last executing test programs: 14m0.585130332s ago: executing program 4 (id=3473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x1, 0x85, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x2, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x1, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x7, 0x4000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x3, 0x3, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x46, 0x7, 0x5f, {0x7, 0x25, 0x1, 0x8, 0x6, 0xff72}}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) 13m57.23557828s ago: executing program 4 (id=3482): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m54.774740695s ago: executing program 4 (id=3485): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 13m54.382628032s ago: executing program 4 (id=3487): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000780)={0x20, 0x16, 0x1, 'g'}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x10, &(0x7f0000000180)={0x0, 0xa, 0x7, "6c56d23906ca1c"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 13m50.650018696s ago: executing program 4 (id=3491): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000780)={0x20, 0x16, 0x4, 'g\\*_'}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000002700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 13m47.352666876s ago: executing program 4 (id=3500): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x2}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) timer_create(0x6, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x242c3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800a74601000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 13m31.586965878s ago: executing program 32 (id=3500): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x2}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) syz_open_dev$vim2m(&(0x7f0000000180), 0x8004, 0x2) timer_create(0x6, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x242c3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800a74601000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 18.599474563s ago: executing program 0 (id=6275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x8) connect$inet6(r2, 0x0, 0x0) write(r0, &(0x7f0000000100)="9f72a89eabb3c8f6176705944b74c9010ba45796e9cb26f406ea5197fe33b695582c31487b2bc8ca", 0x28) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07020700000029bd7000fddbdf2505001a00ac1414bb000000000000000000000000fe80000000000000000000000c260004de000000"], 0x38}}, 0x4) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="eab0817d5050000024001280110001006272696467655f736c617665000000000c00058005001c0000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x4050) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_DESC={0xffffffffffffff02, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x69969dcff4f4cf6f}, 0x4000000) openat$userfaultfd(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 16.973601058s ago: executing program 0 (id=6278): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.718051518s ago: executing program 0 (id=6281): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000940)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x3, 0x6, "bceab6", 0x333, 0x2f, 0x0, @local, @local, {[@srh={0x11, 0x12, 0x4, 0x9, 0x1, 0x20, 0x133, [@remote, @empty, @empty, @local, @loopback, @mcast1, @empty, @local, @rand_addr=' \x01\x00']}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xdf, 0x2, [0x7328], "9517594fd6900dec92c992a86b1584e5433b4c58ebbe4ff26f5245530c5da150e812c0f46a0872db645994dc5fad42fef097ad75638a83b228409603c2c356b30634d05f374b56b59382566acadc92640d23dbfbd3df5659db07a7933e1413afdbefe7b3c60126e94b2eb820c44c1c0b32f5605a93f49a66d025e6dcb787d7c3fc2f7f084522ff0371b791aa0a69a8815bacbd8344ec13311db79cf0c207679d4078d9eef4ed8685955b93cd483ebbddf31d587ffe6f5aaeec5a5d3fa53465406b32d886ed34b444a55689434fe6fed2a83b5394a8cf6d10cbcecc3145606a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x14, 0xff], "79b3842e613ca6312437fba04cdd233c8e5d9736a4dd8f8631ccd8b3f2d351592a21381dc76e2398fe02373b51a357bafa9a6ba94e5af458594d7e1a0dc5df9494feb1ff3e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xf], "4c881cf803f6d76746b36dbb953561515b4ef72af512052dca33edda6436fba793f93bbd55310027da24ad689263794a9160d7ddca2c02f4"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4, 0xfc}, 0x2, {0x1, 0x893, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "2ddacbfad888be16b0579d4fc8e6dc4bbe94c99d968ae46ed0bf55a4666706ae9e67c54637501faf06b2a9a4b803f05e018671ddfa34028f47bbed9f3885a574da48f56629ad9abfca5de61e731150b9009cd1765fc2a6929b1c62279254095dc641075941bddee670bf4569ae1bf19722337fc0854ac77f75bf4e1ee57806f9f387fae943d33f18e3d0e64f06662027af470d5cfc7435f4f6132ae1db089668c509cace067e4dd35dafa5b062d2e81b0443268125eefb25d3a09d75e9fb57a53dfd23f3839294f42536570f4462a4de35db1ea8c4ff983658e0151b6e0da69d54d5e0da646b18612729dfa49deb3b985f909e"}}}}}}, 0x36d) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xec}}, './file0\x00'}) r6 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r8, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x2) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="0dc4d61b9e921f455fbd31cc9882d223e9ceee662777c753936f8657ea1071bbcea71b8a44b8883b417edb4d75763cd08b0876107d6ec23e38f634e668c3feb7f094af5335912b35f4546b6bdc2607f48f8d4e66526e4686ec8beb84d81a02c901778903b5b147180d4f0f13766ddbe3a3d9e4deb9dbdd5187b79b9db0aa06f949fb9eda53fc36e917e4f71376a6675d38b24cc481542e4be6589123842a40c5da5ed413163e2b4ced0dccd775881e211f1e204fe16e10e987159ef3458d43dedc82d15510128e516a0865c7070160ffee1b536f67d7e6a1c0f45d7dab573d812ddcaf22d1118bd5202992615cbd54163749049b9f830b1023", 0xf9}], 0x1}, 0x0) 11.91636415s ago: executing program 0 (id=6293): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="0549"]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 11.619712892s ago: executing program 3 (id=6295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20004000) 11.482587091s ago: executing program 3 (id=6296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.994877902s ago: executing program 1 (id=6297): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x2, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0x0, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x24, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x405, 0xffffffd3, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x3, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xbef, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x5, 0x9, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0xb, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 9.558955548s ago: executing program 3 (id=6298): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.237618392s ago: executing program 1 (id=6300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000002c0)="8bcceb216f624c06f5ff84087509", 0xe}, {&(0x7f00000003c0)="e3", 0x1}, {&(0x7f0000000180)="d97fb45dff", 0x5}], 0x4) 8.71480875s ago: executing program 0 (id=6301): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.08320194s ago: executing program 1 (id=6303): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000780)={0x20, 0x16}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.697669604s ago: executing program 5 (id=6305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20004000) 7.338110962s ago: executing program 0 (id=6306): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00003da000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000deb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB], 0x48) io_uring_enter(r1, 0x7350, 0x771d, 0x14, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 7.288189458s ago: executing program 5 (id=6307): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.167606324s ago: executing program 3 (id=6309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x9, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x40, "36858c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x2, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x1, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x7, 0x4000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x3, 0x3, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x46, 0x7, 0x5f, {0x7, 0x25, 0x1, 0x8, 0x6, 0xff72}}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a2402010304"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c36302725166") 5.383447618s ago: executing program 5 (id=6310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="0549"]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040580403"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.98521117s ago: executing program 1 (id=6311): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000b00)=[{&(0x7f00000001c0)}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.494916764s ago: executing program 2 (id=6314): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", 0x0, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) 3.239276899s ago: executing program 1 (id=6315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x40000000000000, 0x0, 0x0, 0x800000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x3, 0x8}, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) 3.230720983s ago: executing program 2 (id=6316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x20004000) 3.097751778s ago: executing program 3 (id=6317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c1", 0x96}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$nl_route(0x10, 0x3, 0x0) close(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.923459209s ago: executing program 2 (id=6318): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f0000", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 1.66919516s ago: executing program 5 (id=6319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e000000001800", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 1.155004271s ago: executing program 2 (id=6320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000002c0)="8bcceb216f624c06f5ff84087509", 0xe}, {&(0x7f00000003c0)="e3", 0x1}, {&(0x7f0000000180)="d97fb45dff", 0x5}], 0x4) 756.449718ms ago: executing program 3 (id=6321): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000780)={0x20, 0x16}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 613.206862ms ago: executing program 5 (id=6322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000240)=',\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 325.249482ms ago: executing program 2 (id=6323): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) close(0x3) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 277.844946ms ago: executing program 2 (id=6324): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3b}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2000008, 0x0, 0x0, 0x0, 0xffffffff}, [@exit]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fanotify_mark(0xffffffffffffffff, 0x10, 0x48000021, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r6, &(0x7f0000000100)={0x0, 0x2, 0x3, 0xfc, 0x5}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 224.420495ms ago: executing program 5 (id=6325): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f0000000b00)=[{&(0x7f00000001c0)}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 1 (id=6326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xfffb, 0xffff, 0x1, "8003e3ffff072000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x7fff, 0x12, "b0bf38bb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) kernel console output (not intermixed with test programs): usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1803.856626][T25375] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1803.856646][T25375] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.917074][T25375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.917107][T25375] usb 6-1: Product: syz [ 1803.920729][T25375] usb 6-1: Manufacturer: syz [ 1803.923290][T25375] usb 6-1: SerialNumber: syz [ 1803.974714][T25854] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1804.030489][ T5791] usb 2-1: USB disconnect, device number 124 [ 1804.197262][T25854] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1804.579880][T17134] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1804.580305][ T5774] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1804.586351][T25844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.612981][T25844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.630718][ T5774] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input207 [ 1804.699470][ T5774] input: failed to attach handler kbd to device input207, error: -5 [ 1804.741541][T17134] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1804.747810][T17134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.748104][T17134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1804.748134][T17134] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1804.748160][T17134] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1804.748604][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.817484][T25375] usb 6-1: Incompatible driver and firmware versions [ 1804.924202][ T5774] usb 3-1: USB disconnect, device number 18 [ 1805.084382][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1805.233295][ T31] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1805.243076][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.464219][ T10] usb 1-1: USB disconnect, device number 108 [ 1805.536121][T25879] usb usb8: usbfs: process 25879 (syz.0.5997) did not claim interface 0 before use [ 1805.727146][ T31] usb 4-1: Firmware version (0.0) predates our first public release. [ 1805.727167][ T31] usb 4-1: Please update to version 0.2 or newer [ 1805.785454][ T31] usb 4-1: USB disconnect, device number 21 [ 1805.909202][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1806.114513][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1806.117849][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.117907][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1806.117934][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1806.117962][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1806.118005][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.480993][ T31] usb 6-1: USB disconnect, device number 60 [ 1806.859068][ T5791] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1806.989195][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1807.010010][ T5791] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1807.011390][ T5791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.011446][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1807.011472][ T5791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1807.011497][ T5791] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.011538][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.158837][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1807.159574][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1807.161091][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1807.161193][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1807.161225][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1807.161242][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1807.161272][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.335005][ T31] usb 2-1: USB disconnect, device number 125 [ 1807.412464][T25903] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6003'. [ 1807.462688][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 1807.462740][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1807.660350][T25910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6005'. [ 1807.665979][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1807.666084][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1807.711876][T25910] bridge4: port 1(erspan0) entered blocking state [ 1807.712098][T25910] bridge4: port 1(erspan0) entered disabled state [ 1807.712320][T25910] erspan0: entered allmulticast mode [ 1807.715347][T25910] erspan0: entered promiscuous mode [ 1807.769085][ T31] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1807.930204][ T31] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1807.931484][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 64, using maximum allowed: 30 [ 1807.931533][ T31] usb 2-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1807.931573][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1807.934219][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.934247][ T31] usb 2-1: Product: syz [ 1807.934264][ T31] usb 2-1: Manufacturer: syz [ 1807.934280][ T31] usb 2-1: SerialNumber: syz [ 1807.938659][ T31] usb 2-1: config 0 descriptor?? [ 1808.160893][ T5774] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1808.194406][T25903] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1808.221051][ T31] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1808.221909][ T31] sonixb 2-1:0.0: Error reading register 00: -71 [ 1808.226435][ T31] usb 2-1: USB disconnect, device number 126 [ 1808.339694][ T5774] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1808.340989][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.639576][ T10] usb 1-1: USB disconnect, device number 109 [ 1809.728100][ T5774] usb 4-1: USB disconnect, device number 22 [ 1809.774243][ T31] usb 6-1: USB disconnect, device number 61 [ 1810.228892][ T31] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1810.304458][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6017'. [ 1810.307352][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6017'. [ 1810.392099][ T31] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1810.394197][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.394260][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1810.394288][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1810.394328][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1810.394374][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.930449][ T31] usb 3-1: USB disconnect, device number 19 [ 1811.408908][T13420] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1811.561128][T13420] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1811.562540][T13420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.562597][T13420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1811.562625][T13420] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1811.562643][T13420] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1811.562674][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.588879][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1811.688968][ T5791] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1811.738935][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1811.739904][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1811.741383][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1811.741482][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1811.741512][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1811.741539][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1811.741643][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.880908][ T5791] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1811.882328][ T5791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.882384][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.918450][ T5791] usb 3-1: config 0 descriptor?? [ 1811.937216][ T5791] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.017476][T25979] trusted_key: encrypted_key: insufficient parameters specified [ 1812.031513][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1812.031629][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1812.114513][T25981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1812.117283][T25981] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1812.149006][ T5791] pwc: send_video_command error -71 [ 1812.149026][ T5791] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1812.149157][ T5791] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1812.182722][ T5791] usb 3-1: USB disconnect, device number 20 [ 1812.235368][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1812.235445][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1812.235505][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1812.480767][ T5774] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1812.630005][ T5774] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1812.631323][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.631365][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.631395][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.636979][ T5774] usb 2-1: config 0 descriptor?? [ 1812.682180][ T5791] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1812.832996][ T5791] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1812.835200][ T5791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.835266][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.872605][ T5791] usb 3-1: config 0 descriptor?? [ 1812.895797][ T5791] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.916376][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.944131][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.968568][ T5774] usbhid 2-1:0.0: can't add hid device: -71 [ 1812.968884][ T5774] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1812.992542][ T5774] usb 2-1: USB disconnect, device number 127 [ 1813.003008][T17134] usb 6-1: USB disconnect, device number 62 [ 1813.282670][ T5791] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1813.300591][ T5791] pwc: recv_control_msg error -32 req 02 val 2700 [ 1813.307546][ T5791] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1813.308491][ T5791] pwc: recv_control_msg error -32 req 04 val 1000 [ 1813.330618][ T5791] pwc: recv_control_msg error -71 req 04 val 1300 [ 1813.331028][ T5791] pwc: recv_control_msg error -71 req 04 val 1400 [ 1813.332902][ T5791] pwc: recv_control_msg error -71 req 02 val 2000 [ 1813.333347][ T5791] pwc: recv_control_msg error -71 req 02 val 2100 [ 1813.335271][ T5791] pwc: recv_control_msg error -71 req 04 val 1500 [ 1813.335663][ T5791] pwc: recv_control_msg error -71 req 02 val 2500 [ 1813.336039][ T5791] pwc: recv_control_msg error -71 req 02 val 2400 [ 1813.336404][ T5791] pwc: recv_control_msg error -71 req 02 val 2600 [ 1813.336839][ T5791] pwc: recv_control_msg error -71 req 02 val 2900 [ 1813.363055][ T5791] pwc: recv_control_msg error -71 req 02 val 2800 [ 1813.394297][ T5791] pwc: recv_control_msg error -71 req 04 val 1100 [ 1813.413199][ T5791] pwc: recv_control_msg error -71 req 04 val 1200 [ 1813.426359][ T5791] pwc: Registered as video103. [ 1813.441830][ T5791] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input208 [ 1813.467391][ T5791] usb 3-1: USB disconnect, device number 21 [ 1813.526223][ T5774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1813.689702][ T5774] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1813.691133][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1813.691183][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.691224][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.739713][ T5774] usb 2-1: config 0 descriptor?? [ 1814.209352][ T31] usb 1-1: USB disconnect, device number 110 [ 1814.327063][T17134] usb 4-1: USB disconnect, device number 23 [ 1814.559955][ T5774] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1814.563579][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.564887][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.604390][ T5774] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input209 [ 1814.694108][ T5774] input: failed to attach handler kbd to device input209, error: -5 [ 1814.734451][ T5774] usb 2-1: USB disconnect, device number 2 [ 1815.362705][T26026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1815.507624][T26027] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1816.298928][ T5791] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1816.316852][T13420] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1816.328913][T17134] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1816.449856][ T5791] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1816.451705][ T5791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.451777][ T5791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1816.451798][ T5791] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1816.451816][ T5791] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1816.451849][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.509891][T17134] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1816.511169][T13420] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1816.525402][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.549867][T17134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.549908][T17134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.627891][T17134] usb 4-1: config 0 descriptor?? [ 1816.658427][T13420] usb 1-1: config 0 descriptor?? [ 1816.716972][T13420] cp210x 1-1:0.0: cp210x converter detected [ 1816.897752][T26036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.915160][T26036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.931682][T17134] usbhid 4-1:0.0: can't add hid device: -71 [ 1816.931826][T17134] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1816.975459][T13420] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1816.990303][T17134] usb 4-1: USB disconnect, device number 24 [ 1817.470292][T17134] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1817.621857][T17134] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1817.624217][T17134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.624274][T17134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.638177][T17134] usb 4-1: config 0 descriptor?? [ 1818.118927][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1818.273979][ T10] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1818.275718][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.275750][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1818.275794][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.331076][ T10] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1818.480200][T17134] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1818.484818][T17134] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input210 [ 1818.689896][ T10] usb 4-1: USB disconnect, device number 25 [ 1818.689938][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1819.101855][ T5791] usb 2-1: USB disconnect, device number 3 [ 1819.106076][T13420] usb 1-1: USB disconnect, device number 111 [ 1819.171634][T13420] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1819.174008][T13420] cp210x 1-1:0.0: device disconnected [ 1819.357001][T26066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6053'. [ 1819.370335][T26066] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6053'. [ 1819.848876][T17134] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1819.999399][ T5791] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1820.001575][T17134] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1820.005128][T17134] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.008364][T17134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.008395][T17134] usb 6-1: Product: syz [ 1820.008412][T17134] usb 6-1: Manufacturer: syz [ 1820.008429][T17134] usb 6-1: SerialNumber: syz [ 1820.067189][T17134] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1820.148887][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 1820.151898][ T5791] usb 1-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 1820.154932][ T5791] usb 1-1: config 1 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1820.155058][ T5791] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1820.179982][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.193275][ T5791] usb 1-1: Product: syz [ 1820.193300][ T5791] usb 1-1: Manufacturer: 㐁 [ 1820.193318][ T5791] usb 1-1: SerialNumber: syz [ 1820.483714][ T5791] usbhid 1-1:1.0: can't add hid device: -71 [ 1820.483859][ T5791] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1820.486669][T13420] usb 3-1: USB disconnect, device number 22 [ 1820.519694][ T5791] usb 1-1: USB disconnect, device number 112 [ 1820.527752][T13420] idmouse 3-1:1.0: disconnected [ 1820.585673][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1820.657417][T26087] bridge6: port 1(erspan0) entered blocking state [ 1820.657742][T26087] bridge6: port 1(erspan0) entered disabled state [ 1820.658000][T26087] erspan0: entered allmulticast mode [ 1820.680567][T26087] erspan0: entered promiscuous mode [ 1820.702502][T26086] erspan0: left allmulticast mode [ 1820.702593][T26086] erspan0: left promiscuous mode [ 1820.702935][T26086] bridge6: port 1(erspan0) entered disabled state [ 1820.858136][T26086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1820.977618][T26071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.982352][T26071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.003829][T17134] gspca_mr97310a: reg write [21] error -71 [ 1821.003935][T17134] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71 [ 1821.064163][T17134] usb 6-1: USB disconnect, device number 63 [ 1821.230499][T26098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1821.232155][T26098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1821.429020][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1821.430554][T13420] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1821.568981][T17134] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1821.592720][T13420] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1821.598410][ T5791] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1821.622930][T13420] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.623004][T13420] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1821.623035][T13420] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1821.623065][T13420] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1821.623128][T13420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.623529][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.623607][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.725748][ T5791] usb 2-1: config 0 descriptor?? [ 1821.733776][T17134] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1821.750443][T17134] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.750504][T17134] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1821.750531][T17134] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1821.750571][T17134] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1821.750617][T17134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.002288][T26095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.005504][T26095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.040532][ T5791] usbhid 2-1:0.0: can't add hid device: -71 [ 1822.040673][ T5791] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1822.083035][ T5791] usb 2-1: USB disconnect, device number 4 [ 1822.148845][T25375] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1822.299058][T25375] usb 6-1: Using ep0 maxpacket: 16 [ 1822.299990][T25375] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1822.301320][T25375] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1822.301352][T25375] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1822.301377][T25375] usb 6-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.301401][T25375] usb 6-1: config 166 has no interface number 0 [ 1822.301420][T25375] usb 6-1: config 166 has no interface number 1 [ 1822.301479][T25375] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1822.301504][T25375] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1822.301553][T25375] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1822.301582][T25375] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1822.301611][T25375] usb 6-1: config 166 interface 34 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1822.301642][T25375] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1822.301664][T25375] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1822.304633][T25375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.304665][T25375] usb 6-1: Product: syz [ 1822.304683][T25375] usb 6-1: Manufacturer: syz [ 1822.304702][T25375] usb 6-1: SerialNumber: syz [ 1822.558981][T25375] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1822.576272][T26106] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1822.646018][T25375] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1822.704293][ T5791] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1822.791988][T25375] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1822.792026][T25375] uvcvideo 6-1:166.34: No valid video chain found. [ 1822.797789][T25375] usb 6-1: USB disconnect, device number 64 [ 1822.880273][T17138] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1822.959803][ T5791] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1822.961540][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.961578][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.968284][ T5791] usb 2-1: config 0 descriptor?? [ 1823.029715][T17138] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1823.030998][T17138] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 64, using maximum allowed: 30 [ 1823.031745][T17138] usb 3-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1823.031770][T17138] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1823.034718][T17138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.034745][T17138] usb 3-1: Product: syz [ 1823.034756][T17138] usb 3-1: Manufacturer: syz [ 1823.034811][T17138] usb 3-1: SerialNumber: syz [ 1823.106814][T17138] usb 3-1: config 0 descriptor?? [ 1823.327619][T26106] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 1823.373300][T17138] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1823.376022][T17138] sonixb 3-1:0.0: Error reading register 00: -71 [ 1823.409948][T17138] usb 3-1: USB disconnect, device number 23 [ 1823.840511][ T5791] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1823.843026][ T5791] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input211 [ 1823.918930][T17138] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1824.045137][ T5774] usb 2-1: USB disconnect, device number 5 [ 1824.045227][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1824.070709][T17138] usb 6-1: Using ep0 maxpacket: 8 [ 1824.073063][T17138] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1824.076440][T17138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.142879][T17138] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1824.142901][T17138] pvrusb2: ********** [ 1824.142911][T17138] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1824.142925][T17138] pvrusb2: Important functionality might not be entirely working. [ 1824.142936][T17138] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1824.142951][T17138] pvrusb2: ********** [ 1824.304196][ T5791] usb 4-1: USB disconnect, device number 26 [ 1824.328415][T26127] ip6gretap1: entered allmulticast mode [ 1824.379081][T25375] usb 1-1: USB disconnect, device number 113 [ 1824.420574][ T2386] pvrusb2: Invalid write control endpoint [ 1824.629591][T26122] pvrusb2: Invalid write control endpoint [ 1824.633637][T17138] usb 6-1: USB disconnect, device number 65 [ 1824.733260][ T2386] pvrusb2: Invalid write control endpoint [ 1824.733280][ T2386] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1824.733293][ T2386] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1824.733304][ T2386] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1824.733316][ T2386] pvrusb2: Device being rendered inoperable [ 1824.733409][ T2386] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1824.733464][ T2386] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1824.740330][ T2386] pvrusb2: Attached sub-driver cx25840 [ 1824.740349][ T2386] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1824.740372][ T2386] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1824.908864][T25375] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1825.046193][T26141] fuse: Unknown parameter 'group_id00000000000000000000' [ 1825.059511][T25375] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1825.060917][T25375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.060976][T25375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.107582][T25375] usb 1-1: config 0 descriptor?? [ 1825.142277][T25375] pwc: Askey VC010 type 2 USB webcam detected. [ 1825.190986][T26143] blk-mq: reduced tag depth (128 -> 64) [ 1825.332245][T25375] pwc: send_video_command error -71 [ 1825.332282][T25375] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1825.332397][T25375] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1825.364130][T25375] usb 1-1: USB disconnect, device number 114 [ 1825.732926][ T7744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1825.773114][ T7744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1825.791057][ T7744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1825.811381][ T7744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1825.887163][T25375] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1825.905966][ T7744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1826.079343][T16692] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1826.082592][T16692] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1826.083063][T16692] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1826.084852][T16692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1826.085692][T16692] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1826.201612][T17138] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1826.208916][T25375] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1826.211736][T25375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.211810][T25375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.251510][T25375] usb 1-1: config 0 descriptor?? [ 1826.264476][T25375] pwc: Askey VC010 type 2 USB webcam detected. [ 1826.382303][T17138] usb 6-1: Using ep0 maxpacket: 8 [ 1826.383133][T17138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1826.399602][T17138] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1826.399645][T17138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1826.399728][T17138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1826.399763][T17138] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1826.399826][T17138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.719008][T25375] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1826.843742][T25375] pwc: recv_control_msg error -32 req 02 val 2700 [ 1826.844586][T25375] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1826.845367][T25375] pwc: recv_control_msg error -32 req 04 val 1000 [ 1826.845787][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1826.845941][T25375] pwc: recv_control_msg error -32 req 04 val 1300 [ 1826.846431][T25375] pwc: recv_control_msg error -71 req 04 val 1400 [ 1826.846931][T25375] pwc: recv_control_msg error -71 req 02 val 2000 [ 1826.899110][T25375] pwc: recv_control_msg error -71 req 02 val 2100 [ 1826.899665][T25375] pwc: recv_control_msg error -71 req 04 val 1500 [ 1826.900178][T25375] pwc: recv_control_msg error -71 req 02 val 2500 [ 1826.900658][T25375] pwc: recv_control_msg error -71 req 02 val 2400 [ 1826.901145][T25375] pwc: recv_control_msg error -71 req 02 val 2600 [ 1826.901803][T25375] pwc: recv_control_msg error -71 req 02 val 2900 [ 1826.902382][T25375] pwc: recv_control_msg error -71 req 02 val 2800 [ 1826.903115][T25375] pwc: recv_control_msg error -71 req 04 val 1100 [ 1826.903662][T25375] pwc: recv_control_msg error -71 req 04 val 1200 [ 1826.908627][T25375] pwc: Registered as video103. [ 1826.981420][T25375] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input212 [ 1827.006795][T25375] usb 1-1: USB disconnect, device number 115 [ 1827.103360][T17138] usb 6-1: GET_CAPABILITIES returned 0 [ 1827.103398][T17138] usbtmc 6-1:16.0: can't read capabilities [ 1827.244238][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1827.315643][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1827.329432][T26153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1827.342437][T26153] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1827.363254][T17138] usb 6-1: USB disconnect, device number 66 [ 1827.888033][T26166] tipc: Enabled bearer , priority 10 [ 1827.969525][T26165] tipc: Resetting bearer [ 1828.331459][T26165] tipc: Disabling bearer [ 1828.598940][ T5791] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1828.771586][ T5791] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1828.772588][ T5791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.772626][ T5791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1828.772643][ T5791] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1828.772661][ T5791] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1828.772700][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.819314][T26184] fuse: Unknown parameter 'group_id00000000000000000000' [ 1830.260314][ T5791] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1830.449859][ T5791] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1830.451257][ T5791] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1830.451288][ T5791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.451312][ T5791] usb 2-1: config 0 has no interface number 0 [ 1830.451347][ T5791] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1830.451366][ T5791] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1830.451399][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.457194][ T5791] usb 2-1: config 0 descriptor?? [ 1830.495334][T26187] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1830.634548][ T5791] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1830.785453][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1830.958592][T17134] usb 2-1: USB disconnect, device number 6 [ 1831.017841][ T70] usb 2-1: Failed to submit usb control message: -71 [ 1831.017872][ T70] usb 2-1: unable to send the bmi data to the device: -71 [ 1831.017887][ T70] usb 2-1: unable to get target info from device [ 1831.017912][ T70] usb 2-1: could not get target info (-71) [ 1831.018060][ T70] usb 2-1: could not probe fw (-71) [ 1831.603685][ T10] usb 3-1: USB disconnect, device number 24 [ 1831.773495][T26209] FAULT_INJECTION: forcing a failure. [ 1831.773495][T26209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.773527][T26209] CPU: 1 UID: 0 PID: 26209 Comm: syz.2.6093 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1831.773546][T26209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1831.773557][T26209] Call Trace: [ 1831.773564][T26209] [ 1831.773572][T26209] dump_stack_lvl+0xe8/0x150 [ 1831.773606][T26209] should_fail_ex+0x46b/0x600 [ 1831.773635][T26209] _copy_to_user+0x31/0xb0 [ 1831.773695][T26209] io_uring_create+0x4ea/0x990 [ 1831.773727][T26209] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1831.773764][T26209] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1831.773802][T26209] ? __fget_files+0x2a/0x420 [ 1831.773821][T26209] ? rcu_is_watching+0x16/0xb0 [ 1831.773865][T26209] do_syscall_64+0x166/0x520 [ 1831.773894][T26209] ? trace_irq_disable+0x3b/0x140 [ 1831.773917][T26209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.773935][T26209] ? clear_bhb_loop+0x70/0xc0 [ 1831.773955][T26209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.773972][T26209] RIP: 0033:0x7f3cbe6be159 [ 1831.773989][T26209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.774004][T26209] RSP: 002b:00007f3cbc915fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1831.774023][T26209] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f3cbe6be159 [ 1831.774036][T26209] RDX: 0000200000000440 RSI: 0000200000000340 RDI: 0000000000004f0a [ 1831.774048][T26209] RBP: 00007f3cbe75506b R08: 0000000000000000 R09: 0000000000000000 [ 1831.774059][T26209] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 1831.774083][T26209] R13: 0000200000000480 R14: 00002000000003c0 R15: 00007fff7d52bd18 [ 1831.774108][T26209] [ 1832.033968][T26212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6094'. [ 1832.290464][T26219] fuse: Unknown parameter 'group_id00000000000000000000' [ 1832.318914][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1832.488849][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1832.490924][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 1832.492175][ T10] usb 6-1: config 1 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1832.492213][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1832.494626][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.494655][ T10] usb 6-1: Product: syz [ 1832.494673][ T10] usb 6-1: Manufacturer: 㐁 [ 1832.494703][ T10] usb 6-1: SerialNumber: syz [ 1832.499430][T17134] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1832.731223][T17134] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1832.735918][T17134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.735951][T17134] usb 3-1: Product: syz [ 1832.735969][T17134] usb 3-1: Manufacturer: syz [ 1832.735987][T17134] usb 3-1: SerialNumber: syz [ 1832.759433][T17134] usb 3-1: config 0 descriptor?? [ 1832.777654][T17134] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1832.837651][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 1832.837794][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1832.864161][ T10] usb 6-1: USB disconnect, device number 67 [ 1833.185234][T26217] netdevsim netdevsim2: Firmware load for '../file0/file0' refused, path contains '..' component [ 1833.218305][T17134] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input213 [ 1833.347961][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6099'. [ 1833.399248][ T10] usb 3-1: USB disconnect, device number 25 [ 1833.750105][T26238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6100'. [ 1834.033760][T26239] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1834.033781][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.034182][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.034624][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.035726][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.152568][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.153674][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.154140][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.154719][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.157274][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.157726][T26239] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1834.636410][T26144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.636503][T26144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.636666][T26144] bridge_slave_0: entered allmulticast mode [ 1834.763040][T26144] bridge_slave_0: entered promiscuous mode [ 1834.841408][T26144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.841584][T26144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.841823][T26144] bridge_slave_1: entered allmulticast mode [ 1834.845298][T26144] bridge_slave_1: entered promiscuous mode [ 1834.970722][T26242] netlink: 'syz.2.6101': attribute type 11 has an invalid length. [ 1834.970750][T26242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1835.125731][T26144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.169205][T26144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1835.428927][T17134] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1835.560371][T26144] team0: Port device team_slave_0 added [ 1835.565291][T26144] team0: Port device team_slave_1 added [ 1835.619830][T17134] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1835.621311][T17134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.049171][T26144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.049192][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1836.049226][T26144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.117104][T26144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.117127][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1836.117159][T26144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.311317][T17134] usb 1-1: Firmware version (0.0) predates our first public release. [ 1836.311349][T17134] usb 1-1: Please update to version 0.2 or newer [ 1836.840401][T17134] usb 1-1: USB disconnect, device number 116 [ 1836.886750][T26260] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6107'. [ 1836.958461][T26263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1837.051190][T13420] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1837.201474][T26144] hsr_slave_0: entered promiscuous mode [ 1837.218589][T26144] hsr_slave_1: entered promiscuous mode [ 1837.225361][T26144] debugfs: 'hsr0' already exists in 'hsr' [ 1837.225387][T26144] Cannot create hsr debugfs directory [ 1837.268509][T13420] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1837.271565][T13420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.938905][T26276] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6111'. [ 1837.979394][T17134] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1838.113462][T26280] netlink: 'syz.5.6113': attribute type 11 has an invalid length. [ 1838.113488][T26280] netlink: 3808 bytes leftover after parsing attributes in process `syz.5.6113'. [ 1838.169221][T17134] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1838.177472][T17134] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.177548][T17134] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1838.177574][T17134] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1838.177601][T17134] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1838.177647][T17134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.081653][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6116'. [ 1839.886580][ T5791] usb 3-1: USB disconnect, device number 26 [ 1840.307029][T25375] usb 1-1: USB disconnect, device number 117 [ 1840.878854][T25375] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1840.951918][T26316] blk-mq: reduced tag depth (128 -> 64) [ 1841.039939][T25375] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1841.042946][T25375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.206134][T26318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6121'. [ 1841.695606][T25375] usb 1-1: Firmware version (0.0) predates our first public release. [ 1841.695637][T25375] usb 1-1: Please update to version 0.2 or newer [ 1842.382305][T26326] netlink: 'syz.0.6123': attribute type 11 has an invalid length. [ 1842.382326][T26326] netlink: 3808 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1842.558001][T26331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6125'. [ 1842.646505][ T3321] bond0 (unregistering): Released all slaves [ 1842.662092][ T3321] bond1 (unregistering): Released all slaves [ 1843.001947][T25375] usb 1-1: USB disconnect, device number 118 [ 1843.561488][ T3321] tipc: Disabling bearer [ 1843.561682][ T3321] tipc: Left network mode [ 1843.619223][T17134] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1843.788855][T17134] usb 2-1: Using ep0 maxpacket: 8 [ 1843.789741][T17134] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1843.791349][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.916223][T26343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6126'. [ 1843.968280][T17134] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1843.968315][T17134] pvrusb2: ********** [ 1843.968321][T17134] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1843.968330][T17134] pvrusb2: Important functionality might not be entirely working. [ 1843.968338][T17134] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1843.968367][T17134] pvrusb2: ********** [ 1844.126633][ T2386] pvrusb2: Invalid write control endpoint [ 1844.335315][ T10] usb 2-1: USB disconnect, device number 7 [ 1844.382576][ T2386] pvrusb2: Invalid write control endpoint [ 1844.382596][ T2386] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1844.382604][ T2386] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1844.382611][ T2386] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1844.382620][ T2386] pvrusb2: Device being rendered inoperable [ 1844.382652][ T2386] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1844.382696][ T2386] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1844.383539][ T2386] pvrusb2: Attached sub-driver cx25840 [ 1844.383549][ T2386] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1844.383558][ T2386] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1845.548887][T25375] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1845.712567][T25375] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1845.713622][T25375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.402442][T25375] usb 6-1: Firmware version (0.0) predates our first public release. [ 1846.402475][T25375] usb 6-1: Please update to version 0.2 or newer [ 1846.525278][T26381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6135'. [ 1847.127041][T26390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6136'. [ 1848.073140][T26392] erspan0: left allmulticast mode [ 1848.073169][T26392] erspan0: left promiscuous mode [ 1848.076807][T26392] bridge4: port 1(erspan0) entered disabled state [ 1848.230197][T26392] bridge5: port 1(erspan0) entered blocking state [ 1848.230382][T26392] bridge5: port 1(erspan0) entered disabled state [ 1848.230561][T26392] erspan0: entered allmulticast mode [ 1848.268536][T26392] erspan0: entered promiscuous mode [ 1848.398648][T25375] usb 6-1: USB disconnect, device number 68 [ 1848.802394][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1849.746653][T26424] netlink: 'syz.1.6144': attribute type 11 has an invalid length. [ 1849.746692][T26424] netlink: 3800 bytes leftover after parsing attributes in process `syz.1.6144'. [ 1850.243887][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1850.430950][T26445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1850.459169][ T3321] hsr_slave_0: left promiscuous mode [ 1850.489396][ T3321] hsr_slave_1: left promiscuous mode [ 1851.933345][T26441] erspan0: left allmulticast mode [ 1851.933383][T26441] erspan0: left promiscuous mode [ 1851.933720][T26441] bridge5: port 1(erspan0) entered disabled state [ 1852.042734][T26441] bridge6: port 1(erspan0) entered blocking state [ 1852.042844][T26441] bridge6: port 1(erspan0) entered disabled state [ 1852.042967][T26441] erspan0: entered allmulticast mode [ 1852.046505][T26441] erspan0: entered promiscuous mode [ 1852.081823][T26443] erspan0: left allmulticast mode [ 1852.081868][T26443] erspan0: left promiscuous mode [ 1852.082179][T26443] bridge6: port 1(erspan0) entered disabled state [ 1852.213604][T26443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1852.314120][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1852.577968][T26464] bridge7: port 1(erspan0) entered blocking state [ 1852.578110][T26464] bridge7: port 1(erspan0) entered disabled state [ 1852.578318][T26464] erspan0: entered allmulticast mode [ 1852.599853][T26464] erspan0: entered promiscuous mode [ 1852.633409][T26466] erspan0: left allmulticast mode [ 1852.633449][T26466] erspan0: left promiscuous mode [ 1852.633766][T26466] bridge7: port 1(erspan0) entered disabled state [ 1852.883202][T26466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1853.050600][T26476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1853.055647][T26473] FAULT_INJECTION: forcing a failure. [ 1853.055647][T26473] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.055720][T26473] CPU: 1 UID: 0 PID: 26473 Comm: syz.5.6156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1853.055751][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1853.055767][T26473] Call Trace: [ 1853.055778][T26473] [ 1853.055790][T26473] dump_stack_lvl+0xe8/0x150 [ 1853.055834][T26473] should_fail_ex+0x46b/0x600 [ 1853.055876][T26473] ? __d_alloc+0x37/0x6f0 [ 1853.055904][T26473] should_failslab+0xa8/0x100 [ 1853.055943][T26473] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1853.055975][T26473] ? lockdep_hardirqs_on+0x7b/0x110 [ 1853.056011][T26473] ? __d_alloc+0x37/0x6f0 [ 1853.056045][T26473] __d_alloc+0x37/0x6f0 [ 1853.056077][T26473] d_alloc_pseudo+0x21/0xc0 [ 1853.056106][T26473] alloc_path_pseudo+0x107/0x220 [ 1853.056147][T26473] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1853.056194][T26473] alloc_file_pseudo+0xa8/0x1e0 [ 1853.056233][T26473] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1853.056280][T26473] __anon_inode_getfile+0x129/0x210 [ 1853.056366][T26473] io_uring_create+0x57f/0x990 [ 1853.056394][T26473] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1853.056436][T26473] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1853.056509][T26473] ? rcu_is_watching+0x16/0xb0 [ 1853.056558][T26473] do_syscall_64+0x166/0x520 [ 1853.056594][T26473] ? trace_irq_disable+0x3b/0x140 [ 1853.056625][T26473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.056650][T26473] ? clear_bhb_loop+0x70/0xc0 [ 1853.056680][T26473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.056705][T26473] RIP: 0033:0x7ff0bc3be159 [ 1853.056729][T26473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.056751][T26473] RSP: 002b:00007ff0ba615fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1853.056780][T26473] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007ff0bc3be159 [ 1853.056798][T26473] RDX: 0000200000000440 RSI: 0000200000000340 RDI: 0000000000004f0a [ 1853.056816][T26473] RBP: 00007ff0bc45506b R08: 0000000000000000 R09: 0000000000000000 [ 1853.056832][T26473] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 1853.056849][T26473] R13: 0000200000000480 R14: 00002000000003c0 R15: 00007ffc91f32488 [ 1853.056895][T26473] [ 1853.577379][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.921515][T26489] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6161'. [ 1853.968945][T13420] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1854.224987][T13420] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1854.234761][T13420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.234810][T13420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.234854][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.243820][T13420] usb 1-1: config 0 descriptor?? [ 1854.456076][T26486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.456707][T26486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.500884][T13420] usbhid 1-1:0.0: can't add hid device: -71 [ 1854.501020][T13420] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1854.673413][T13420] usb 1-1: USB disconnect, device number 119 [ 1855.018715][T25375] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1855.032213][T26501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1855.230760][T25375] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1855.242218][T25375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.608856][T13420] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1855.659969][T26501] sctp_transport_update_pmtu: 47 callbacks suppressed [ 1855.659995][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.660916][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.665424][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.666455][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.670093][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.671834][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.672804][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.705956][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.706996][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.707911][T26501] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1855.771345][T13420] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1855.773681][T13420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.773718][T13420] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.773761][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.891554][T13420] usb 1-1: config 0 descriptor?? [ 1856.128517][T25375] usb 2-1: Firmware version (0.0) predates our first public release. [ 1856.128551][T25375] usb 2-1: Please update to version 0.2 or newer [ 1856.386277][T25375] usb 2-1: USB disconnect, device number 8 [ 1856.737147][T13420] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1856.738896][T26486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.747365][T26486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.775728][T13420] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input214 [ 1857.047197][T13420] input: failed to attach handler kbd to device input214, error: -5 [ 1857.088836][T13420] usb 1-1: USB disconnect, device number 120 [ 1858.098919][T13420] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1858.251096][T13420] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1858.324720][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.489035][T25375] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1858.657408][T25375] usb 2-1: Using ep0 maxpacket: 8 [ 1858.678334][T25375] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1858.695305][T25375] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.695436][T25375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.751324][T13420] usb 1-1: Firmware version (0.0) predates our first public release. [ 1858.751355][T13420] usb 1-1: Please update to version 0.2 or newer [ 1858.752240][T13420] usb 1-1: Firmware: build  [ 1858.823560][T26541] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6171'. [ 1858.977413][T13420] usb 1-1: USB disconnect, device number 121 [ 1859.028999][ T5774] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1859.159231][T26144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1859.180254][ T5774] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1859.181536][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.181590][ T5774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1859.181616][ T5774] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1859.181633][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.181664][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.235253][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1859.238832][T26144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1859.391591][T25375] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1859.601551][T25375] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1859.620036][T25375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.620199][T25375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.641501][T25375] usb 6-1: config 0 descriptor?? [ 1859.688117][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1859.752918][T26144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1859.878047][T25375] usbhid 6-1:0.0: can't add hid device: -71 [ 1859.878141][T25375] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1859.910652][T25375] usb 6-1: USB disconnect, device number 69 [ 1859.913857][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1859.968119][T26144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1860.127446][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1860.468887][T25375] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1860.504697][T13420] usb 2-1: USB disconnect, device number 9 [ 1860.650226][T25375] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1860.667785][T25375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.667937][T25375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.721835][T25375] usb 6-1: config 0 descriptor?? [ 1860.816228][T26144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1860.926626][T26144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.123134][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.124071][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1861.217857][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.218081][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1861.963588][T13420] usb 3-1: USB disconnect, device number 27 [ 1862.348324][T25375] usbhid 6-1:0.0: can't add hid device: -71 [ 1862.348461][T25375] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1862.382109][T25375] usb 6-1: USB disconnect, device number 70 [ 1862.458892][T13420] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1862.610545][T13420] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1862.615241][T13420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.350116][T13420] usb 3-1: Firmware version (0.0) predates our first public release. [ 1863.350138][T13420] usb 3-1: Please update to version 0.2 or newer [ 1863.750634][T13420] usb 3-1: USB disconnect, device number 28 [ 1863.877555][T26598] netlink: 'syz.5.6181': attribute type 11 has an invalid length. [ 1863.877574][T26598] netlink: 3808 bytes leftover after parsing attributes in process `syz.5.6181'. [ 1864.265929][T26608] fuse: Bad value for 'fd' [ 1864.509263][T17138] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1864.568998][T13420] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1864.714843][T17138] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1864.717131][T17138] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.754154][T17138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.754191][T17138] usb 1-1: Product: syz [ 1864.754210][T17138] usb 1-1: Manufacturer: syz [ 1864.754228][T17138] usb 1-1: SerialNumber: syz [ 1864.755701][T13420] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1864.756969][T13420] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1864.757004][T13420] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1864.757025][T13420] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1864.757057][T13420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.769053][T17134] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1864.850780][T26600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1864.873568][T17138] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1864.951303][T17134] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1864.953004][T17134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.953063][T17134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1864.953090][T17134] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1864.953117][T17134] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1864.953166][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.303197][T26617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6187'. [ 1865.336443][T26617] bridge1: port 1(erspan0) entered blocking state [ 1865.336700][T26617] bridge1: port 1(erspan0) entered disabled state [ 1865.336930][T26617] erspan0: entered allmulticast mode [ 1865.342985][T26617] erspan0: entered promiscuous mode [ 1865.345237][T26617] bridge1: port 1(erspan0) entered blocking state [ 1865.345454][T26617] bridge1: port 1(erspan0) entered forwarding state [ 1865.393640][T26144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1865.507647][T26619] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6188'. [ 1865.577101][T26144] veth0_vlan: entered promiscuous mode [ 1865.613406][T26144] veth1_vlan: entered promiscuous mode [ 1865.659826][T26144] veth0_macvtap: entered promiscuous mode [ 1865.668005][T26144] veth1_macvtap: entered promiscuous mode [ 1865.696979][T26609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.697924][T26609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.698476][T26144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1865.724223][T17138] gspca_mr97310a: reg write [21] error -71 [ 1865.724322][T17138] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71 [ 1865.746378][T13420] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1865.771023][T13420] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input215 [ 1865.791050][T17138] usb 1-1: USB disconnect, device number 122 [ 1865.805105][T26144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1865.828923][ T5791] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1865.841252][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.841313][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.841412][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.841457][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.980167][ T5791] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1866.023462][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.023598][ T5791] usb 6-1: Product: syz [ 1866.023616][ T5791] usb 6-1: Manufacturer: syz [ 1866.023631][ T5791] usb 6-1: SerialNumber: syz [ 1866.211596][ T5791] usb 6-1: config 0 descriptor?? [ 1866.289188][ T5791] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1866.634548][T26619] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1867.183164][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1867.183176][T17134] usb 3-1: USB disconnect, device number 29 [ 1867.240514][ T5791] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input216 [ 1867.492463][ T5791] usb 6-1: USB disconnect, device number 71 [ 1867.706922][T17129] usb 2-1: USB disconnect, device number 10 [ 1867.895194][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.895219][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.217080][T26647] netlink: 'syz.0.6193': attribute type 11 has an invalid length. [ 1868.217105][T26647] netlink: 3808 bytes leftover after parsing attributes in process `syz.0.6193'. [ 1868.311110][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.313130][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.351080][T26651] fuse: Bad value for 'fd' [ 1868.369256][ T5791] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1868.516757][T26654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6196'. [ 1868.539360][ T5791] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1868.545610][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.719065][T26654] bridge8: port 1(erspan0) entered blocking state [ 1868.719205][T26654] bridge8: port 1(erspan0) entered disabled state [ 1868.719401][T26654] erspan0: entered allmulticast mode [ 1868.726873][T26654] erspan0: entered promiscuous mode [ 1868.927139][T26664] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1868.983782][T26659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1868.984174][T26657] erspan0: left allmulticast mode [ 1868.984207][T26657] erspan0: left promiscuous mode [ 1868.984630][T26657] bridge8: port 1(erspan0) entered disabled state [ 1869.237803][ T5791] usb 6-1: Firmware version (0.0) predates our first public release. [ 1869.237854][ T5791] usb 6-1: Please update to version 0.2 or newer [ 1869.310798][T26669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6076'. [ 1869.315297][T26657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1869.606071][ T5791] usb 6-1: USB disconnect, device number 72 [ 1869.938868][ T5774] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1870.093279][ T5774] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1870.094780][ T5774] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1870.094812][ T5774] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1870.094840][ T5774] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1870.094879][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.235688][T26675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1870.666846][T16692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1870.722141][T16692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1870.742357][T26683] netlink: 'syz.1.6204': attribute type 11 has an invalid length. [ 1870.742381][T26683] netlink: 3808 bytes leftover after parsing attributes in process `syz.1.6204'. [ 1870.751165][T16692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1870.792756][T16692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1870.803175][T16692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1870.907795][ T7744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1870.908199][ T7744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1870.908594][ T7744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1870.945480][ T7744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1870.946372][ T7744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1871.076187][ T5774] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1871.081807][ T5774] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input217 [ 1872.042069][T26703] FAULT_INJECTION: forcing a failure. [ 1872.042069][T26703] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.042115][T26703] CPU: 1 UID: 0 PID: 26703 Comm: syz.0.6208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1872.042150][T26703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1872.042166][T26703] Call Trace: [ 1872.042177][T26703] [ 1872.042189][T26703] dump_stack_lvl+0xe8/0x150 [ 1872.042230][T26703] should_fail_ex+0x46b/0x600 [ 1872.042268][T26703] should_failslab+0xa8/0x100 [ 1872.042308][T26703] __kmalloc_cache_noprof+0xa1/0x680 [ 1872.042341][T26703] ? __io_uring_add_tctx_node+0x186/0x630 [ 1872.042375][T26703] ? __io_uring_add_tctx_node+0x186/0x630 [ 1872.042433][T26703] __io_uring_add_tctx_node+0x186/0x630 [ 1872.042476][T26703] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1872.042516][T26703] ? __anon_inode_getfile+0x16c/0x210 [ 1872.042555][T26703] io_uring_create+0x596/0x990 [ 1872.042585][T26703] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1872.042626][T26703] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1872.042688][T26703] ? __fget_files+0x2a/0x420 [ 1872.042730][T26703] do_syscall_64+0x166/0x520 [ 1872.042768][T26703] ? trace_irq_disable+0x3b/0x140 [ 1872.042799][T26703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.042824][T26703] ? clear_bhb_loop+0x70/0xc0 [ 1872.042855][T26703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.042880][T26703] RIP: 0033:0x7f82161de159 [ 1872.042903][T26703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.042925][T26703] RSP: 002b:00007f8214435fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1872.042953][T26703] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f82161de159 [ 1872.042972][T26703] RDX: 0000200000000440 RSI: 0000200000000340 RDI: 0000000000004f0a [ 1872.042989][T26703] RBP: 00007f821627506b R08: 0000000000000000 R09: 0000000000000000 [ 1872.043005][T26703] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 1872.043023][T26703] R13: 0000200000000480 R14: 00002000000003c0 R15: 00007fffc173e568 [ 1872.043059][T26703] [ 1872.879580][ T5774] usb 4-1: USB disconnect, device number 27 [ 1872.879665][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1873.440160][ T7744] Bluetooth: hci2: command tx timeout [ 1873.486229][T26726] netlink: 'syz.1.6214': attribute type 11 has an invalid length. [ 1873.486256][T26726] netlink: 3808 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1873.498847][T13420] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1873.519026][ T5774] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1873.649899][T13420] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1873.651604][T13420] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 1873.651636][T13420] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.651651][T13420] usb 1-1: config 0 has no interface number 0 [ 1873.651687][T13420] usb 1-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1873.651706][T13420] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1873.651739][T13420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.669050][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 1873.672436][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1873.676796][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1873.676890][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1873.676963][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1873.677038][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1873.677184][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.691413][T26727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6213'. [ 1873.820460][T13420] usb 1-1: config 0 descriptor?? [ 1873.855605][T26717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1873.946422][ T5774] usb 4-1: GET_CAPABILITIES returned 0 [ 1873.946460][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 1873.996442][T13420] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1874.108042][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6211'. [ 1874.147916][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1874.147994][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1874.148053][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1874.384415][T17134] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1874.386526][ T5774] usb 1-1: USB disconnect, device number 123 [ 1874.511436][ T214] usb 1-1: Failed to submit usb control message: -19 [ 1874.511475][ T214] usb 1-1: unable to send the bmi data to the device: -19 [ 1874.511490][ T214] usb 1-1: unable to get target info from device [ 1874.511503][ T214] usb 1-1: could not get target info (-19) [ 1874.576387][T17134] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1874.577598][ T214] usb 1-1: could not probe fw (-19) [ 1874.598383][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.171625][T17134] usb 2-1: Firmware version (0.0) predates our first public release. [ 1875.171647][T17134] usb 2-1: Please update to version 0.2 or newer [ 1875.172352][T17134] usb 2-1: Firmware: build  [ 1875.523335][ T7744] Bluetooth: hci2: command tx timeout [ 1875.642878][T17134] usb 2-1: USB disconnect, device number 11 [ 1876.195297][T26750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6218'. [ 1876.259323][ T5774] usb 4-1: USB disconnect, device number 28 [ 1876.277454][T26751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6218'. [ 1877.228872][ T5774] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1877.340075][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1877.397624][T26765] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1877.448934][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 1877.450099][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1877.451151][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1877.451177][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1877.451197][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1877.451224][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1877.451256][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.500997][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1877.506243][ T10] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1877.506397][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1877.506487][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1877.506612][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.532809][T26761] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1877.598944][ T7744] Bluetooth: hci2: command tx timeout [ 1877.807040][ T5774] usb 4-1: GET_CAPABILITIES returned 0 [ 1877.807086][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 1877.976311][T26768] fuse: Invalid rootmode [ 1878.030613][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1878.030708][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1878.030775][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1878.091811][T17134] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1878.168133][T26771] netlink: 'syz.0.6225': attribute type 11 has an invalid length. [ 1878.168151][T26771] netlink: 3808 bytes leftover after parsing attributes in process `syz.0.6225'. [ 1878.256696][T17134] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1878.280195][T17134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.280226][T17134] usb 2-1: Product: syz [ 1878.280247][T17134] usb 2-1: Manufacturer: syz [ 1878.280260][T17134] usb 2-1: SerialNumber: syz [ 1878.285833][T17134] usb 2-1: config 0 descriptor?? [ 1878.323114][T17134] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1878.370631][ T10] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1878.373898][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input218 [ 1878.508819][ T5791] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1878.662005][ T5791] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1878.664654][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.664697][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.724437][T26765] netdevsim netdevsim1: Firmware load for '../file0/file0' refused, path contains '..' component [ 1878.762402][ T5791] usb 1-1: config 0 descriptor?? [ 1878.823870][T17134] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input219 [ 1879.000279][T17134] usb 2-1: USB disconnect, device number 12 [ 1879.045387][ T5791] usbhid 1-1:0.0: can't add hid device: -71 [ 1879.045817][ T5791] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1879.171652][ T5791] usb 1-1: USB disconnect, device number 124 [ 1879.629183][ T5791] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1879.673724][ T154] team0: Port device netdevsim1 removed [ 1879.678979][ T7744] Bluetooth: hci2: command tx timeout [ 1879.830287][ T5791] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1879.831964][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.832107][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.944669][ T5791] usb 1-1: config 0 descriptor?? [ 1880.078526][T17134] usb 6-1: USB disconnect, device number 73 [ 1880.078592][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1880.742372][T17129] usb 4-1: USB disconnect, device number 29 [ 1880.960629][T17134] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1881.111513][T17134] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1881.113421][T17134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.113476][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.194713][T17134] usb 6-1: config 0 descriptor?? [ 1881.248924][T17129] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1881.378589][T26680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.381286][T26680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.382231][T26680] bridge_slave_0: entered allmulticast mode [ 1881.408042][T17129] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1881.430060][T17129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.430160][T17129] usb 4-1: Product: syz [ 1881.430180][T17129] usb 4-1: Manufacturer: syz [ 1881.430197][T17129] usb 4-1: SerialNumber: syz [ 1881.477164][T26781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.477777][T26680] bridge_slave_0: entered promiscuous mode [ 1881.500875][T26781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.504831][T17129] usb 4-1: config 0 descriptor?? [ 1881.544983][T17134] usbhid 6-1:0.0: can't add hid device: -71 [ 1881.545139][T17134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1881.581889][T26680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.582164][T26680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.582374][T26680] bridge_slave_1: entered allmulticast mode [ 1881.621504][T17134] usb 6-1: USB disconnect, device number 74 [ 1881.626949][T17129] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1881.645923][ T5791] usbhid 1-1:0.0: can't add hid device: -71 [ 1881.646121][ T5791] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1881.715942][T26680] bridge_slave_1: entered promiscuous mode [ 1881.746695][ T5791] usb 1-1: USB disconnect, device number 125 [ 1881.859487][T26796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1881.917654][T26797] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1881.979915][T26680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1881.984692][T26680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.076454][T26680] team0: Port device team_slave_0 added [ 1882.086412][T26680] team0: Port device team_slave_1 added [ 1882.142454][T26680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1882.142474][T26680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1882.142506][T26680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1882.144924][T26680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1882.144942][T26680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1882.144975][T26680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1882.178897][T17134] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1882.380000][T17134] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1882.382518][T17134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.382570][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.443498][T17134] usb 6-1: config 0 descriptor?? [ 1882.993768][T26680] hsr_slave_0: entered promiscuous mode [ 1883.010452][T26680] hsr_slave_1: entered promiscuous mode [ 1883.011791][T26680] debugfs: 'hsr0' already exists in 'hsr' [ 1883.011821][T26680] Cannot create hsr debugfs directory [ 1883.234778][T26813] netlink: 'syz.0.6235': attribute type 11 has an invalid length. [ 1883.234798][T26813] netlink: 3808 bytes leftover after parsing attributes in process `syz.0.6235'. [ 1883.320439][T17134] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1883.342203][T26781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.345097][T26781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.365960][T17134] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input220 [ 1883.616362][T17134] usb 6-1: USB disconnect, device number 75 [ 1883.616462][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1883.945689][ T5791] usb 4-1: USB disconnect, device number 30 [ 1884.003043][ T5774] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1884.170900][ T5774] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1884.176139][ T5774] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1884.176169][ T5774] usb 1-1: config 1 has no interface number 0 [ 1884.176215][ T5774] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1884.176246][ T5774] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1884.176276][ T5774] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.243326][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.243362][ T5774] usb 1-1: Product: syz [ 1884.243379][ T5774] usb 1-1: Manufacturer: syz [ 1884.243397][ T5774] usb 1-1: SerialNumber: syz [ 1884.346881][T26817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1884.399987][ T5791] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1884.576706][ T5791] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1884.593408][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.596691][T26817] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1884.685079][ T5791] usb 4-1: config 0 descriptor?? [ 1884.722124][ T5791] cp210x 4-1:0.0: cp210x converter detected [ 1884.868823][T17134] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1885.046900][T17134] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1885.068218][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.163721][ T5791] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1885.164731][ T5791] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1885.164760][ T5791] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1885.192220][ T5774] usb 1-1: Incompatible driver and firmware versions [ 1885.258921][ T5791] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1885.391910][ T5791] usb 4-1: USB disconnect, device number 31 [ 1885.576706][T17134] usb 6-1: Firmware version (0.0) predates our first public release. [ 1885.576737][T17134] usb 6-1: Please update to version 0.2 or newer [ 1885.617040][ T5791] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1885.625340][ T5791] cp210x 4-1:0.0: device disconnected [ 1885.777617][T17134] usb 6-1: Firmware: build  [ 1886.043833][T17134] usb 6-1: USB disconnect, device number 76 [ 1886.178917][T17129] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1886.291610][T26834] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1886.320617][T26837] bridge_slave_0: left allmulticast mode [ 1886.320658][T26837] bridge_slave_0: left promiscuous mode [ 1886.320933][T26837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.333430][T17129] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1886.341264][T17129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.341467][T17129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.464233][T17129] usb 2-1: config 0 descriptor?? [ 1886.625264][T26837] bridge_slave_1: left allmulticast mode [ 1886.625304][T26837] bridge_slave_1: left promiscuous mode [ 1886.625848][T26837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.683827][T17129] usbhid 2-1:0.0: can't add hid device: -71 [ 1886.683942][T17129] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1886.687351][T17129] usb 2-1: USB disconnect, device number 13 [ 1886.722577][T26841] fuse: Bad value for 'rootmode' [ 1886.903728][T26837] bond0: (slave bond_slave_0): Releasing backup interface [ 1886.982619][ T5791] usb 1-1: USB disconnect, device number 126 [ 1887.003746][T26837] bond0: (slave bond_slave_1): Releasing backup interface [ 1887.127465][T26837] team0: Port device team_slave_0 removed [ 1887.174772][T26837] team0: Port device team_slave_1 removed [ 1887.175971][T26837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.176002][T26837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.179037][T17129] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1887.231492][T26837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.231516][T26837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.282115][T26837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1887.360662][T17129] usb 2-1: New USB device found, idVendor=0958, idProduct=3333, bcdDevice= 0.40 [ 1887.361891][T17129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.361946][T17129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.406588][T17129] usb 2-1: config 0 descriptor?? [ 1887.588635][ T154] erspan0: left allmulticast mode [ 1887.589342][ T154] erspan0: left promiscuous mode [ 1887.590333][ T154] bridge5: port 1(erspan0) entered disabled state [ 1888.568795][T25375] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1888.720151][T25375] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1888.721808][T25375] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1888.721839][T25375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.721862][T25375] usb 4-1: config 0 has no interface number 0 [ 1888.721920][T25375] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1888.721946][T25375] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1888.722004][T25375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.804422][T25375] usb 4-1: config 0 descriptor?? [ 1888.821410][T26861] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1888.856608][T25375] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1888.967210][T17129] usbhid 2-1:0.0: can't add hid device: -71 [ 1888.967356][T17129] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1888.998421][T17129] usb 2-1: USB disconnect, device number 14 [ 1889.075627][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6247'. [ 1889.154972][T17131] usb 4-1: USB disconnect, device number 32 [ 1889.172312][T26851] usb 4-1: Failed to submit usb control message: -71 [ 1889.172353][T26851] usb 4-1: unable to send the bmi data to the device: -71 [ 1889.172373][T26851] usb 4-1: unable to get target info from device [ 1889.172391][T26851] usb 4-1: could not get target info (-71) [ 1889.172654][T26851] usb 4-1: could not probe fw (-71) [ 1889.776178][T26875] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6249'. [ 1890.039065][T17138] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1890.196135][T17138] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1890.218803][T17138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.218836][T17138] usb 4-1: Product: syz [ 1890.218855][T17138] usb 4-1: Manufacturer: syz [ 1890.218872][T17138] usb 4-1: SerialNumber: syz [ 1890.280806][T17138] usb 4-1: config 0 descriptor?? [ 1890.300920][ T154] bond0 (unregistering): Released all slaves [ 1890.311569][T17138] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1890.726363][T26875] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 1890.761640][T17138] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input221 [ 1891.100703][T17138] usb 4-1: USB disconnect, device number 33 [ 1891.298881][ T154] tipc: Disabling bearer [ 1891.299067][ T154] tipc: Left network mode [ 1891.618838][T17134] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1891.692962][T26888] fuse: Bad value for 'rootmode' [ 1891.789496][T17134] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1891.795206][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.808835][ T5791] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1891.837349][T17134] usb 6-1: config 0 descriptor?? [ 1891.857445][T17134] cp210x 6-1:0.0: cp210x converter detected [ 1891.959690][ T5791] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1891.961238][ T5791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.961296][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1891.961323][ T5791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1891.961351][ T5791] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1891.961399][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.294747][T17134] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1892.295676][T17134] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1892.295704][T17134] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 1892.337211][T17134] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1892.540490][T17134] usb 6-1: USB disconnect, device number 77 [ 1892.547411][T17134] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1892.551171][T17134] cp210x 6-1:0.0: device disconnected [ 1893.491248][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6255'. [ 1893.719294][T17131] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1893.878936][T17131] usb 4-1: Using ep0 maxpacket: 16 [ 1893.879843][T17131] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1893.881459][T17131] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1893.881487][T17131] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1893.881511][T17131] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.881533][T17131] usb 4-1: config 166 has no interface number 0 [ 1893.881551][T17131] usb 4-1: config 166 has no interface number 1 [ 1893.881610][T17131] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1893.881635][T17131] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1893.881675][T17131] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1893.881702][T17131] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1893.881732][T17131] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1893.881757][T17131] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1893.881779][T17131] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1893.886138][T17131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.886166][T17131] usb 4-1: Product: syz [ 1893.886183][T17131] usb 4-1: Manufacturer: syz [ 1893.886200][T17131] usb 4-1: SerialNumber: syz [ 1894.555326][T17131] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1894.782506][T17131] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1894.817345][T13420] usb 1-1: USB disconnect, device number 127 [ 1895.135980][T17131] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1895.136018][T17131] uvcvideo 4-1:166.34: No valid video chain found. [ 1895.151222][T17131] usb 4-1: USB disconnect, device number 34 [ 1895.199521][T26929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1896.059734][T17131] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1896.218913][T17131] usb 1-1: Using ep0 maxpacket: 8 [ 1896.219740][T17131] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1896.221441][T17131] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1896.221467][T17131] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1896.221486][T17131] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1896.221506][T17131] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1896.221536][T17131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.600261][T17131] usb 1-1: GET_CAPABILITIES returned 0 [ 1896.600300][T17131] usbtmc 1-1:16.0: can't read capabilities [ 1896.789952][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1896.865001][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1896.865119][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1897.042355][ T154] hsr_slave_0: left promiscuous mode [ 1897.091339][ T154] hsr_slave_1: left promiscuous mode [ 1897.504291][T26950] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6262'. [ 1897.758911][ T5791] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1897.909947][ T5791] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1897.915448][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.915481][ T5791] usb 6-1: Product: syz [ 1897.915498][ T5791] usb 6-1: Manufacturer: syz [ 1897.915514][ T5791] usb 6-1: SerialNumber: syz [ 1897.974488][ T5791] usb 6-1: config 0 descriptor?? [ 1897.993626][ T5791] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1898.382259][T26950] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 1898.478392][ T5791] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input222 [ 1898.603132][T17131] usb 6-1: USB disconnect, device number 78 [ 1899.039690][ T5791] usb 1-1: USB disconnect, device number 2 [ 1900.470795][T26975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6268'. [ 1900.831019][T26981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1900.833454][T26981] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1901.386391][T26989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1901.444960][T26990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1902.536377][T26991] bridge9: port 1(erspan0) entered blocking state [ 1902.536490][T26991] bridge9: port 1(erspan0) entered disabled state [ 1902.536654][T26991] erspan0: entered allmulticast mode [ 1902.561081][T26991] erspan0: entered promiscuous mode [ 1902.635792][T26992] erspan0: left allmulticast mode [ 1902.635828][T26992] erspan0: left promiscuous mode [ 1902.636154][T26992] bridge9: port 1(erspan0) entered disabled state [ 1902.838931][T26992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1903.009186][T17134] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1903.279738][T17134] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1903.282135][T17134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.282191][T17134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1903.282217][T17134] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1903.282244][T17134] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1903.282290][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.769683][T17134] gud 2-1:1.0: probe with driver gud failed with error -5 [ 1904.238604][T27032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1905.869249][T17134] usb 2-1: USB disconnect, device number 15 [ 1905.898822][ T5791] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1906.057429][ T5791] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1906.070568][ T5791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.070619][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1906.070643][ T5791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1906.070667][ T5791] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1906.070708][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.357942][T26680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1906.542285][T26680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1906.543480][T26680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1906.615254][T26680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1906.750269][T27075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1906.767392][ T5791] gud 4-1:1.0: probe with driver gud failed with error -5 [ 1906.789939][T26680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1906.855337][T26680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1906.871173][T26680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1906.992203][T26680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1908.088009][T26680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1908.252204][T26680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1908.276528][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.276793][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1908.320874][T26690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.321077][T26690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.510069][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1908.594381][T27117] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1908.766783][T17134] usb 4-1: USB disconnect, device number 35 [ 1908.928268][T27118] erspan0: left allmulticast mode [ 1908.928295][T27118] erspan0: left promiscuous mode [ 1908.928514][T27118] bridge1: port 1(erspan0) entered disabled state [ 1908.957547][T27121] FAULT_INJECTION: forcing a failure. [ 1908.957547][T27121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1908.957594][T27121] CPU: 1 UID: 0 PID: 27121 Comm: syz.3.6288 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1908.957626][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1908.957637][T27121] Call Trace: [ 1908.957644][T27121] [ 1908.957653][T27121] dump_stack_lvl+0xe8/0x150 [ 1908.957683][T27121] should_fail_ex+0x46b/0x600 [ 1908.957709][T27121] _copy_from_user+0x2d/0xb0 [ 1908.957734][T27121] __sys_bpf+0x2e7/0xd90 [ 1908.957766][T27121] ? __pfx___sys_bpf+0x10/0x10 [ 1908.957792][T27121] ? do_futex+0x3e7/0x4e0 [ 1908.957855][T27121] ? ksys_write+0x248/0x270 [ 1908.957875][T27121] ? __pfx___se_sys_futex+0x10/0x10 [ 1908.957894][T27121] ? __pfx_ksys_write+0x10/0x10 [ 1908.957917][T27121] __x64_sys_bpf+0xba/0xd0 [ 1908.957940][T27121] do_syscall_64+0x166/0x520 [ 1908.957967][T27121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.957983][T27121] ? clear_bhb_loop+0x70/0xc0 [ 1908.958004][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.958020][T27121] RIP: 0033:0x7fe84b57e159 [ 1908.958039][T27121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.958053][T27121] RSP: 002b:00007fe8497d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1908.958071][T27121] RAX: ffffffffffffffda RBX: 00007fe84b805fa0 RCX: 00007fe84b57e159 [ 1908.958084][T27121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 1908.958094][T27121] RBP: 00007fe84b61506b R08: 0000000000000000 R09: 0000000000000000 [ 1908.958104][T27121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1908.958114][T27121] R13: 00007fe84b806038 R14: 00007fe84b805fa0 R15: 00007ffd4494ad58 [ 1908.958139][T27121] [ 1909.355249][T27118] bridge2: port 1(erspan0) entered blocking state [ 1909.355343][T27118] bridge2: port 1(erspan0) entered disabled state [ 1909.355461][T27118] erspan0: entered allmulticast mode [ 1909.386722][T27118] erspan0: entered promiscuous mode [ 1909.396020][T27118] bridge2: port 1(erspan0) entered blocking state [ 1909.396157][T27118] bridge2: port 1(erspan0) entered forwarding state [ 1909.427508][T27119] erspan0: left allmulticast mode [ 1909.427546][T27119] erspan0: left promiscuous mode [ 1909.427824][T27119] bridge2: port 1(erspan0) entered disabled state [ 1909.647906][T27119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1909.868834][T17134] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1910.028911][T17134] usb 2-1: Using ep0 maxpacket: 8 [ 1910.029919][T17134] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1910.031516][T17134] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1910.031549][T17134] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1910.031575][T17134] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1910.031598][T17134] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1910.031641][T17134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.038869][T17138] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1910.161834][T17134] usbtmc 2-1:16.0: bulk endpoints not found [ 1910.215285][T17138] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1910.235736][T17138] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.235769][T17138] usb 6-1: Product: syz [ 1910.235788][T17138] usb 6-1: Manufacturer: syz [ 1910.235806][T17138] usb 6-1: SerialNumber: syz [ 1910.285391][T17138] usb 6-1: config 0 descriptor?? [ 1910.308382][T17138] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1911.108868][T17134] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1911.259896][T17134] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1911.262050][T17134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.262103][T17134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.306842][T17134] usb 1-1: config 0 descriptor?? [ 1911.496756][T26680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.520814][T17134] usbhid 1-1:0.0: can't add hid device: -71 [ 1911.520942][T17134] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1911.549232][T17138] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1911.550932][T17134] usb 1-1: USB disconnect, device number 3 [ 1911.636582][T26680] veth0_vlan: entered promiscuous mode [ 1911.657222][T26680] veth1_vlan: entered promiscuous mode [ 1911.700457][T17138] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1911.704080][T17138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.733463][T26680] veth0_macvtap: entered promiscuous mode [ 1911.773307][T26680] veth1_macvtap: entered promiscuous mode [ 1911.827430][T26680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.852479][T26680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.889895][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.889950][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.889994][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.890038][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.101234][T17134] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1912.233543][T17138] usb 4-1: Firmware version (0.0) predates our first public release. [ 1912.233576][T17138] usb 4-1: Please update to version 0.2 or newer [ 1912.279271][T17134] usb 1-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 1912.281256][T17134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.281308][T17134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.346787][T17134] usb 1-1: config 0 descriptor?? [ 1912.696880][ T5774] usb 2-1: USB disconnect, device number 16 [ 1912.905162][T27156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1912.991459][T27157] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6297'. [ 1913.173682][T13420] usb 6-1: USB disconnect, device number 79 [ 1913.536156][T17138] usb 4-1: USB disconnect, device number 36 [ 1913.942451][T17134] usbhid 1-1:0.0: can't add hid device: -71 [ 1913.942670][T17134] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1913.978448][T17134] usb 1-1: USB disconnect, device number 4 [ 1914.548551][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6302'. [ 1914.597069][T27172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6302'. [ 1914.672256][T27172] bridge3: port 1(erspan0) entered blocking state [ 1914.672393][T27172] bridge3: port 1(erspan0) entered disabled state [ 1914.672621][T27172] erspan0: entered allmulticast mode [ 1914.705621][T27172] erspan0: entered promiscuous mode [ 1914.713880][T27172] bridge3: port 1(erspan0) entered blocking state [ 1914.715630][T27172] bridge3: port 1(erspan0) entered forwarding state [ 1914.793555][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.793581][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.918963][T17134] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1914.961561][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.020523][T17138] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1915.078991][T17134] usb 2-1: Using ep0 maxpacket: 16 [ 1915.079842][T17134] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1915.080508][T17134] usb 2-1: config 0 has no interfaces? [ 1915.085010][T17134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.085040][T17134] usb 2-1: Product: syz [ 1915.085057][T17134] usb 2-1: Manufacturer: syz [ 1915.085074][T17134] usb 2-1: SerialNumber: syz [ 1915.137410][T17134] usb 2-1: config 0 descriptor?? [ 1915.210855][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1915.210879][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.248794][T17138] usb 4-1: device descriptor read/64, error -71 [ 1915.488888][T17138] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1915.618910][T17138] usb 4-1: device descriptor read/64, error -71 [ 1915.639161][ T5791] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1915.679083][T17134] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1915.729131][T17138] usb usb4-port1: attempt power cycle [ 1915.790850][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 1915.793262][ T5791] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1915.794901][ T5791] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1915.794928][ T5791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1915.794946][ T5791] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1915.794963][ T5791] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1915.794993][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.871845][T17134] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 1915.874917][ T5791] usbtmc 1-1:16.0: bulk endpoints not found [ 1915.876877][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.038824][T13420] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1916.108845][T17138] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1916.129533][T17138] usb 4-1: device descriptor read/8, error -71 [ 1916.190723][T13420] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1916.197158][T13420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.197191][T13420] usb 3-1: Product: syz [ 1916.197210][T13420] usb 3-1: Manufacturer: syz [ 1916.197228][T13420] usb 3-1: SerialNumber: syz [ 1916.208561][T13420] usb 3-1: config 0 descriptor?? [ 1916.231091][T13420] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1916.344286][T17134] usb 6-1: Firmware version (0.0) predates our first public release. [ 1916.344319][T17134] usb 6-1: Please update to version 0.2 or newer [ 1916.368916][T17138] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1916.399971][T17138] usb 4-1: device descriptor read/8, error -71 [ 1916.509214][T17138] usb usb4-port1: unable to enumerate USB device [ 1916.545110][T17134] usb 6-1: Firmware: build [ 1916.763716][T17134] usb 6-1: USB disconnect, device number 80 [ 1916.878916][T17138] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1917.090950][T17138] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1917.092498][T17138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.092522][T17138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.092550][T17138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.096825][T17138] usb 4-1: config 0 descriptor?? [ 1917.365415][T27196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.366099][T27196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.395988][T17138] usbhid 4-1:0.0: can't add hid device: -71 [ 1917.396120][T17138] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1917.412262][T17138] usb 4-1: USB disconnect, device number 41 [ 1917.599015][T17134] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1917.708501][T17131] usb 2-1: USB disconnect, device number 17 [ 1917.779618][T17134] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1917.781221][T17134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.781264][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.821126][T17134] usb 6-1: config 0 descriptor?? [ 1917.878950][ T5774] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1918.041786][ T5774] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1918.045312][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.045792][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.045859][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.091197][T17134] usbhid 6-1:0.0: can't add hid device: -71 [ 1918.091358][T17134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1918.136046][T17134] usb 6-1: USB disconnect, device number 81 [ 1918.149669][ T5774] usb 4-1: config 0 descriptor?? [ 1918.465606][ T10] usb 1-1: USB disconnect, device number 5 [ 1918.588984][T17134] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1918.740932][T17134] usb 6-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 1918.747086][T17134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.747154][T17134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.797080][T17134] usb 6-1: config 0 descriptor?? [ 1918.871186][ T10] usb 3-1: USB disconnect, device number 30 [ 1918.960122][ T5774] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1918.963260][T27196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.965529][T27196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.008849][ T5774] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input223 [ 1919.069659][ T5774] input: failed to attach handler kbd to device input223, error: -5 [ 1919.073980][T27209] ======================================================= [ 1919.073980][T27209] WARNING: The mand mount option has been deprecated and [ 1919.073980][T27209] and is ignored by this kernel. Remove the mand [ 1919.073980][T27209] option from the mount to silence this warning. [ 1919.073980][T27209] ======================================================= [ 1919.177813][ T5774] usb 4-1: USB disconnect, device number 42 [ 1919.940853][T16692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1919.944501][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1920.005790][T16692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1920.051311][T16692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1920.053681][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1920.110990][T16692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1920.181270][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1920.181355][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1920.251095][T16692] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1920.288749][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1920.289509][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1920.292121][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1920.292152][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1920.292177][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1920.292201][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1920.292240][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.606560][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 1920.606614][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1921.000792][T17134] usbhid 6-1:0.0: can't add hid device: -71 [ 1921.000930][T17134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1921.089380][T17134] usb 6-1: USB disconnect, device number 82 [ 1921.211289][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6319'. [ 1921.281959][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6319'. [ 1921.512552][T27231] erspan0: left allmulticast mode [ 1921.512590][T27231] erspan0: left promiscuous mode [ 1921.513010][T27231] bridge3: port 1(erspan0) entered disabled state [ 1921.704936][T27231] bridge4: port 1(erspan0) entered blocking state [ 1921.705097][T27231] bridge4: port 1(erspan0) entered disabled state [ 1921.705272][T27231] erspan0: entered allmulticast mode [ 1921.707734][T27231] erspan0: entered promiscuous mode [ 1921.717663][T27231] bridge4: port 1(erspan0) entered blocking state [ 1921.718122][T27231] bridge4: port 1(erspan0) entered forwarding state [ 1921.761921][T27232] erspan0: left allmulticast mode [ 1921.761962][T27232] erspan0: left promiscuous mode [ 1921.762259][T27232] bridge4: port 1(erspan0) entered disabled state [ 1921.974880][T27232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1922.268868][ T5791] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1922.518878][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 1922.525579][ T5791] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1922.526640][ T5791] usb 4-1: config 0 has no interfaces? [ 1922.559157][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.559273][ T5791] usb 4-1: Product: syz [ 1922.559291][ T5791] usb 4-1: Manufacturer: syz [ 1922.559307][ T5791] usb 4-1: SerialNumber: syz [ 1922.592693][ T5791] usb 4-1: config 0 descriptor?? [ 1922.682105][T17138] usb 2-1: USB disconnect, device number 18 [ 1922.884375][T27255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1922.886026][T27255] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1922.958791][ C0] ------------[ cut here ]------------ [ 1922.958809][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 1922.958947][ C0] WARNING: kernel/workqueue.c:2353 at __queue_work+0xdc4/0x1120, CPU#0: ktimers/0/16 [ 1922.980705][ C0] Modules linked in: [ 1922.984661][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1922.994265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1923.004371][ C0] RIP: 0010:__queue_work+0xde1/0x1120 [ 1923.009812][ C0] Code: 81 c3 68 01 00 00 4c 8d 35 6c 90 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 09 5b a4 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1923.029464][ C0] RSP: 0018:ffffc90000157988 EFLAGS: 00010046 [ 1923.035645][ C0] RAX: 1ffff1100c573153 RBX: ffff888062fce968 RCX: ffff88801cac0000 [ 1923.043676][ C0] RDX: ffff888062fce968 RSI: ffffffff8a482300 RDI: ffffffff8fb4be20 [ 1923.051710][ C0] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1923.059730][ C0] R10: dffffc0000000000 R11: ffffffff818e34e0 R12: dffffc0000000000 [ 1923.067739][ C0] R13: 0000000000000008 R14: ffffffff8fb4be20 R15: ffff888062b98a80 [ 1923.075767][ C0] FS: 0000000000000000(0000) GS:ffff888125bc8000(0000) knlGS:0000000000000000 [ 1923.084765][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1923.091401][ C0] CR2: 0000200000003000 CR3: 000000005fc06000 CR4: 00000000003526f0 [ 1923.099435][ C0] Call Trace: [ 1923.102754][ C0] [ 1923.105738][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1923.111224][ C0] call_timer_fn+0x18d/0x5f0 [ 1923.115887][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.121745][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1923.126475][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1923.131661][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.137556][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1923.142732][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.148640][ C0] __run_timer_base+0x73c/0x9b0 [ 1923.153582][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1923.159046][ C0] ? lock_acquire+0x115/0x350 [ 1923.163790][ C0] run_timer_softirq+0xb7/0x170 [ 1923.168724][ C0] handle_softirqs+0x1da/0x6d0 [ 1923.173569][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1923.178713][ C0] run_ktimerd+0x6a/0x100 [ 1923.183113][ C0] smpboot_thread_fn+0x565/0xa70 [ 1923.188122][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1923.193235][ C0] kthread+0x38b/0x470 [ 1923.197357][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1923.202883][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.207532][ C0] ret_from_fork+0x514/0xb70 [ 1923.212219][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.217391][ C0] ? __switch_to+0xc89/0x1420 [ 1923.222186][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.226831][ C0] ret_from_fork_asm+0x1a/0x30 [ 1923.231672][ C0] [ 1923.234742][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1923.242073][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1923.251677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1923.261784][ C0] Call Trace: [ 1923.265138][ C0] [ 1923.268114][ C0] vpanic+0x56d/0xa60 [ 1923.272180][ C0] ? __pfx__printk+0x10/0x10 [ 1923.276837][ C0] ? __pfx_vpanic+0x10/0x10 [ 1923.281390][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1923.286778][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1923.292058][ C0] panic+0xc5/0xd0 [ 1923.295829][ C0] ? __pfx_panic+0x10/0x10 [ 1923.300334][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1923.305344][ C0] __warn+0x315/0x4c0 [ 1923.309375][ C0] ? __queue_work+0xdc4/0x1120 [ 1923.314196][ C0] ? __queue_work+0xdc4/0x1120 [ 1923.319032][ C0] __report_bug+0x276/0x570 [ 1923.323688][ C0] ? __queue_work+0xdc4/0x1120 [ 1923.328527][ C0] ? __pfx___report_bug+0x10/0x10 [ 1923.333627][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1923.338982][ C0] ? enqueue_task+0x341/0x410 [ 1923.343735][ C0] ? look_up_lock_class+0x57/0x110 [ 1923.348951][ C0] ? register_lock_class+0x31/0x2e0 [ 1923.354225][ C0] report_bug_entry+0x19b/0x290 [ 1923.359146][ C0] ? __queue_work+0xde1/0x1120 [ 1923.363954][ C0] ? __queue_work+0xde6/0x1120 [ 1923.368793][ C0] handle_bug+0xce/0x200 [ 1923.373094][ C0] exc_invalid_op+0x1a/0x50 [ 1923.377655][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1923.382557][ C0] RIP: 0010:__queue_work+0xde1/0x1120 [ 1923.388008][ C0] Code: 81 c3 68 01 00 00 4c 8d 35 6c 90 26 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 09 5b a4 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 1923.407666][ C0] RSP: 0018:ffffc90000157988 EFLAGS: 00010046 [ 1923.413834][ C0] RAX: 1ffff1100c573153 RBX: ffff888062fce968 RCX: ffff88801cac0000 [ 1923.421851][ C0] RDX: ffff888062fce968 RSI: ffffffff8a482300 RDI: ffffffff8fb4be20 [ 1923.429872][ C0] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1923.437933][ C0] R10: dffffc0000000000 R11: ffffffff818e34e0 R12: dffffc0000000000 [ 1923.445957][ C0] R13: 0000000000000008 R14: ffffffff8fb4be20 R15: ffff888062b98a80 [ 1923.453989][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.459886][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1923.465243][ C0] ? __queue_work+0xd9a/0x1120 [ 1923.470066][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1923.475513][ C0] call_timer_fn+0x18d/0x5f0 [ 1923.480178][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.486051][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1923.490791][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1923.495980][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.501851][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1923.507024][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1923.512916][ C0] __run_timer_base+0x73c/0x9b0 [ 1923.517874][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1923.523320][ C0] ? lock_acquire+0x115/0x350 [ 1923.528055][ C0] run_timer_softirq+0xb7/0x170 [ 1923.532955][ C0] handle_softirqs+0x1da/0x6d0 [ 1923.537825][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1923.542910][ C0] run_ktimerd+0x6a/0x100 [ 1923.547331][ C0] smpboot_thread_fn+0x565/0xa70 [ 1923.552339][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1923.557437][ C0] kthread+0x38b/0x470 [ 1923.561555][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1923.567076][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.571731][ C0] ret_from_fork+0x514/0xb70 [ 1923.576388][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1923.581562][ C0] ? __switch_to+0xc89/0x1420 [ 1923.586312][ C0] ? __pfx_kthread+0x10/0x10 [ 1923.590960][ C0] ret_from_fork_asm+0x1a/0x30 [ 1923.595792][ C0] [ 1923.599473][ C0] Kernel Offset: disabled [ 1923.603818][ C0] Rebooting in 86400 seconds..