5712] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 582.055173][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 582.063102][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.141822][ T5712] usb 5-1: config 0 descriptor?? [ 582.321530][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.419466][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 582.446257][T15170] input: syz1 as /devices/virtual/input/input76 [ 582.522524][ T5698] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 582.586522][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.626757][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.635026][ T10] usb 4-1: Product: syz [ 582.640107][ T10] usb 4-1: Manufacturer: syz [ 582.650088][ T10] usb 4-1: SerialNumber: syz [ 582.704852][ T10] cdc_mbim 4-1:1.0: skipping garbage [ 582.714858][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 582.731528][ T9599] usb 2-1: USB disconnect, device number 91 [ 582.756462][ T5698] usb 1-1: config 250 has an invalid interface number: 230 but max is 0 [ 582.809110][ T5698] usb 1-1: config 250 has no interface number 0 [ 582.856558][ T5698] usb 1-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.892976][ T5698] usb 1-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.019042][ T5698] usb 1-1: config 250 interface 230 has no altsetting 0 [ 583.082247][ T5698] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 583.157432][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.210933][ T5698] usb 1-1: Product: syz [ 583.226152][ T5698] usb 1-1: Manufacturer: syz [ 583.246525][ T5698] usb 1-1: SerialNumber: syz [ 583.352664][ T9599] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 583.392556][ T5705] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 583.522703][ T9599] usb 3-1: Using ep0 maxpacket: 32 [ 583.549228][T15196] input: syz0 as /devices/virtual/input/input77 [ 583.573637][ T9599] usb 3-1: config 250 has an invalid interface number: 230 but max is 0 [ 583.600326][ T9599] usb 3-1: config 250 has no interface number 0 [ 583.613743][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 583.623813][ T9599] usb 3-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 583.656343][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'. [ 583.659936][ T9599] usb 3-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 583.686692][ T9599] usb 3-1: config 250 interface 230 has no altsetting 0 [ 583.727150][ T9599] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 583.751423][T15196] ipvlan2: entered allmulticast mode [ 583.757178][ T9599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.767803][T15196] batadv0: entered allmulticast mode [ 583.775556][ T9599] usb 3-1: Product: syz [ 583.780810][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.798877][T15196] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 583.809198][ T9599] usb 3-1: Manufacturer: syz [ 583.815547][ T9599] usb 3-1: SerialNumber: syz [ 583.834263][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 583.886803][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 583.922571][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.976896][ T5705] usb 2-1: config 0 descriptor?? [ 584.004523][ T5698] ums-usbat 1-1:250.230: USB Mass Storage device detected [ 584.069018][ T5698] ums-usbat 1-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 584.093514][T15200] input: syz0 as /devices/virtual/input/input78 [ 584.125875][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 584.164378][ T5698] ums-usbat 1-1:250.230: probe with driver ums-usbat failed with error -5 [ 584.166916][T15200] ipvlan2: entered allmulticast mode [ 584.244811][ T5712] usb 5-1: string descriptor 0 read error: -71 [ 584.256622][T15200] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 584.298799][ T5712] usb 5-1: USB disconnect, device number 86 [ 584.301308][ T5698] usb 1-1: USB disconnect, device number 101 [ 584.601427][ T9599] ums-usbat 3-1:250.230: USB Mass Storage device detected [ 584.611374][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 584.640633][ T9599] ums-usbat 3-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 584.669812][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 584.727558][ T5705] usb 2-1: USB disconnect, device number 92 [ 584.755334][ T9599] ums-usbat 3-1:250.230: probe with driver ums-usbat failed with error -5 [ 584.823068][ T9599] usb 3-1: USB disconnect, device number 98 [ 585.152827][ T5698] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 585.288044][ T10] cdc_mbim 4-1:1.0: bind() failure [ 585.325777][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 585.340453][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 585.351280][ T10] cdc_ncm 4-1:1.1: bind() failure [ 585.362954][ T5698] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.415267][ T10] usb 4-1: USB disconnect, device number 104 [ 585.421542][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 585.469672][ T5698] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 585.525479][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.572128][ T5698] usb 1-1: config 0 descriptor?? [ 585.599902][T15227] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3143'. [ 585.642741][ T9599] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 585.813423][ T9599] usb 3-1: Using ep0 maxpacket: 8 [ 585.831410][ T9599] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.873538][ T9599] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 585.913912][ T9599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.957732][ T9599] usb 3-1: config 0 descriptor?? [ 586.121434][ T5698] nzxt-smart2 0003:1E71:2009.0036: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 586.226823][ T9599] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 586.643719][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.671512][T15214] input: syz1 as /devices/virtual/input/input79 [ 586.778493][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.034689][ T808] usb 1-1: USB disconnect, device number 102 [ 587.532533][ T808] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 587.683768][ T808] usb 1-1: device descriptor read/64, error -71 [ 587.821909][T15267] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3149'. [ 587.932652][ T808] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 588.072483][ T808] usb 1-1: device descriptor read/64, error -71 [ 588.192688][ T808] usb usb1-port1: attempt power cycle [ 588.225239][T13582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.232770][T13582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.241117][T13582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.250920][T13582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.258678][T13582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.440338][ T5698] usb 3-1: USB disconnect, device number 99 [ 588.505312][T10958] syz_tun (unregistering): left allmulticast mode [ 588.526255][T10958] bond6: (slave syz_tun): Removing an active aggregator [ 588.541375][T10958] bond6: (slave syz_tun): Releasing backup interface [ 588.551591][ T808] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 588.602455][T15294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3152'. [ 588.654841][ T808] usb 1-1: device descriptor read/8, error -71 [ 588.760225][T15298] FAULT_INJECTION: forcing a failure. [ 588.760225][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 588.833130][T15298] CPU: 0 UID: 0 PID: 15298 Comm: syz.3.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.833168][T15298] Tainted: [L]=SOFTLOCKUP [ 588.833177][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.833192][T15298] Call Trace: [ 588.833201][T15298] [ 588.833211][T15298] dump_stack_lvl+0xe8/0x150 [ 588.833241][T15298] should_fail_ex+0x40c/0x560 [ 588.833443][T15298] should_failslab+0xa8/0x100 [ 588.833475][T15298] __kvmalloc_node_noprof+0x16e/0x890 [ 588.833498][T15298] ? seq_read_iter+0x1ea/0xca0 [ 588.833526][T15298] ? lock_acquire+0x5f/0x350 [ 588.833548][T15298] seq_read_iter+0x1ea/0xca0 [ 588.833581][T15298] seq_read+0x367/0x480 [ 588.833607][T15298] ? get_pid_task+0x20/0x1f0 [ 588.833639][T15298] ? __pfx_seq_read+0x10/0x10 [ 588.833664][T15298] ? __mutex_trylock_common+0x15f/0x270 [ 588.833703][T15298] ? apparmor_file_permission+0x1f4/0x300 [ 588.833776][T15298] ? __pfx_seq_read+0x10/0x10 [ 588.833800][T15298] proc_reg_read+0x1e9/0x2e0 [ 588.833844][T15298] ? __pfx_proc_reg_read+0x10/0x10 [ 588.833866][T15298] vfs_read+0x213/0xa80 [ 588.833891][T15298] ? __pfx___mutex_lock+0x10/0x10 [ 588.833912][T15298] ? __pfx_vfs_read+0x10/0x10 [ 588.833939][T15298] ? __fget_files+0x3a2/0x420 [ 588.833970][T15298] ? __fget_files+0x2a/0x420 [ 588.834005][T15298] ksys_read+0x150/0x270 [ 588.834029][T15298] ? __pfx_ksys_read+0x10/0x10 [ 588.834053][T15298] ? rcu_is_watching+0x15/0xb0 [ 588.834087][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.834110][T15298] do_syscall_64+0x174/0x580 [ 588.834130][T15298] ? trace_irq_disable+0x3b/0x140 [ 588.834162][T15298] ? clear_bhb_loop+0x40/0x90 [ 588.834185][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.834206][T15298] RIP: 0033:0x7ff92179ce59 [ 588.834225][T15298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.834244][T15298] RSP: 002b:00007ff922721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.834268][T15298] RAX: ffffffffffffffda RBX: 00007ff921a15fa0 RCX: 00007ff92179ce59 [ 588.834285][T15298] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000003 [ 588.834299][T15298] RBP: 00007ff922721090 R08: 0000000000000000 R09: 0000000000000000 [ 588.834314][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.834328][T15298] R13: 00007ff921a16038 R14: 00007ff921a15fa0 R15: 00007ff921b3fa48 [ 588.834353][T15298] [ 589.423789][ T808] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 589.473622][ T808] usb 1-1: device descriptor read/8, error -71 [ 589.522095][T15309] fuse: Unknown parameter '0x0000000000000004' [ 589.587549][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 589.596765][ T808] usb usb1-port1: unable to enumerate USB device [ 589.619594][T15283] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.627201][T15283] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.634603][T15283] bridge_slave_0: entered allmulticast mode [ 589.641871][T15283] bridge_slave_0: entered promiscuous mode [ 589.650613][T15283] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.658082][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.665442][T15283] bridge_slave_1: entered allmulticast mode [ 589.672698][T15283] bridge_slave_1: entered promiscuous mode [ 589.699730][T15283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.713942][T15283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.766824][T15283] team0: Port device team_slave_0 added [ 589.799666][T15283] team0: Port device team_slave_1 added [ 589.861353][T15283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.878009][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.944656][T15283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.974203][T15283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.006328][T15283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.055896][ T5705] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 590.064538][ T5698] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 590.084721][T15283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.172483][T15283] hsr_slave_0: entered promiscuous mode [ 590.190737][T15283] hsr_slave_1: entered promiscuous mode [ 590.205121][T15283] debugfs: 'hsr0' already exists in 'hsr' [ 590.226546][ T5698] usb 3-1: no configurations [ 590.232339][ T5705] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.246501][ T5698] usb 3-1: can't read configurations, error -22 [ 590.256157][ T5705] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 590.284486][T15283] Cannot create hsr debugfs directory [ 590.303588][ T5705] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.315748][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.329391][ T5705] usb 4-1: Product: syz [ 590.342983][ T4942] Bluetooth: hci4: command tx timeout [ 590.353275][ T5705] usb 4-1: Manufacturer: syz [ 590.385724][ T5705] usb 4-1: SerialNumber: syz [ 590.404206][ T5698] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 590.440871][ T5705] cdc_mbim 4-1:1.0: skipping garbage [ 590.511683][T15324] syzkaller0: entered promiscuous mode [ 590.530062][T15324] syzkaller0: entered allmulticast mode [ 590.613274][ T5698] usb 3-1: no configurations [ 590.618181][ T5698] usb 3-1: can't read configurations, error -22 [ 590.635622][ T5698] usb usb3-port1: attempt power cycle [ 590.665928][T15283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.721237][T15283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.764925][T15283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.792602][ T808] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 590.810600][T15283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.920397][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 590.940369][T15283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.952984][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 590.960020][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.972247][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.981867][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.997805][ T808] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 591.007327][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.020824][ T808] usb 1-1: config 0 descriptor?? [ 591.032631][ T5698] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 591.047115][ T808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 591.056510][T15283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.075442][ T5698] usb 3-1: no configurations [ 591.087752][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 591.098239][ T5698] usb 3-1: can't read configurations, error -22 [ 591.103855][T15283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.116752][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.145205][T15283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 591.166302][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.265795][ T5698] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 591.323754][ T5698] usb 3-1: no configurations [ 591.334836][ T5698] usb 3-1: can't read configurations, error -22 [ 591.355617][ T5698] usb usb3-port1: unable to enumerate USB device [ 591.377474][T15283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.408344][T15283] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.423901][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.431224][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.490258][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.497566][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.636996][T15283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.700720][T15283] veth0_vlan: entered promiscuous mode [ 591.721214][T15283] veth1_vlan: entered promiscuous mode [ 591.761470][T15283] veth0_macvtap: entered promiscuous mode [ 591.775741][T15283] veth1_macvtap: entered promiscuous mode [ 591.799480][T15283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.834614][T15283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.853505][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.864162][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.876896][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.887345][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.953894][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.968244][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.996350][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.012076][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.417240][T15350] syzkaller0: entered promiscuous mode [ 592.425022][T15350] syzkaller0: entered allmulticast mode [ 592.432907][ T4942] Bluetooth: hci4: command tx timeout [ 592.448194][T15350] 0: reclassify loop, rule prio 0, protocol 800 [ 592.475678][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 592.485793][T15350] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 592.994977][ T5705] cdc_mbim 4-1:1.0: bind() failure [ 593.007381][ T5705] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 593.014521][ T5705] cdc_ncm 4-1:1.1: bind() failure [ 593.027460][ T5705] usb 4-1: USB disconnect, device number 105 [ 593.067731][T15355] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 593.074249][T15355] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 593.101117][T15355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 593.107905][T15355] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 593.142188][T15355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 593.148751][T15355] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 593.178917][T15355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 593.188072][T15355] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 593.242905][ T808] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 593.408466][ T808] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 593.427591][ T808] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 593.440629][ T808] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 593.453385][ T808] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 593.466388][ T808] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 593.478366][ T808] usb 3-1: Manufacturer: syz [ 593.484254][ T808] usb 3-1: SerialNumber: syz [ 593.629729][ T24] usb 1-1: USB disconnect, device number 107 [ 593.711566][ T808] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 593.735651][ T808] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input81 [ 593.759502][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.766522][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.773472][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.780527][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.788287][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.795279][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.802235][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.809216][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 593.816013][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 593.856596][ T808] usb 3-1: USB disconnect, device number 104 [ 594.124110][ T24] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 594.303907][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 594.335620][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.351313][ T808] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 594.398122][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.413624][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 594.426760][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.437043][ T24] usb 1-1: config 0 descriptor?? [ 594.502540][ T5705] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 594.554311][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.582340][ T808] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.612233][ T808] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7 [ 594.634443][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.654402][ T808] usb 3-1: Product: syz [ 594.663631][ T808] usb 3-1: Manufacturer: syz [ 594.672694][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 594.682537][ T808] usb 3-1: SerialNumber: syz [ 594.698448][ T5705] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.711540][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.720135][ T5705] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 594.732740][ T808] usb 3-1: config 0 descriptor?? [ 594.734030][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.756274][ T5705] usb 2-1: config 0 descriptor?? [ 594.877946][ T24] nzxt-smart2 0003:1E71:2009.0037: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 595.069566][ T5746] usb 3-1: USB disconnect, device number 105 [ 595.112542][ T808] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 595.183695][ T5705] nzxt-smart2 0003:1E71:2009.0038: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 595.262553][ T24] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 595.272553][ T808] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 595.291492][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 595.303589][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 595.318401][ T808] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 595.327781][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.341844][ T808] usb 5-1: config 0 descriptor?? [ 595.350044][T15375] input: syz1 as /devices/virtual/input/input82 [ 595.350343][T15384] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 595.423944][ T24] usb 4-1: no configurations [ 595.433784][ T24] usb 4-1: can't read configurations, error -22 [ 595.484062][ T5705] usb 1-1: USB disconnect, device number 108 [ 595.583233][ T24] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 595.597947][T15380] input: syz1 as /devices/virtual/input/input83 [ 595.696298][ T9599] usb 2-1: USB disconnect, device number 93 [ 595.733765][ T24] usb 4-1: no configurations [ 595.758715][ T24] usb 4-1: can't read configurations, error -22 [ 595.777764][ T24] usb usb4-port1: attempt power cycle [ 595.804894][ T808] hid_parser_main: 5 callbacks suppressed [ 595.804921][ T808] hid-multitouch 0003:1FD2:6007.0039: unknown main item tag 0x3 [ 595.819586][ T808] hid-multitouch 0003:1FD2:6007.0039: ignoring exceeding usage max [ 595.829789][ T808] hid-multitouch 0003:1FD2:6007.0039: global environment stack underflow [ 595.855461][ T808] hid-multitouch 0003:1FD2:6007.0039: item 0 4 1 11 parsing failed [ 595.869739][ T808] hid-multitouch 0003:1FD2:6007.0039: probe with driver hid-multitouch failed with error -22 [ 595.943664][ T5698] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 596.119340][ T5698] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 596.133632][ T24] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 596.139862][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.141822][ T808] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 596.186314][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.195163][ T24] usb 4-1: no configurations [ 596.202091][ T5698] usb 3-1: Product: syz [ 596.212463][ T5698] usb 3-1: Manufacturer: syz [ 596.219680][ T24] usb 4-1: can't read configurations, error -22 [ 596.226342][ T5698] usb 3-1: SerialNumber: syz [ 596.249816][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.265527][ T5698] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.319964][ T5705] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 596.359946][ T5698] usb 5-1: USB disconnect, device number 87 [ 596.362897][ T24] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 596.415341][ T24] usb 4-1: no configurations [ 596.445890][ T24] usb 4-1: can't read configurations, error -22 [ 596.452526][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.477452][ T24] usb usb4-port1: unable to enumerate USB device [ 596.492478][ T808] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 596.524623][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.555098][ T5630] usb 3-1: USB disconnect, device number 106 [ 596.585665][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.610385][ T808] usb 1-1: Product: syz [ 596.625830][ T808] usb 1-1: Manufacturer: syz [ 596.642157][ T808] usb 1-1: SerialNumber: syz [ 596.912865][ T5698] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 597.052087][T15417] tipc: Enabling of bearer rejected, already enabled [ 597.082806][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 597.116060][ T808] cdc_mbim 1-1:1.0: skipping garbage [ 597.383665][ T5705] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 597.399162][ T5705] ath9k_htc: Failed to initialize the device [ 597.419385][ T5630] usb 3-1: ath9k_htc: USB layer deinitialized [ 598.833514][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 598.862615][ T5712] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 598.903088][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.994562][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 95 [ 599.017052][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 599.033805][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.034338][ T5712] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 599.063240][ T24] usb 5-1: config 0 descriptor?? [ 599.076988][T15438] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 599.091149][ T5712] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 599.125228][ T5712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.147187][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 599.173267][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 599.192231][ T5712] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.201969][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.212523][ T5712] usb 4-1: Product: syz [ 599.222311][ T5712] usb 4-1: Manufacturer: syz [ 599.249071][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 599.260831][ T5712] cdc_wdm 4-1:1.0: skipping garbage [ 599.279616][ T5712] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 599.288384][ T5712] cdc_wdm 4-1:1.0: Unknown control protocol [ 599.335019][ T24] ath6kl: Failed to submit usb control message: -71 [ 599.350618][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 599.374354][ T24] ath6kl: Unable to send get target info: -71 [ 599.404789][ T24] ath6kl: Failed to init ath6kl core: -71 [ 599.428470][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 599.465174][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 599.485613][ T5746] usb 4-1: USB disconnect, device number 110 [ 599.513853][ T24] usb 5-1: USB disconnect, device number 88 [ 599.553194][ T5698] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 599.594874][ T5698] usb 2-1: can't read configurations, error -71 [ 600.190642][T15472] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 600.212863][ T5746] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 600.236056][T15472] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 600.251073][T15472] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3196'. [ 600.272123][T15472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 600.404065][ T5746] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 600.417579][ T5746] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 600.439998][ T5746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 600.460559][ T5746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 600.482089][ T5746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 600.503046][ T5698] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 600.509669][ T5746] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 600.529404][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 600.552115][ T5746] usb 4-1: Product: syz [ 600.559972][ T5746] usb 4-1: Manufacturer: syz [ 600.575666][ T5746] cdc_wdm 4-1:1.0: skipping garbage [ 600.581838][ T5746] cdc_wdm 4-1:1.0: skipping garbage [ 600.597243][ T5746] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 600.606093][ T5746] cdc_wdm 4-1:1.0: Unknown control protocol [ 600.693132][ T5698] usb 2-1: no configurations [ 600.698206][ T5698] usb 2-1: can't read configurations, error -22 [ 600.706965][ T5698] usb usb2-port1: attempt power cycle [ 600.778759][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.784467][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 600.790287][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.796188][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.802020][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.808192][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.814018][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.819870][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.826201][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.832105][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.837930][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.843748][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.849580][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.855423][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.861331][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.867617][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.873521][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.880153][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.886052][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.891945][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.897796][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.903523][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 600.909452][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.915411][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.921266][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.927128][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.935741][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.942489][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 600.959457][ T5746] ------------[ cut here ]------------ [ 600.965069][ T5746] URB ffff8880334c3300 submitted while active [ 600.971227][ T5746] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:6/5746 [ 600.981679][ T5746] Modules linked in: [ 600.985983][ T5746] CPU: 1 UID: 0 PID: 5746 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.997031][ T5746] Tainted: [L]=SOFTLOCKUP [ 601.001415][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.011678][ T5746] Workqueue: events wdm_rxwork [ 601.016676][ T5746] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 601.022196][ T5746] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 18 ef fa 49 83 3e 00 74 40 e8 4e 97 81 fa 48 8d 3d a7 ca fa 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 33 97 81 fa eb 05 e8 2c 97 [ 601.042016][ T5746] RSP: 0018:ffffc900047afa40 EFLAGS: 00010293 [ 601.048329][ T5746] RAX: ffffffff87449d62 RBX: ffff8880334c3300 RCX: ffff888027c15d00 [ 601.056380][ T5746] RDX: 0000000000000000 RSI: ffff8880334c3300 RDI: ffffffff903f6810 [ 601.064711][ T5746] RBP: dffffc0000000000 R08: ffffffff9031abf7 R09: 1ffffffff206357e [ 601.072883][ T5746] R10: dffffc0000000000 R11: fffffbfff206357f R12: 1ffff11004371412 [ 601.080946][ T5746] R13: ffff888021b8a090 R14: ffff8880334c3308 R15: 0000000000000cc0 [ 601.089094][ T5746] FS: 0000000000000000(0000) GS:ffff888125353000(0000) knlGS:0000000000000000 [ 601.098260][ T5746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.104986][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 601.110632][ T5746] CR2: 00007f0c403ea540 CR3: 000000007516c000 CR4: 00000000003526f0 [ 601.118882][ T5746] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 601.127016][ T5746] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 601.135150][ T5746] Call Trace: [ 601.138502][ T5746] [ 601.141501][ T5746] ? rcu_is_watching+0x15/0xb0 [ 601.146414][ T5746] ? trace_irq_enable+0x3b/0x140 [ 601.151439][ T5746] wdm_rxwork+0x100/0x1e0 [ 601.155967][ T5746] ? process_scheduled_works+0xa20/0x14e0 [ 601.161997][ T5746] process_scheduled_works+0xa8e/0x14e0 [ 601.162081][ T5630] usb 4-1: USB disconnect, device number 111 [ 601.168042][ T5746] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.179785][ T5746] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.184952][ T5746] ? assign_work+0x3cf/0x5d0 [ 601.190004][ T5746] worker_thread+0xa47/0xfb0 [ 601.194769][ T5746] ? __kthread_parkme+0x71/0x1f0 [ 601.199854][ T5746] kthread+0x388/0x470 [ 601.204057][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 601.209248][ T5746] ? __pfx_kthread+0x10/0x10 [ 601.213992][ T5746] ret_from_fork+0x514/0xb70 [ 601.218699][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 601.224231][ T5746] ? __switch_to+0xc89/0x1420 [ 601.229095][ T5746] ? __pfx_kthread+0x10/0x10 [ 601.233879][ T5746] ret_from_fork_asm+0x1a/0x30 [ 601.238686][ T5746] [ 601.241739][ T5746] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.249055][ T5746] CPU: 1 UID: 0 PID: 5746 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.260196][ T5746] Tainted: [L]=SOFTLOCKUP [ 601.264533][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.274599][ T5746] Workqueue: events wdm_rxwork [ 601.279407][ T5746] Call Trace: [ 601.282700][ T5746] [ 601.285651][ T5746] vpanic+0x56c/0xa60 [ 601.289742][ T5746] ? __pfx__printk+0x10/0x10 [ 601.294347][ T5746] ? __pfx_vpanic+0x10/0x10 [ 601.298867][ T5746] ? is_bpf_text_address+0x292/0x2b0 [ 601.304167][ T5746] ? is_bpf_text_address+0x26/0x2b0 [ 601.309479][ T5746] panic+0xc5/0xd0 [ 601.313209][ T5746] ? __pfx_panic+0x10/0x10 [ 601.317672][ T5746] ? ret_from_fork_asm+0x1a/0x30 [ 601.322707][ T5746] __warn+0x315/0x4c0 [ 601.326701][ T5746] ? usb_submit_urb+0x79/0x18b0 [ 601.331586][ T5746] ? usb_submit_urb+0x79/0x18b0 [ 601.336467][ T5746] __report_bug+0x331/0x530 [ 601.341089][ T5746] ? rcu_is_watching+0x15/0xb0 [ 601.346061][ T5746] ? usb_submit_urb+0x79/0x18b0 [ 601.351026][ T5746] ? __pfx___report_bug+0x10/0x10 [ 601.356084][ T5746] ? usb_submit_urb+0x79/0x18b0 [ 601.360958][ T5746] report_bug_entry+0x19a/0x290 [ 601.365924][ T5746] ? usb_submit_urb+0x7c/0x18b0 [ 601.370987][ T5746] ? usb_submit_urb+0x81/0x18b0 [ 601.375900][ T5746] handle_bug+0xce/0x200 [ 601.380775][ T5746] exc_invalid_op+0x1a/0x50 [ 601.385393][ T5746] asm_exc_invalid_op+0x1a/0x20 [ 601.390277][ T5746] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 601.395758][ T5746] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 18 ef fa 49 83 3e 00 74 40 e8 4e 97 81 fa 48 8d 3d a7 ca fa 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 33 97 81 fa eb 05 e8 2c 97 [ 601.415385][ T5746] RSP: 0018:ffffc900047afa40 EFLAGS: 00010293 [ 601.421477][ T5746] RAX: ffffffff87449d62 RBX: ffff8880334c3300 RCX: ffff888027c15d00 [ 601.429480][ T5746] RDX: 0000000000000000 RSI: ffff8880334c3300 RDI: ffffffff903f6810 [ 601.437464][ T5746] RBP: dffffc0000000000 R08: ffffffff9031abf7 R09: 1ffffffff206357e [ 601.445488][ T5746] R10: dffffc0000000000 R11: fffffbfff206357f R12: 1ffff11004371412 [ 601.453725][ T5746] R13: ffff888021b8a090 R14: ffff8880334c3308 R15: 0000000000000cc0 [ 601.461725][ T5746] ? usb_submit_urb+0x72/0x18b0 [ 601.466614][ T5746] ? rcu_is_watching+0x15/0xb0 [ 601.471423][ T5746] ? trace_irq_enable+0x3b/0x140 [ 601.476396][ T5746] wdm_rxwork+0x100/0x1e0 [ 601.480740][ T5746] ? process_scheduled_works+0xa20/0x14e0 [ 601.486501][ T5746] process_scheduled_works+0xa8e/0x14e0 [ 601.492084][ T5746] ? __pfx_process_scheduled_works+0x10/0x10 [ 601.498083][ T5746] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.503130][ T5746] ? assign_work+0x3cf/0x5d0 [ 601.507738][ T5746] worker_thread+0xa47/0xfb0 [ 601.512344][ T5746] ? __kthread_parkme+0x71/0x1f0 [ 601.517331][ T5746] kthread+0x388/0x470 [ 601.521408][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 601.526561][ T5746] ? __pfx_kthread+0x10/0x10 [ 601.531167][ T5746] ret_from_fork+0x514/0xb70 [ 601.535768][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 601.540885][ T5746] ? __switch_to+0xc89/0x1420 [ 601.545578][ T5746] ? __pfx_kthread+0x10/0x10 [ 601.550179][ T5746] ret_from_fork_asm+0x1a/0x30 [ 601.555051][ T5746] [ 601.558787][ T5746] Kernel Offset: disabled [ 601.563134][ T5746] Rebooting in 86400 seconds..