last executing test programs: 2m51.618408951s ago: executing program 4 (id=1033): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x4, @vbi={0x7, 0x2, 0x800, 0x38414261, [0x5, 0x80000000], [0x8000000, 0x80], 0x1}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0xffffffffffffff75) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) fchdir(r2) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) syz_io_uring_setup(0x726b, &(0x7f0000000100)={0x0, 0xb5fe, 0x859, 0x8000000, 0x8032c}, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, &(0x7f0000000040)={0xe, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, &(0x7f0000000040)={0xe, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf80e2fb5d2b3f56d18ba2c8b06e00435e4b4dc", 0x30) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf80e2fb5d2b3f56d18ba2c8b06e00435e4b4dc", 0x30) 2m51.033248072s ago: executing program 4 (id=1035): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x4, 0x7fff0000}]}) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="c57a6ffa1e1a044bf0e39bcaa1475a5ddad8e6a274eb7ffb3eb5", @ANYRES16], 0x48) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000640)={0x20, 0x3, 0x1, 0x5}}) 2m47.888338374s ago: executing program 4 (id=1041): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) 2m47.560258275s ago: executing program 4 (id=1043): r0 = creat(0x0, 0x109) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) process_vm_readv(r1, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/133, 0x85}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = fsmount(r4, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) read(r5, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x8000, 0xfffffffe, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) preadv(r7, &(0x7f0000002540)=[{&(0x7f0000002480)=""/167, 0xa7}], 0x1, 0x5, 0xfffffffc) 2m44.229667983s ago: executing program 4 (id=1059): r0 = socket(0x1e, 0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28e401, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/3, 0x3}, 0xfffffff7}], 0x2, 0x12000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a3100000000050001"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a3100000000050001"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000002c0)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2m42.97679557s ago: executing program 4 (id=1066): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000001000)='sysfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x434c}}, './sys_mnt\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) move_mount(r5, &(0x7f0000002000)='\x00', r3, &(0x7f0000002000)='\x00', 0x44) syz_usb_connect(0x3, 0x4e, &(0x7f0000003000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000005000)={0x0, 0x2faf080}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./sys_mnt/bus/usb/drivers/sisusb/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)='5-1:1.0\x00', 0x8) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000640)={&(0x7f0000000540)=[{&(0x7f0000000440)="add5109b9372b7f48e918a10ce72669be6c1a693e3a91cba3e0fee7a3409518ef4a61ff49df453ffc00325b1889d36a27724cac47de3b261e02f4a94e8b7aaafbb8ff9aa3b91e9d44237274e803153fd6e7bc2f03ea2101c6a1cc1bfc0476783e31f7ca38a3bd3614a44ce3cb01c0023eb42af2d6bee1602653243b15af1df55e43f7890b15156b80963abba2d3c1a43d9f14c0313cf37e725b814286e77d27b0333ca15ada17677d84b0a659c90b0c1fe6b", 0xb2}, {&(0x7f0000000500)="2b6915ca6ef90c9e93c1600c224a0499cc6cd3a961a7826b7844104cf7bd138535de4b24a0e41b", 0x27}], 0x2, 0xae9b, 0x0, 0xb, 0x401, 0x1ff, 0x2, 0x4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000340)='[27.0.0.1]:78\x1a:/\x00\x9cI\x84\xdd@\xd6\x8e\xabf #\xaaIl93\xa1\xe2\xba\x91\xe9\xf1', 0x0) 2m27.774536184s ago: executing program 32 (id=1066): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000001000)='sysfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x434c}}, './sys_mnt\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) move_mount(r5, &(0x7f0000002000)='\x00', r3, &(0x7f0000002000)='\x00', 0x44) syz_usb_connect(0x3, 0x4e, &(0x7f0000003000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000005000)={0x0, 0x2faf080}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./sys_mnt/bus/usb/drivers/sisusb/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)='5-1:1.0\x00', 0x8) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000640)={&(0x7f0000000540)=[{&(0x7f0000000440)="add5109b9372b7f48e918a10ce72669be6c1a693e3a91cba3e0fee7a3409518ef4a61ff49df453ffc00325b1889d36a27724cac47de3b261e02f4a94e8b7aaafbb8ff9aa3b91e9d44237274e803153fd6e7bc2f03ea2101c6a1cc1bfc0476783e31f7ca38a3bd3614a44ce3cb01c0023eb42af2d6bee1602653243b15af1df55e43f7890b15156b80963abba2d3c1a43d9f14c0313cf37e725b814286e77d27b0333ca15ada17677d84b0a659c90b0c1fe6b", 0xb2}, {&(0x7f0000000500)="2b6915ca6ef90c9e93c1600c224a0499cc6cd3a961a7826b7844104cf7bd138535de4b24a0e41b", 0x27}], 0x2, 0xae9b, 0x0, 0xb, 0x401, 0x1ff, 0x2, 0x4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000340)='[27.0.0.1]:78\x1a:/\x00\x9cI\x84\xdd@\xd6\x8e\xabf #\xaaIl93\xa1\xe2\xba\x91\xe9\xf1', 0x0) 11.041279511s ago: executing program 0 (id=1703): add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x8f}) sendto$inet(r0, &(0x7f00000007c0)="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", 0x1000, 0x8000, &(0x7f00000017c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0xffffffffffffffd2}]}}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000003c0)={0x0, @bt={0x6, 0x8, 0x0, 0x0, 0x10001, 0xe, 0x400, 0xdc, 0x9e4c, 0x5, 0x2, 0x2, 0x2, 0x6, 0x2, 0x11, {0x8, 0x7f}, 0x2, 0xfe}}) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003", 0x1f) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0x0) recvmsg$unix(r6, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x2) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b14, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 7.749897855s ago: executing program 0 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f0000000d00)="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", 0x1000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000060000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300020008001b0000000000400034801400350076657468315f766972745f77696669001400350076657468315f746f5f7465616d00000014003500766c616e310000000000000000000000080023000104000008000d000300000014002b8008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0a000200aaaaaaaaaa1a0000140014007465616d3000000000000000000000000500270002000000"], 0xb4}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x1000001) pipe(&(0x7f00000001c0)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x25, 0x800000000004, @thr={&(0x7f0000000340)="393f4e4b61bc4d498b45fb72b01b8e750354b9807d688ae8d2c10c7325e9a84be2b18f76e6c2e963d341e46036edc729d61f5384ff9895f565c65fec535b88069ab10dc4fee32feeead407fdc6736322bb7340d98ff8e44f0a5424978c", &(0x7f00000003c0)="8db37d35226d988cb8fddc802a344bd4"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfe, @loopback, 0x1}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="200000000000007d8500000002000000e80003000700000000080000e95b475430cb2f3ba17cfb94a6b690c4ed2c44cdf393749359940100cf90b7a20dd3fa3a6959b9157162522150e61350dacfae2bb61365cc65591b0d0a8ac4a51a319ddb9403dda15c6bc7186477332c6955171a91ce49e32ca1bb96660f1197a743355a6af43449d00acacf52275ac7d89fb66283531ce33663c63bdd39789f6bf15acfade6f55d517d9f55b47a51f9d357c65633fa14a69242dac30b294494604c3a86b5d459bd504d7a1dabd9318d8d251399f206e2ee822a372b67afbbcd7f8dfbe373b0b62460e26a7313b2a43ed0bc1300cf54ada4d3ba3bffd2e5384c024eb2da56cc3267a5b5eef36b65e3d025a8cd0ca56147896fd1fb6c99472ef502ef5c9942f90bb0515b2c9920a46e75fbe05f88342d9c93424b95c52ceedaffa79d17969c42911beb4361bb4bd6fb6c4f0dc8", @ANYRES32=0x0], 0x20, 0x4855}, 0x24000052) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x608, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r4, &(0x7f0000000100)='\x00', 0x1c) socket$key(0xf, 0x3, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) 7.659528806s ago: executing program 1 (id=1722): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001, r3}, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0xc) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x210001) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x80000) recvmmsg(r7, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x1, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file0\x00', 0xc9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c00100000300000001002000"], 0x78) close(r8) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) fsopen(&(0x7f0000000c00)='nfs\x00', 0x1) 7.51034923s ago: executing program 1 (id=1723): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.449150943s ago: executing program 0 (id=1724): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffeffffffffffffa]}, 0x8, 0x800) (rerun: 32) syz_io_uring_setup(0xf08, &(0x7f0000000180)={0x0, 0x5d76, 0x1000, 0x20042, 0x100004f, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x259a}, 0x1}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000000)=0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x69851}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x17}]}}}]}, 0x54}}, 0x0) 7.316799109s ago: executing program 1 (id=1726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800}, 0x20) r1 = dup3(r0, r0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000440)={0x3, 0x200, 0xc000000, 0x2685, 0xfe}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x3, 0xc68, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x400007f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000140)="0f358f4834a2a4a4dd00000058450f01caf0fe454b470fff5700f3400fc7750c66bad00466ed430f01410048b8e6cc7fef6d2426460f23c00f21f835010007000f23f866baf80cb8947d578def66bafc0c66ed", 0x53}], 0x1, 0x4, &(0x7f0000000300), 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r7, @ANYRESDEC=0x0], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.009705493s ago: executing program 3 (id=1727): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2}}, 0x2e) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x2000, &(0x7f0000000100)="9a6a4dab"}], 0x1}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50) socket$packet(0x11, 0x3, 0x300) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0xffff, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) write$ppp(r6, &(0x7f00000002c0)="984e", 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) 7.009298941s ago: executing program 0 (id=1728): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d09050903"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00001f6000/0x9000)=nil) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r9, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010100, @empty}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0xc0) write(0xffffffffffffffff, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0", 0x19) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r11, &(0x7f0000000540)='a', 0x1) 5.114789462s ago: executing program 3 (id=1733): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="332d01db0606e9c65887157ee4ddd862898d07147423282753d9fe64589202b164909a2ed069a27d5946c13c53a1f5c8ace5a2f29e86509d6e07634ab118f777424624db03c2ba81823c055c4970e1914e7a719da2e6f82e", 0x58}], 0x1) (async) ioctl$MEMREADOOB(r0, 0xc0104d04, &(0x7f0000000140)={0x7, 0xaf, &(0x7f0000000080)="b4f95bd580e0794b5521c061c16eba844b0f750615411e3bbb936b741b86b235d459b17f78f29fd018cab6c2cb2f043c156b5dd8f4bd7b0d9f3b1598adbe30a93b46c88610523e49f0a025cdf3b406b740f630b726a454e46f775fd9a0f0efabd8895b944ceaeb97032a6c7535841b8e90d375aa997e9934024d63b423909a4783b4271fc522e41153ee463074802d5a0d6c615cfe00cd6c342197ce23876c36ce368cf2e86a7df9b29e62bdf95412"}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088945b406d04b3088eca0000000109021200017f00c0000904"], 0x0) 4.753107176s ago: executing program 1 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in6=@dev, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.6634614s ago: executing program 3 (id=1735): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x400002, 0x80, 0x12}, 0x18) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x67, @loopback, 0x7fffffff}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8, 0x2000, 0x13, 0xf1bd, 0xfffffe0000000001, 0xfffffffc, 0xffffffff}, 0x0) close(0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000000), 0x0, 0x4000c) sendmmsg$sock(r4, 0x0, 0x0, 0x4004890) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc1002}]}) r8 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 3.998178701s ago: executing program 1 (id=1737): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x1, 0x7, 0x8, 0xaa, 0x7, 0xffffffffffffffff}) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x8, 0x1, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x1000, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x7f, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xd, 0x0, 0x3c, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xa000, 0xa, 0x6, 0x0, 0x80, 0x3, 0x0, 0x2}, {0x0, 0x8000000, 0x4, 0x9, 0x1, 0x5, 0x83, 0xa, 0x26, 0x5}, {0x4000, 0x2}, {0xd000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x222070, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0xffffffffffffffff, 0x1]}) close(0x5) close(0x4) socket$netlink(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.325016138s ago: executing program 2 (id=1739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="ce8b4fdd2760a5b7b21a3176f38dc5253fdac08b84a9c16f6ab34c8c72ec", 0x1e}, {&(0x7f00000003c0)="723348d36bf7825bb78113450b1b2dbcb9afd50e634a5c59f218f8400c8a368fde62400a78b622ec2f65e06a4f3c9267cb563af49b64dd228c4eb900d5e6284ed2514b31dfeb1836f82d8ada2cb44478db0229ab3fe1487cca890089c5268bf2a19ac9", 0x63}, {&(0x7f0000000440)="e50f876db1163d11fbfd08747ed30816099d3a4ff05f97189932d93a157cbfc79b63c35c6054e549b07c26bad247a4742bda8f7eb5501dbca9d19864be0fc794f28636ea9684c3b638f2de3ed65439640ef924e0ea7142023d20a4689c51c8c77c4c8ffe", 0x64}, {&(0x7f0000000500)="9681f7f9a21080b8ca5932b6525896a2820955cdf0938f0ee914ec2286f7b11dc846debafd1af367d6279401f2227f8dfcd78dfacb66a5ab1ad13e759103b3394bdcfe8a6ef7126250927f432c12b990156fa48a9b1bf3ab05c61e3ac7a07ef09ada3a6fb2b440481183c0f25abcd751e9331293538e98d4862d6d2ff397d0654e7f8278cb6053458f4f9024497be4519d366ed713ffa7fec0e0891d84f830fa0348112574cb7975997b8f50086f87bdc5d883e01acd73cc7d303c8ae94e9a62f648fff94df15131187a8a364f1b1534b4b71763a81fe37842494ce9150badad36d7098e", 0xe4}, {&(0x7f0000000700)="eb61d19d6f0f1326a1994f76157344cfe0b6e9fbf19b9040afbf92c9723efe6f9707acd6973fcb3152ab6b80da2812d9ec6fad766a5b00c37605d50f0850464ea84f2bf82b6cf3636a14f9ea197d0f4d6193814937650a37abd1c14910796369233e6cf5172202f02f4bcced3cd6bc5529a44134675b9d05e67cd1e7c759835ee4a1b91ba96db86d360e6965894cda15e6ffc39df2694d4a9c76280dd21fd8375a43f1e1babc66841167b2f1b5c19ecc4bc7ea0612388e86007e59ef1dad2262f25b1ad2a116c405bb31922774667e432f9885aaf430", 0xd6}, {&(0x7f0000000940)="4f2da3d91a0e68d7a99fbd8a44e923818b451a50457fd03c4a4e72b7c12947c9792c931a8d535ec4c0be13d6ea9fd0d4382979a4583b123ad071590a212551389d9658eb94464de5e953234ae2fa285849f26b0488bbbe36336b7032f894b17a0228923aad70b64d174a3cf51fab1e8020d66e73c75f0de29bd661e2c1f1b61aa206d829efd149b26f8ca62a21d74c3ae8f266b1accb2b30a08bfcf39f6ce686b143c5904c56751f82d7f887c0f24087f0d29fd85ae89247f88ddca2a11fd5357ded2362", 0xc4}, {&(0x7f0000000a40)="eb0d93c48f14e9db46740423d938c583522b816672be6f9fd0ed653d60add3011dde472d3224f21e9c7023e38b38a0cd67b879559a4294b59f956b01da28a7c655", 0x41}], 0x7, 0x0, 0x0, 0x10000000}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="e2ef0517cfb122144f72000dbde6b199c5608bda73bb33a67ae4ffe704a71934521fa549dc97ce1a99d31c4a4fec6fd1b1acb660c1617aa9e21710207772b80713ca1625dd0c987c5d1fa148ebb9f5d9edd6b1bda1bf4d0dc965321a8c3a5a91e8f89764345200fe5955572965d3b09d4b6fb4384670f6e893506a191c4b6dbfb1ff9b6b7e41fc7efec6ea40373a69474c7d1edd76233cbfd1be92f2311eeda22543e5ccf84153", 0xa7}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x48}}, {{&(0x7f0000006200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000006280)="db252abf7b8043ea8ce4bebc6cfa36151f3e0685e8f4ac7cb824256c2edf47118daf185e54", 0x25}, {&(0x7f00000062c0)="02f49210ca85ac261355ddf446cd4c6155829e82def8f03688c3a56eac58d1e8bacdf06ba113227817cf66ea6a8575cf136847f2f24202263ec45de9cae437", 0x3f}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="31eed7472ae7bb3bdf66f5849275daa5000000778d010000f80000000001000004", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x40}}, {{&(0x7f0000006640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006880)=[{&(0x7f00000066c0)="b99bf5ac101dcbf14870d01288ff6d0bb8354171275a7e0cb2642ecda5ab23311de15d1d43", 0x25}, {&(0x7f0000006700)="069350297141dda80c990c0a161c5eec18a7f53f13a3d5eeab0743b3d202ab9fd0737377a66b87aba8734b138185543727bdd6a54d007d5868e9ebaeaefe726ee98efce3f523602ae0e98ce9d5c9b385ab93a6b73975bfbd8c9451c8efbc8b04fe47ffa1402433dd28422f5e5ec7650f8646437a926182d9ec9183db", 0x7c}, {&(0x7f0000006780)}, {&(0x7f00000067c0)="bc4159470baf26e46eededd63ba77f8202f302a02a8d8b07beb9ca36544f59beb5768d9a93a32c7cb412d2e85e75f583c328b60662544715f6458cc121af2722598e578c46d9fae5e7368f46ba2de7a2fe0254acf3bf29c32850b4e7790800d5439c34d78f9b54c09197e4dd464193e7aea9088e82e17b3da5aadfa118eeae3a79ef02319376d36106ad145a965734f1db8105e1284e69c4c88a46df617011178208357a3b7588963b6222", 0xab}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000018020000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r1], 0x140, 0x2000000}}], 0x4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x3, 0x9, 0x6, 0x0, 0xb49, 0x9, 0xa, 0x9, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0500000001070000050008000500000004002800"], 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r8, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @loopback, 0xc58a}, 0x1c) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000006c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 2.791395878s ago: executing program 5 (id=1741): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000640)=""/220, 0xdc}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.300438603s ago: executing program 0 (id=1742): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x20, 0xf, 0x37, {0x37, 0x4, "2f65e8e051e4a35f5325534d34b38137b79a937ce252c90504815b205c01dffb00b0c3767754c24ddedc62a1f56c55effc24e547a6"}}, 0x0, &(0x7f0000000240)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x1, 0x407}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d437ae54198389aa70c7ab10a95049b9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6c, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x3, 0x8, 0x160, 0x9}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0x80, 0x6, 0x1, "ab03451d", "6ba21ef8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x8, 0x6, 0x4, 0x6, 0x2, 0x9}}}, &(0x7f0000000900)={0x84, 0x0, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)=ANY=[@ANYBLOB="ebcd01040000ee6d53ff166ca87ba6c9df4b99dc0e5d9e64b1838affba580f9d890f96f064e948514ef79854409779e47d1f6b5ce4d77a21068989047ff4dc615452b76a2fc84c7cb5b1582c59b613e084f425d93610c949c13f2937ee86c9afb4380cc564fdc976"], &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "1b81"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "85f4"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x41}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa}}) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xffffff6a}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x46810}, 0x4) openat$iommufd(0xffffffffffffff9c, 0x0, 0x129240, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x28011, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000700), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) 2.038305435s ago: executing program 3 (id=1743): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$l2tp6(r2, 0x0, 0x0, 0x20, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x6c, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000240)={0x28, 0x0, r4, 0x0, 0xfffffffffffffffc}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'sit0\x00', 0x5}) r6 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='cert_serial\x00', &(0x7f0000000280)='0\x00', 0x0) 1.965083087s ago: executing program 5 (id=1744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000100)) (async) ioctl(r3, 0x4048aecb, &(0x7f0000000100)="0100") (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540100001000010026bd700000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) 1.633519818s ago: executing program 1 (id=1745): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c40703a10000010200010902270001010080500904000003080650"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000001b00)="a6", 0x1001, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_usb_connect(0x4, 0x528, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa6, 0x13, 0x1a, 0x40, 0x6f8, 0xe033, 0x5550, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x516, 0x3, 0x4, 0x1, 0x10, 0x5a, "", [{{0x9, 0x4, 0x6f, 0x9, 0x5, 0x9c, 0xeb, 0x72, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x2a}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0xb, '4'}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x3, 0x8, "b01c8fbbb802"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x1, 0x0, "a975bdcb"}]}], [{{0x9, 0x5, 0xc, 0x1, 0x10, 0x10, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x2, 0xe, 0xe, [@generic={0x37, 0xf, "38e6b5cc53b921b715d949a1cc7bad55f74843aa9b5a76b75873c12fabb8228fe02e7daca4ceab655b63329728677aa05f0c14781b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0xc, 0x9, 0x32, [@generic={0xcc, 0x2, "dd8b3a77058c49adf12ae3f18767a05c33ec71fe8f4b02b38a300b47690d7be15e5bff7b321940849e4bede26b0314797b5f11da2ba7de5e13580c5e060fb74fbf3c80d5e263e380119cf15febef95e6c95aaae5f3eb6069ff80525f9c7d095fa00b7f06e8a3b80a1beadf453691ea12cbca38b31bfefff4d80236b4aa7c6538a1a9e0ab4d396ccde4b31dc63af447254ef2271ef4f7a1820f5033146c2f78406cac9c6a9a520b298f56678cfd2d8eef129affbf2d7abc2e0e5db03395254b77ea7c5b884bd0f6231bee"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x71f, 0xbb, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0x8, 0x6, [@generic={0x7e, 0x10, "86a047b1f480d684821fc445027ecf616db678d4643f777bf91d4d2c90853eb0144291431f7b673b097c62079b21eb2ee82ae73b1fe38d1588dae9f676f0adc82776523c2d30d4d2af54b937343de94fcc0343791f778eb93e8b7b7082e2de2ccb8c827ebc7f8dcaa563b50aaa29b246376e8652fa8579bca3724320"}]}}]}}, {{0x9, 0x4, 0x69, 0xff, 0x10, 0x1, 0x1, 0x29, 0x8, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xd834, 0x1, 0xa5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x1, 0x9, 0x6, "f07d", "08bc"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x5, 0x6, "1b0204d3052f328e17"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xed8a, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x200, 0x6}}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x9, 0xb, 0x80, [@generic={0xa2, 0x6, "69d3062a6dede1735af28289f109f7e635e971a90aee4cc6c23f1f9934e94c2bb4cb125fe4c8aedf5c50d725864508fec8fc456546c1acdd2874dda86f23b16ebd5fef9e1512af36efd8b29702831c447dc226bdf39020176bc6a0d2d753bbf67dd8cb3de84de97b312fbf739bed5dec3528d48c03476fb8161c6103c88e138852c36b45a99a7fe680a923aa25d54c440e5c9c16ff693c1f6d570a3f4c44f7ce"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x4, 0xff, 0x6d, [@generic={0xb4, 0x7, "a84246bbc3b6385df5f725a8525a5ed9466e477fe9ecd5d05ad16ec4ab7dd642b0c327ea2d5486bc9a5d663fd6392583bbecea44286457458be504c3ba3b61e9aeee83908e9478b6c0f61db7081070b64ae1c0527f26b3c08f4fa18062562a588183155a033d2047f045e3789f13765981daccfd3d97710ebc3fac8a5d053bf4b3d4851b07725499f775a486a8742eb216b58db4512cf550a74d2dda79d85db80ab2b8cfd3f236d39beece6ef2c892fded1d"}]}}, {{0x9, 0x5, 0x3d5823e0eba85e5f, 0x10, 0x10, 0x9, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x47, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x5}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xf, 0x9, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x1, 0x5d}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x6, 0xc0, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x8, 0x4e, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x81, 0xf9}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0x8, 0x1e}}, {{0x9, 0x5, 0x48ad74833fecb91d, 0x8, 0x8, 0x2, 0x4f, 0x0, [@generic={0x87, 0x3, "24be642cae3162a071a6d3bd616cfda981a4f2b20f9bc7a758812a5b4e8138b9e377779e73bdfea8b8796e574fbfc4f65ca18b19e488ff1acfb916936ce9be5cb2ec51b69bf7809da8cb068e8c871ae8c50a24647bc0d6af79c3935a9f7334fc37e68802415ef13a6a0c5a5d4d929711f919afda457f1eb70989f7a5a3edc6e9f917b612a9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x8}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x6, 0x2, 0x3, [@generic={0x2e, 0x6, "214e50665a80726a50e3670122138a22d24cfc62486e0c1d18aef58c0399562632ab76a2cd43565a5f84b193"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x387}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xda, 0x1, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0x40}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x8, 0x4, 0x80}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0xe1, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xcf, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfe19}]}}]}}, {{0x9, 0x4, 0x6e, 0x3, 0x0, 0xff, 0x5d, 0x1, 0x5, [@hid_hid={0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xdd3}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x81, 0xa, 0x4, 0x10, 0x7}, 0x52, &(0x7f00000005c0)={0x5, 0xf, 0x52, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x3, 0x1ff}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4772622d1177f656c322f99fd870dc21"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x0, 0xf000, 0x1, [0x0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x78, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "c75ea4d367737f6d1e9ddd65ec32727e"}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41a}}, {0x1a, &(0x7f00000006c0)=@string={0x1a, 0x3, "88828edd0d49c8b6590c8a488603de86d57463c6e02676d9"}}, {0xd3, &(0x7f0000000700)=@string={0xd3, 0x3, "236d6c1d5ae505761bc0762a8281155fc3f4116d8f295069defda94e41f25adfe7a604570a8fdb739aec32e3c543d41625a0d77e42ffb560bcd8d5be5e4c5e47f2056aefeb6dd5a883078452a510f2825881ea21f05dd421cfeca6532e2a586d344cf9649d696a6ef112a2d7873ccd9115461c39fbcd162739e174573cb87642008d159178117360f958e24672f15674cfe0e3010bcee3a242769fd03d65058bcde4410cac2b5b2574c0e006509c58b45b0c086eaa725f8f34181a15f174bd9e7c126b8966ee00ad14a2ae240fc52413db"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x445}}, {0x9a, &(0x7f0000000840)=@string={0x9a, 0x3, "a657f648b6db37d8b50284675b3acb01e1875301913335b90716a77e0d6b4fd4eb31205a23a06f72780ec1a858d8ccc72e9dae3ac25291caa7e8f641e55d0dd2200f5cfa08f7cf6580ef4e9c2f4a9b48ae45d59f337d76839950314ba8c99c6fab138dcf268376c788247d74c0254eede1b179701284466b6d626fc66497f6997e477734a7745a7879d89e29ff179f0c26f329396767f30c"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2a4a8dcb9238f30}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3409}}]}) 1.324448295s ago: executing program 2 (id=1746): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x5d1000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r1, &(0x7f0000000140)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x7f, "708aabad55dcbb067c7b06d851cddac661897146e0032d0543ae04190576ef2871951419cb19390dfe28ed91be36e2cd3e472dce66ce7cdf0ac14a24fabea18324c7077e5c1daef2007a67be51a873d119d3a27678215d742ba82e9cfb406091671b1fc6"}, 0x67) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 1.016352668s ago: executing program 2 (id=1747): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = getpid() r3 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0xdc, 0x29, 0x200, 0x70bd27, 0x25dfdbfb, {0x1b}, [@typed={0x43, 0x1f, 0x0, 0x0, @binary="f48aa66cf187fb4f45322da57ed6f4d85912cd0aea6408914bd558b7d5c50e05f1be4ad00a1956b5f2f233cf895ef678dddd87063e8f1e155ee57781ae3b44"}, @nested={0x18, 0xae, 0x0, 0x1, [@typed={0x14, 0xf7, 0x0, 0x0, @binary="58975ff5245f3d53e20178423ed998c8"}]}, @generic="7dd340d7355ed3ed5d5e0e45c134468a045d102b9648974bef0f3ebc499de3b9e638ddb78ada956bdbe30acd0b300fa85eebdfc11c9743bb4f", @typed={0xb, 0xd8, 0x0, 0x0, @binary="4c3bd25a813009"}, @nested={0x24, 0x136, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @pid=r2}, @generic, @nested={0x4, 0x12a}, @typed={0x8, 0x166, 0x0, 0x0, @pid=r3}, @generic, @nested={0x4, 0xb2}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r0}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000200)='m', 0x1}], 0x2) 860.827352ms ago: executing program 3 (id=1748): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 765.177313ms ago: executing program 5 (id=1749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000100)="03000000000000000100000002000000000000000100000000000000ffffffff") close_range(r0, 0xffffffffffffffff, 0x0) 631.82848ms ago: executing program 2 (id=1750): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000300)={0x87, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0x3, 'fo\x00', 0x0, 0x9, 0x2b}, 0x2c) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x306, @random="feca192fbee5"}, 0x20, {0x2, 0x4e22, @empty}, 'vlan1\x00'}) 575.710339ms ago: executing program 3 (id=1751): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r2, &(0x7f0000000200)="7472616e73706f72743d6c6f6f702c6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573732e6469736391766572788d7af0897a6c5d0a", 0x3f) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x8, 0xfffffffc, 0xdc65}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @mcast2, @mcast1, 0x0, 0x40, 0x6, 0x41}}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000986835d528c96f1d306c272c20c87f29df5213378379263ed25a6d11d36797a38100000200000000772052cbcde038ff6bc8fc799860bca74d6ba1c3d27d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) r7 = inotify_init1(0x800) r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x11e) r9 = dup(r2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe3}) inotify_rm_watch(r9, r8) r10 = accept4$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r11 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r11, 0x0, &(0x7f0000000140)='\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 458.23623ms ago: executing program 5 (id=1752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0xa, 0x5, 0x0) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000001b40)=@in6={0xa, 0x4e24, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa43}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000009b6c00000500000010000000ffffff3f18000000000000008400000007000000ac"], 0x30, 0x80}, 0x8050) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x200, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x1014414, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020}, 0x204a) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x1, 0x88}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) socket$netlink(0x10, 0x3, 0x4) 308.518956ms ago: executing program 2 (id=1753): unshare(0x60600) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r0) 201.587024ms ago: executing program 0 (id=1754): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="2000000005143101000000000000000008000100020000e107000300"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e00cb7badbd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="0c2ec7"], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e", 0xf}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) 136.509884ms ago: executing program 5 (id=1755): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x62e4322a, 0x6, 0xb, 0x7}, 0x14) (async) r1 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$'], 0x20) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x40084149, &(0x7f0000000000)) 79.117322ms ago: executing program 2 (id=1756): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40025a23905eb99ead1d934b20b65bfdc57b284c4e6e422e7046c1753d08fed68111681c1583e386448333d15955e0428011d73277c7f04532af25e08e26b721a22ae16b843fdf5024c0e69630a13a5aa0179c959651fe7eca1cc8ced2"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000880) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 5 (id=1757): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x8008b705, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x60500) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x4, 0x2, 0x7, {0xd44f, 0x200200, 0x6, 0xffffffdf}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x8008b705, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) (async) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x60500) (async) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x4, 0x2, 0x7, {0xd44f, 0x200200, 0x6, 0xffffffdf}}) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) kernel console output (not intermixed with test programs): ooth: hci6: Opcode 0x0c03 failed: -71 [ 428.554841][ T5713] usb 4-1: USB disconnect, device number 80 [ 428.669475][ T8842] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 428.735128][ T8842] usb 3-1: device descriptor read/8, error -71 [ 428.754966][ T8814] uclogic 0003:28BD:0078.0023: interface is invalid, ignoring [ 428.859796][ T8842] usb usb3-port1: unable to enumerate USB device [ 429.329344][ T8842] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 429.399376][ T5713] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 429.493645][ T8842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 429.503688][ T8842] usb 1-1: not running at top speed; connect to a high speed hub [ 429.513580][ T8842] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 429.525203][ T8842] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 429.534928][ T8842] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 429.543389][ T8842] usb 1-1: config 14 has no interface number 0 [ 429.550475][ T8842] usb 1-1: config 14 has no interface number 1 [ 429.557293][ T8842] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 429.570631][ T8842] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 429.570659][ T5713] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 429.584506][ T8842] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 429.603761][ T8842] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 429.612353][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.623625][ T5713] usb 4-1: Product: syz [ 429.627905][ T5713] usb 4-1: Manufacturer: syz [ 429.630055][ T8842] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 429.635483][ T5713] usb 4-1: SerialNumber: syz [ 429.661181][ T8842] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 429.689476][ T8842] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.718950][ T8842] usb 1-1: config 14 interface 57 has no altsetting 0 [ 429.741022][ T8842] usb 1-1: config 14 interface 228 has no altsetting 0 [ 429.765228][ T8842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.774266][ T8842] usb 1-1: Product: syz [ 429.778505][ T8842] usb 1-1: Manufacturer: syz [ 429.783250][ T8842] usb 1-1: SerialNumber: syz [ 430.094919][T11080] misc userio: The device must be registered before sending interrupts [ 430.287535][ T8842] legousbtower 1-1:14.57: interrupt endpoints not found [ 430.329252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 430.858323][ T10] usb 6-1: USB disconnect, device number 14 [ 430.963450][ T5713] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:e9:ab:91:ce:25 [ 431.038023][ T5713] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 431.084274][ T5713] usb 4-1: USB disconnect, device number 81 [ 431.552407][ T8842] legousbtower 1-1:14.228: get version request failed: -110 [ 431.608937][ T8842] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -110 [ 432.572426][T11136] syzkaller0: entered promiscuous mode [ 432.594478][T11136] syzkaller0: entered allmulticast mode [ 432.793439][ T5713] usb 1-1: USB disconnect, device number 98 [ 433.242662][ T8844] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 433.454826][ T8844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 433.499420][ T8844] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.602149][ T8844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 433.625093][ T8844] usb 6-1: Product: syz [ 433.652251][ T8844] usb 6-1: Manufacturer: syz [ 433.667032][ T8844] usb 6-1: SerialNumber: syz [ 434.037630][ T8844] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.279363][ T10] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 434.411577][ T8844] usb 6-1: USB disconnect, device number 15 [ 434.473868][ T8844] usblp1: removed [ 434.487454][ T10] usb 3-1: device descriptor read/64, error -71 [ 434.707844][T11162] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 434.759354][ T10] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 434.759728][T11162] bond4 (unregistering): Released all slaves [ 434.929510][ T10] usb 3-1: device descriptor read/64, error -71 [ 435.054698][ T10] usb usb3-port1: attempt power cycle [ 435.171238][T11174] syzkaller0: entered promiscuous mode [ 435.184981][T11174] syzkaller0: entered allmulticast mode [ 435.420207][ T10] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 435.462878][ T10] usb 3-1: device descriptor read/8, error -71 [ 435.629768][ T8842] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 435.720833][ T10] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 435.760154][ T10] usb 3-1: device descriptor read/8, error -71 [ 435.812512][ T8842] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 435.855385][ T8842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.882006][ T10] usb usb3-port1: unable to enumerate USB device [ 436.011921][ T8842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.029640][ T8842] usb 2-1: Product: syz [ 436.054403][ T8842] usb 2-1: Manufacturer: syz [ 436.079707][ T8842] usb 2-1: SerialNumber: syz [ 436.108195][ T8842] usb 2-1: config 0 descriptor?? [ 436.167008][ T8842] cyberjack 2-1:0.0: required endpoints missing [ 437.271659][T11194] netlink: 'syz.5.1412': attribute type 21 has an invalid length. [ 437.477844][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1412'. [ 437.491915][ T8844] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 437.661752][ T8844] usb 3-1: Using ep0 maxpacket: 16 [ 437.675817][ T8844] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 437.692264][ T8844] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 437.701958][ T8844] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 437.711090][ T8844] usb 3-1: config 166 has no interface number 0 [ 437.717788][ T8844] usb 3-1: config 166 has no interface number 1 [ 437.725704][ T8844] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 437.737771][ T8844] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 437.749320][ T8844] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 437.760532][ T8844] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 437.772647][ T8844] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 437.784644][ T8844] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 437.795266][ T8844] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 437.808828][ T8844] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 437.838260][ T8844] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 437.852493][ T8844] usb 3-1: config 166 interface 177 has no altsetting 0 [ 437.859594][ T8844] usb 3-1: config 166 interface 34 has no altsetting 0 [ 437.885521][ T8844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.894038][ T8844] usb 3-1: Product: syz [ 437.898281][ T8844] usb 3-1: Manufacturer: syz [ 437.911798][ T8844] usb 3-1: SerialNumber: syz [ 438.193948][ T8844] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 438.320446][ T8844] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 438.421295][ T8844] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 438.433405][ T8844] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 438.454806][ T8844] uvcvideo 3-1:166.34: No valid video chain found. [ 438.482998][ T8844] usb 3-1: USB disconnect, device number 106 [ 439.884090][ T10] usb 2-1: USB disconnect, device number 123 [ 440.054809][T11219] raw_sendmsg: syz.3.1416 forgot to set AF_INET. Fix it! [ 440.191174][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.197631][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.320956][T11226] netlink: 'syz.5.1419': attribute type 1 has an invalid length. [ 440.532843][T11235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.568563][T11235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1421'. [ 440.598842][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 441.202422][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1425'. [ 441.214183][T11248] netlink: 'syz.5.1425': attribute type 7 has an invalid length. [ 441.239705][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 441.265683][T11248] : renamed from batadv_slave_1 (while UP) [ 441.276234][T11249] xt_connbytes: Forcing CT accounting to be enabled [ 441.411609][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 441.432451][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=eee8, bcdDevice=d9.c7 [ 441.453305][ T10] usb 4-1: config 1 has an invalid interface number: 96 but max is 3 [ 441.468190][ T10] usb 4-1: config 1 has an invalid interface number: 181 but max is 3 [ 441.486020][ T10] usb 4-1: config 1 has an invalid interface number: 8 but max is 3 [ 441.516266][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 441.529405][ T8840] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 441.541971][ T10] usb 4-1: config 1 has an invalid interface number: 200 but max is 3 [ 441.577313][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 441.605974][ T10] usb 4-1: config 1 has no interface number 0 [ 441.628365][ T10] usb 4-1: config 1 has no interface number 1 [ 441.647833][ T10] usb 4-1: config 1 has no interface number 2 [ 441.671013][ T10] usb 4-1: config 1 has no interface number 3 [ 441.689370][ T10] usb 4-1: config 1 interface 96 altsetting 41 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 441.713370][ T8840] usb 2-1: No LPM exit latency info found, disabling LPM. [ 441.719665][ T10] usb 4-1: config 1 interface 181 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 441.729960][ T8840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.739295][ T10] usb 4-1: config 1 interface 181 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 441.756591][ T8840] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 441.767140][ T10] usb 4-1: config 1 interface 181 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 441.781214][ T10] usb 4-1: config 1 interface 181 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 441.781230][ T8840] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 441.781258][ T8840] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 441.793072][ T10] usb 4-1: config 1 interface 181 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 441.793106][ T10] usb 4-1: config 1 interface 181 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 441.793132][ T10] usb 4-1: config 1 interface 181 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 441.841014][ T8840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 441.887748][ T8840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.898476][ T10] usb 4-1: config 1 interface 181 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 441.907157][ T8840] usb 2-1: Manufacturer: ࠠ [ 441.919426][ T5713] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 441.931900][ T8840] usb 2-1: SerialNumber: ﾃ䳯ᢽ㫂쓨㷃緾罰෿屮ᵮ冒穐⦊叓떍洘좲䕰調ﺧ䎪姯첗蓲怏켦缭ᦋᑦ陑䏄侅폏炢䃁掞芭ꭺ㴽붴誃鹭鳓몆貔䅷♵챩큣ퟲс⬒풣툹ၱ葝詺갗ⶉᮘଭ䬯2ἓ蒖ণ푗熗懞ѕ [ 441.939374][ T10] usb 4-1: config 1 interface 181 altsetting 7 bulk endpoint 0xA has invalid maxpacket 32 [ 441.994990][ T10] usb 4-1: config 1 interface 181 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 442.018196][T11251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.019355][ T10] usb 4-1: config 1 interface 181 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 442.026956][T11251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.045284][T11251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 442.068575][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 442.085578][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 442.100660][ T5713] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.113941][ T5713] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.122485][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 442.134789][ T5713] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.159318][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 442.170009][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.181599][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 442.199805][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.211860][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 442.224442][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.247950][ T10] usb 4-1: config 1 interface 8 altsetting 0 has an endpoint descriptor with address 0x27, changing to 0x7 [ 442.259804][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.279343][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 442.295401][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.329296][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 442.353223][ T5713] usb 1-1: config 168 interface 0 has no altsetting 0 [ 442.366369][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 442.387452][ T5713] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.407293][ T10] usb 4-1: config 1 interface 8 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 442.422555][ T5713] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.451706][ T10] usb 4-1: config 1 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.467847][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.491274][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 442.511898][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.529431][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 442.546031][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.563701][ T10] usb 4-1: config 1 interface 8 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 442.579297][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.599324][ T10] usb 4-1: config 1 interface 8 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 442.611568][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.625136][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0x2, skipping [ 442.636098][ T5713] usb 1-1: config 168 interface 0 has no altsetting 0 [ 442.643795][ T10] usb 4-1: config 1 interface 200 altsetting 93 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 442.656313][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0x8A, skipping [ 442.668367][ T5713] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.676882][ T5713] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 442.688749][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xA, skipping [ 442.700274][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.712385][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xB, skipping [ 442.733739][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xE, skipping [ 442.746624][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.766646][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0x9, skipping [ 442.782786][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.795150][ T10] usb 4-1: config 1 interface 200 altsetting 93 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 442.807864][ T5713] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.821839][ T10] usb 4-1: config 1 interface 200 altsetting 93 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 442.834080][ T5713] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 442.850303][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xB, skipping [ 442.861931][ T5713] usb 1-1: config 168 interface 0 has no altsetting 0 [ 442.868831][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0x5, skipping [ 442.882689][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0x6, skipping [ 442.897387][ T5713] usb 1-1: string descriptor 0 read error: -22 [ 442.903981][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.923798][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xA, skipping [ 442.958548][ T10] usb 4-1: config 1 interface 200 altsetting 93 has a duplicate endpoint with address 0xE, skipping [ 442.980430][ T5713] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 442.993018][ T10] usb 4-1: config 1 interface 96 has no altsetting 0 [ 443.011290][ T10] usb 4-1: config 1 interface 181 has no altsetting 0 [ 443.026036][ T10] usb 4-1: config 1 interface 200 has no altsetting 0 [ 443.044870][ T10] usb 4-1: Dual-Role OTG device on HNP port [ 443.054598][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.073276][ T10] usb 4-1: Product: 䅥辅壴ᵿꤐ╨镦䦉鍶儉뢇ﱪ쇭醞ꤰ [ 443.098859][ T10] usb 4-1: Manufacturer: ⠁ [ 443.114831][ T10] usb 4-1: SerialNumber: ᰊ [ 443.197798][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 443.209837][ T5713] usb 1-1: USB disconnect, device number 99 [ 443.376792][ T10] ftdi_sio 4-1:1.96: FTDI USB Serial Device converter detected [ 443.394875][T11294] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 443.412818][ T10] ftdi_sio ttyUSB0: unknown device type: 0xd9c7 [ 443.480481][ T10] ftdi_sio 4-1:1.181: FTDI USB Serial Device converter detected [ 443.502540][ T10] ftdi_sio ttyUSB1: unknown device type: 0xd9c7 [ 443.543433][ T10] ftdi_sio 4-1:1.8: FTDI USB Serial Device converter detected [ 443.573643][ T10] ftdi_sio ttyUSB2: unknown device type: 0xd9c7 [ 443.613007][ T10] ftdi_sio 4-1:1.200: FTDI USB Serial Device converter detected [ 443.634640][ T10] ftdi_sio ttyUSB3: unknown device type: 0xd9c7 [ 443.650083][ T10] usb 4-1: USB disconnect, device number 82 [ 443.663712][ T10] ftdi_sio 4-1:1.96: device disconnected [ 443.725004][ T10] ftdi_sio 4-1:1.181: device disconnected [ 443.758312][ T10] ftdi_sio 4-1:1.8: device disconnected [ 443.775411][ T10] ftdi_sio 4-1:1.200: device disconnected [ 443.892186][ T5713] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 444.049303][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 444.076233][ T5713] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 444.097705][ T5713] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 444.118933][ T5713] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 444.143982][ T5713] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 444.174572][ T5713] usb 3-1: can't read configurations, error -22 [ 444.244898][T11308] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 444.328422][ T8840] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 444.335667][ T5713] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 444.466195][ T8840] usb 2-1: USB disconnect, device number 124 [ 444.529536][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 444.541158][ T5713] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 444.564974][ T5713] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 444.612256][ T5713] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 444.668318][ T5713] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 444.725809][ T5713] usb 3-1: can't read configurations, error -22 [ 444.762554][ T5713] usb usb3-port1: attempt power cycle [ 445.119443][ T5713] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 445.180662][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 445.199450][ T5713] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 445.228068][ T5713] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 445.258774][ T5713] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 445.301673][ T5713] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 445.336793][ T5713] usb 3-1: can't read configurations, error -22 [ 445.416111][T11334] syzkaller0: entered promiscuous mode [ 445.422569][T11334] syzkaller0: entered allmulticast mode [ 445.453381][T11336] : renamed from vlan0 [ 445.499335][ T5713] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 445.558651][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 445.603522][ T5713] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 445.625385][ T5713] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 445.648195][ T5713] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 445.688741][ T5713] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 255 [ 445.721462][ T5713] usb 3-1: can't read configurations, error -22 [ 445.741335][ T5713] usb usb3-port1: unable to enumerate USB device [ 446.015485][T11348] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.041355][T11348] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 446.079536][ T8842] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 446.090912][ T5713] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 446.129403][ T8840] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 446.250168][ T5713] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 446.262961][ T5713] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 446.269452][ T8842] usb 2-1: Using ep0 maxpacket: 32 [ 446.273193][ T5713] usb 4-1: config 1 has no interface number 0 [ 446.278912][ T8842] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 446.284136][ T5713] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 446.294013][ T8842] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 446.302109][ T5713] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.314356][ T8840] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 446.334004][ T8842] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 7 [ 446.349097][ T8842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.350526][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.358734][ T8842] usb 2-1: Product: syz [ 446.368836][ T5713] usb 4-1: Product: syz [ 446.370972][ T8842] usb 2-1: Manufacturer: К [ 446.376682][ T5713] usb 4-1: Manufacturer: syz [ 446.379078][ T8842] usb 2-1: SerialNumber: syz [ 446.384745][ T5713] usb 4-1: SerialNumber: syz [ 446.389038][ T8840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.401242][ T5732] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 446.410511][ T8840] usb 6-1: Product: syz [ 446.413678][T11342] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 446.417017][ T8840] usb 6-1: Manufacturer: syz [ 446.434540][ T5713] usb 4-1: Error in usbnet_get_endpoints (-22) [ 446.439188][ T8840] usb 6-1: SerialNumber: syz [ 446.579598][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 446.585771][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 446.596789][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.607638][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 446.619735][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.631007][T11343] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1446'. [ 446.642262][ T5732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 446.666323][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.670507][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.698645][ T5732] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 446.711367][ T5732] usb 1-1: Manufacturer: syz [ 446.722609][ T8842] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 446.748161][ T5732] usb 1-1: config 0 descriptor?? [ 446.804555][ T5732] usb 4-1: USB disconnect, device number 83 [ 446.875302][ T8842] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 446.892346][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 446.907537][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 446.948934][ T8842] usb 2-1: USB disconnect, device number 125 [ 446.989809][ T10] usb 1-1: USB disconnect, device number 100 [ 446.999547][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.079385][ T5713] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 447.229581][ T5732] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 447.229891][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 447.248566][ T5713] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 447.263188][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.271566][ T5713] usb 3-1: Product: syz [ 447.275794][ T5713] usb 3-1: Manufacturer: syz [ 447.280471][ T5713] usb 3-1: SerialNumber: syz [ 447.288602][ T5713] usb 3-1: config 0 descriptor?? [ 447.369748][ T5732] usb 4-1: device descriptor read/64, error -71 [ 447.629383][ T5732] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 447.722825][ T5713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 447.743346][T11369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.760529][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.785028][ T5713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 447.789470][ T5732] usb 4-1: device descriptor read/64, error -71 [ 447.808883][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'. [ 447.827635][ T5713] usb 3-1: media controller created [ 447.901079][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.949996][ T5732] usb usb4-port1: attempt power cycle [ 448.071730][ T5713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 448.096726][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 448.209035][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 448.299026][ T5713] usb 3-1: USB disconnect, device number 111 [ 448.299338][ T5732] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 448.396340][ T5732] usb 4-1: device descriptor read/8, error -71 [ 448.418717][ T5713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 448.659876][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.679445][ T5732] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 448.700167][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.740320][ T5732] usb 4-1: device descriptor read/8, error -71 [ 448.761869][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.782458][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.811967][T11346] trusted_key: encrypted_key: insufficient parameters specified [ 448.851109][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 448.868015][ T5732] usb usb4-port1: unable to enumerate USB device [ 448.905499][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 448.943738][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 449.041464][ T8840] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 449.067092][ T8840] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 449.111874][ T8840] usb 6-1: USB disconnect, device number 16 [ 449.533396][T11380] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 449.936800][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 450.121059][ T10] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 450.163310][ T10] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 450.203675][ T10] usb 6-1: config 0 has no interface number 0 [ 450.235168][ T10] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 450.284401][ T10] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.342330][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.374052][ T10] usb 6-1: Product: syz [ 450.393571][ T10] usb 6-1: Manufacturer: syz [ 450.414391][ T10] usb 6-1: SerialNumber: syz [ 450.461833][ T10] usb 6-1: config 0 descriptor?? [ 450.489188][T11385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 450.538135][ T10] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 450.599120][ T10] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 450.760359][ T8842] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 450.826018][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 450.880029][ T8840] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 450.929388][ T8842] usb 1-1: Using ep0 maxpacket: 32 [ 450.942779][ T8842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.952996][ T8842] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 450.993810][ T8842] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 451.019401][ T8842] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 451.034092][ T8842] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 451.050897][ T8842] usb 1-1: config 128 has no interface number 0 [ 451.061125][ T8840] usb 4-1: Using ep0 maxpacket: 16 [ 451.075910][ T8842] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 451.094350][ T8840] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 451.113186][ T8842] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 451.130881][ T8842] usb 1-1: config 128 interface 127 has no altsetting 0 [ 451.138134][ T8840] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 451.157637][ T8840] usb 4-1: config 0 has no interface number 0 [ 451.164403][T11385] bridge_slave_0: left allmulticast mode [ 451.180618][ T8842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.189925][ T8840] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 451.204503][ T8842] usb 1-1: Product: syz [ 451.207098][T11385] bridge_slave_0: left promiscuous mode [ 451.208770][ T8840] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 451.234910][ T8842] usb 1-1: Manufacturer: syz [ 451.242091][ T8842] usb 1-1: SerialNumber: syz [ 451.252663][ T8840] usb 4-1: config 0 interface 48 has no altsetting 0 [ 451.261541][T11398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 451.275200][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.281744][ T8840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.293975][ T8840] usb 4-1: Product: syz [ 451.298272][ T8840] usb 4-1: Manufacturer: syz [ 451.307285][ T8840] usb 4-1: SerialNumber: syz [ 451.322059][ T8840] usb 4-1: config 0 descriptor?? [ 451.356004][T11385] bridge_slave_1: left allmulticast mode [ 451.372603][T11385] bridge_slave_1: left promiscuous mode [ 451.390486][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.433383][T11385] bond0: (slave bond_slave_0): Releasing backup interface [ 451.464702][T11385] bond0: (slave bond_slave_1): Releasing backup interface [ 451.565139][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 451.581229][T11385] team0: Port device team_slave_0 removed [ 451.590046][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 451.608515][ T8840] gspca_main: spca508-2.14.0 probing 041e:4018 [ 451.638486][ T8840] gspca_spca508: reg_read err -71 [ 451.658617][ T8840] gspca_spca508: reg_read err -71 [ 451.661300][T11385] team0: Port device team_slave_1 removed [ 451.674026][ T8840] gspca_spca508: reg_read err -71 [ 451.691260][ T8840] gspca_spca508: reg_read err -71 [ 451.707589][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.707783][ T8840] gspca_spca508: reg_read err -71 [ 451.738666][T11385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.739835][ T8840] gspca_spca508: reg write: error -71 [ 451.772078][ T8840] spca508 4-1:0.48: probe with driver spca508 failed with error -71 [ 451.781205][ T8842] usb 1-1: USB disconnect, device number 101 [ 451.804185][ T8840] usb 4-1: USB disconnect, device number 88 [ 451.838234][T11385] batman_adv: batadv0: Interface deactivated: 5 [ 451.866701][T11385] batman_adv: batadv0: Removing interface: 5 [ 451.867617][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.895904][T11385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.924411][ T8814] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 451.957135][T11419] team0: Port device xfrm0 added [ 452.028404][ T8840] usb 6-1: USB disconnect, device number 17 [ 452.042414][ T8840] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 452.054132][ T8840] cyberjack 6-1:0.69: device disconnected [ 452.089284][ T8814] usb 3-1: Using ep0 maxpacket: 32 [ 452.103729][ T8814] usb 3-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 452.125109][ T8814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.145512][ T8814] usb 3-1: Product: syz [ 452.157378][ T8814] usb 3-1: Manufacturer: syz [ 452.169239][ T8814] usb 3-1: SerialNumber: syz [ 452.425676][ T8814] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 452.434156][ T8814] usb 3-1: unit 5 not found! [ 452.460090][ T5706] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 452.562595][ T8814] usb 3-1: USB disconnect, device number 112 [ 452.621158][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 452.653507][ T5706] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.659320][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.679236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 452.714620][ T5706] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.755777][ T5706] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.786344][ T5706] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 452.815729][ T5706] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 452.841329][ T5706] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 452.879982][ T5706] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.937094][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.245306][ T5706] usb 1-1: GET_CAPABILITIES returned 0 [ 453.251133][ T5706] usbtmc 1-1:16.0: can't read capabilities [ 453.339373][ T8840] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 453.359406][ T8814] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 453.489358][ T8840] usb 4-1: Using ep0 maxpacket: 16 [ 453.500098][ T8840] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.511796][ T8814] usb 3-1: Invalid ep0 maxpacket: 64 [ 453.526090][ T8840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.544268][T11464] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=2390139011 (152968896704 ns) > initial count (49427405440 ns). Using initial count to start timer. [ 453.551154][ T8840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.581214][T11464] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=2867649874 (22941198992 ns) > initial count (10830561592 ns). Using initial count to start timer. [ 453.609292][ T8840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.639410][ T8840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.660689][ T8840] usb 4-1: config 0 descriptor?? [ 453.669519][ T8814] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 453.829503][ T8814] usb 3-1: Invalid ep0 maxpacket: 64 [ 453.835350][ T8814] usb usb3-port1: attempt power cycle [ 454.093627][ T8840] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0024/input/input56 [ 454.202631][ T8814] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 454.262102][ T8814] usb 3-1: Invalid ep0 maxpacket: 64 [ 454.304263][T11452] syzkaller0: entered promiscuous mode [ 454.310081][T11452] syzkaller0: entered allmulticast mode [ 454.390965][ T8814] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 454.450544][ T8814] usb 3-1: Invalid ep0 maxpacket: 64 [ 454.476788][ T8814] usb usb3-port1: unable to enumerate USB device [ 454.581350][ T8840] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 454.686857][ T8840] usb 4-1: USB disconnect, device number 89 [ 454.799846][ T8814] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 454.817937][T11474] fido_id[11474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 454.964374][ T8814] usb 6-1: unable to get BOS descriptor or descriptor too short [ 454.972382][ T8814] usb 6-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=ea.e7 [ 454.985465][ T8814] usb 6-1: config 3 has an invalid interface number: 73 but max is 1 [ 454.996519][ T8814] usb 6-1: config 3 has no interface number 1 [ 455.010660][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.017785][ T8814] usb 6-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 455.049174][ T8814] usb 6-1: config 3 interface 0 has no altsetting 0 [ 455.058706][ T8814] usb 6-1: config 3 interface 73 has no altsetting 0 [ 455.081259][ T8814] usb 6-1: string descriptor 0 read error: -22 [ 455.094332][ T8814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.154847][ T8814] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 455.191310][ T8814] dvb_usb_af9035 6-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 455.254345][ T5713] usb 1-1: USB disconnect, device number 102 [ 455.551296][ T5706] usb 6-1: USB disconnect, device number 18 [ 455.869464][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 456.040345][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 456.061962][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 456.079574][ T5706] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 456.085284][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 456.121962][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 456.152092][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.176353][ T10] usb 4-1: Product: syz [ 456.190156][ T10] usb 4-1: Manufacturer: syz [ 456.196829][ T10] usb 4-1: SerialNumber: syz [ 456.217455][ T10] usb 4-1: config 0 descriptor?? [ 456.249366][ T5713] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 456.270897][ T5706] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 456.296551][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.329855][ T5706] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 456.357948][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.397730][ T5706] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 456.424190][ T5713] usb 6-1: unable to get BOS descriptor or descriptor too short [ 456.461960][ T5713] usb 6-1: not running at top speed; connect to a high speed hub [ 456.480656][ T5713] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 456.506038][ T5713] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 456.525256][ T5713] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 456.534244][ T5713] usb 6-1: config 14 has no interface number 0 [ 456.544915][T11487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.554162][T11487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.564898][ T5713] usb 6-1: config 14 has no interface number 1 [ 456.578893][ T5713] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 456.593233][ T9279] usb 1-1: Failed to submit usb control message: -71 [ 456.594612][ T8813] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 456.601731][ T9279] usb 1-1: unable to send the bmi data to the device: -71 [ 456.613917][ T5713] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 456.628963][ T8814] usb 1-1: USB disconnect, device number 103 [ 456.634325][ T9279] usb 1-1: unable to get target info from device [ 456.640687][ T5713] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 456.643808][ T9279] usb 1-1: could not get target info (-71) [ 456.653780][ T5713] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 456.674767][ T9279] usb 1-1: could not probe fw (-71) [ 456.729327][ T5713] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 456.742746][ T5713] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 456.774671][ T5713] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.805276][ T5713] usb 6-1: config 14 interface 57 has no altsetting 0 [ 456.812508][ T8813] usb 2-1: not running at top speed; connect to a high speed hub [ 456.821604][ T8813] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 456.831492][ T5713] usb 6-1: config 14 interface 228 has no altsetting 0 [ 456.844744][ T8813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.855432][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.863558][ T5713] usb 6-1: Product: syz [ 456.867822][ T5713] usb 6-1: Manufacturer: syz [ 456.874502][ T8813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.882978][ T5713] usb 6-1: SerialNumber: syz [ 456.917047][ T8813] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 457.329486][ T5713] legousbtower 6-1:14.57: interrupt endpoints not found [ 457.716550][ T8813] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 457.756048][ T5713] legousbtower 6-1:14.228: get version request failed: -32 [ 457.771421][ T8813] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 457.803116][ T5713] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -32 [ 457.817590][ T8813] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 457.892601][ T8813] usb 2-1: USB disconnect, device number 126 [ 458.349257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 458.666299][T11531] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1498'. [ 458.689256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 458.799253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 458.879034][T11533] netlink: 'syz.3.1496': attribute type 4 has an invalid length. [ 458.903142][ T8813] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 459.059492][ T8813] usb 2-1: device descriptor read/64, error -71 [ 459.319755][ T8813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 459.459481][ T8813] usb 2-1: device descriptor read/64, error -71 [ 459.570804][ T8813] usb usb2-port1: attempt power cycle [ 459.679682][ T8842] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 459.816679][ T5713] usb 6-1: USB disconnect, device number 19 [ 459.833643][ T8842] usb 1-1: device descriptor read/64, error -71 [ 459.941543][ T8813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 459.990992][ T8813] usb 2-1: device descriptor read/8, error -71 [ 460.099418][ T8842] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 460.239559][ T8842] usb 1-1: device descriptor read/64, error -71 [ 460.249595][ T8813] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 460.290704][ T8813] usb 2-1: device descriptor read/8, error -71 [ 460.379871][ T8842] usb usb1-port1: attempt power cycle [ 460.410439][ T8813] usb usb2-port1: unable to enumerate USB device [ 460.497756][T11565] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1508'. [ 460.605983][T11565] syz.3.1508 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 460.650091][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.3.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.650133][T11565] Tainted: [L]=SOFTLOCKUP [ 460.650141][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.650153][T11565] Call Trace: [ 460.650222][T11565] [ 460.650278][T11565] dump_stack_lvl+0xe8/0x150 [ 460.650406][T11565] dump_header+0xd3/0x4b0 [ 460.650458][T11565] oom_kill_process+0x3ab/0x970 [ 460.650512][T11565] out_of_memory+0x1064/0x1480 [ 460.650530][T11565] ? try_charge_memcg+0xbca/0x1590 [ 460.650607][T11565] ? __pfx_out_of_memory+0x10/0x10 [ 460.650625][T11565] ? do_raw_spin_unlock+0xf5/0x210 [ 460.650683][T11565] try_charge_memcg+0xc74/0x1590 [ 460.650727][T11565] ? __pfx_try_charge_memcg+0x10/0x10 [ 460.650749][T11565] ? __sock_create+0x4b3/0x9d0 [ 460.650835][T11565] ? percpu_ref_tryget+0x15/0x180 [ 460.650866][T11565] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 460.650905][T11565] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 460.650928][T11565] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 460.650953][T11565] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 460.650980][T11565] kmem_cache_alloc_noprof+0x350/0x5f0 [ 460.651000][T11565] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 460.651019][T11565] ? sk_prot_alloc+0x57/0x210 [ 460.651069][T11565] ? sk_prot_alloc+0x57/0x210 [ 460.651103][T11565] sk_prot_alloc+0x57/0x210 [ 460.651128][T11565] ? sk_alloc+0x27/0x390 [ 460.651156][T11565] sk_alloc+0x3a/0x390 [ 460.651185][T11565] inet_create+0x7a9/0xff0 [ 460.651259][T11565] ? inet_create+0x9d/0xff0 [ 460.651284][T11565] __sock_create+0x4b3/0x9d0 [ 460.651318][T11565] smc_create_clcsk+0x34/0xb0 [ 460.651431][T11565] inet_create+0xd1c/0xff0 [ 460.651451][T11565] ? inet_create+0x9d/0xff0 [ 460.651476][T11565] __sock_create+0x4b3/0x9d0 [ 460.651511][T11565] __sys_socket+0xd6/0x1b0 [ 460.651535][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.651579][T11565] __x64_sys_socket+0x7a/0x90 [ 460.651594][T11565] do_syscall_64+0x174/0x580 [ 460.651663][T11565] ? clear_bhb_loop+0x70/0xc0 [ 460.651689][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.651711][T11565] RIP: 0033:0x7f9b09f9e0d9 [ 460.651739][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.651756][T11565] RSP: 002b:00007f9b081f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 460.651807][T11565] RAX: ffffffffffffffda RBX: 00007f9b0a225fa0 RCX: 00007f9b09f9e0d9 [ 460.651816][T11565] RDX: 0000000000000100 RSI: 4000000000000001 RDI: 0000000000000002 [ 460.651824][T11565] RBP: 00007f9b0a035024 R08: 0000000000000000 R09: 0000000000000000 [ 460.651835][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.651847][T11565] R13: 00007f9b0a226038 R14: 00007f9b0a225fa0 R15: 00007f9b0a34fa48 [ 460.651881][T11565] [ 460.955117][T11565] memory: usage 8kB, limit 8kB, failcnt 40 [ 460.961533][T11565] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 460.969014][T11565] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 460.976030][T11565] Memory cgroup stats for /syz3/test: [ 460.976352][T11565] cache 0 [ 460.984746][T11565] rss 0 [ 460.987523][T11565] rss_huge 0 [ 460.990869][T11565] shmem 0 [ 460.993840][T11565] mapped_file 0 [ 460.997312][T11565] dirty 0 [ 461.000302][T11565] writeback 0 [ 461.003632][T11565] workingset_refault_anon 0 [ 461.008161][T11565] workingset_refault_file 0 [ 461.012735][T11565] swap 0 [ 461.015629][T11565] swapcached 0 [ 461.019037][T11565] pgpgin 0 [ 461.022104][T11565] pgpgout 0 [ 461.025250][T11565] pgfault 0 [ 461.028401][T11565] pgmajfault 0 [ 461.031864][T11565] inactive_anon 0 [ 461.035526][T11565] active_anon 0 [ 461.039016][T11565] inactive_file 0 [ 461.042712][T11565] active_file 0 [ 461.046207][T11565] unevictable 0 [ 461.049770][T11565] hierarchical_memory_limit 8192 [ 461.054738][T11565] hierarchical_memsw_limit 9223372036854771712 [ 461.060965][T11565] total_cache 0 [ 461.064469][T11565] total_rss 0 [ 461.067842][T11565] total_rss_huge 0 [ 461.071704][T11565] total_shmem 0 [ 461.075176][T11565] total_mapped_file 0 [ 461.079249][T11565] total_dirty 0 [ 461.079250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 461.091047][T11565] total_writeback 0 [ 461.094911][T11565] total_workingset_refault_anon 0 [ 461.100003][T11565] total_workingset_refault_file 0 [ 461.105074][T11565] total_swap 0 [ 461.108476][T11565] total_swapcached 0 [ 461.112461][T11565] total_pgpgin 0 [ 461.116038][T11565] total_pgpgout 0 [ 461.119727][T11565] total_pgfault 0 [ 461.123428][T11565] total_pgmajfault 0 [ 461.127350][T11565] total_inactive_anon 0 [ 461.131573][T11565] total_active_anon 0 [ 461.135669][T11565] total_inactive_file 0 [ 461.139872][T11565] total_active_file 0 [ 461.143874][T11565] total_unevictable 0 [ 461.147874][T11565] anon_cost 0 [ 461.151246][T11565] file_cost 0 [ 461.154559][T11565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1508,pid=11563,uid=0 [ 461.175599][T11565] Memory cgroup out of memory: Killed process 11563 (syz.3.1508) total-vm:102384kB, anon-rss:1448kB, file-rss:23124kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 461.203005][ T5706] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 461.303070][ T8842] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 461.370968][ T8842] usb 1-1: device descriptor read/8, error -71 [ 461.447701][T11567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.632992][ T8842] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 461.660525][ T8842] usb 1-1: device descriptor read/8, error -71 [ 461.780737][ T8842] usb usb1-port1: unable to enumerate USB device [ 462.101447][ T5713] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 462.189323][ T5732] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 462.260518][ T5713] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.278162][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.286713][ T5713] usb 2-1: Product: syz [ 462.291258][ T5713] usb 2-1: Manufacturer: syz [ 462.296017][ T5713] usb 2-1: SerialNumber: syz [ 462.342435][ T5732] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 462.367426][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.381758][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 462.391232][ T8813] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.394038][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 462.419007][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.428983][ T5732] usb 3-1: Product: syz [ 462.436791][ T5732] usb 3-1: Manufacturer: syz [ 462.442451][ T5732] usb 3-1: SerialNumber: syz [ 462.465734][ T5732] usb 3-1: config 0 descriptor?? [ 462.472516][T11571] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 462.625877][T11575] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 462.639658][ T5732] rc_core: IR keymap rc-streamzap not found [ 462.659290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 462.688162][ T5732] Registered IR keymap rc-empty [ 462.708609][ T5732] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 462.743043][ T5732] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input58 [ 462.895531][T11569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.264582][ T5713] usb 3-1: USB disconnect, device number 117 [ 463.470884][ T8813] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 463.484725][ T8813] ath9k_htc: Failed to initialize the device [ 463.663899][T11588] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 463.715181][ T8813] usb 2-1: ath9k_htc: USB layer deinitialized [ 463.784746][T11599] binder: BINDER_SET_CONTEXT_MGR already set [ 463.817300][T11599] binder: 11594:11599 ioctl 4018620d 200000000100 returned -16 [ 463.831316][ T5732] usb 2-1: USB disconnect, device number 5 [ 463.953659][T11602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1519'. [ 464.084541][T11608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 464.107642][T11608] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 464.399841][ T8840] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 464.610885][ T8840] usb 1-1: Using ep0 maxpacket: 32 [ 464.636008][ T8840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 464.659074][ T8840] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 464.719814][ T8840] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 464.750079][ T5713] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 464.752943][ T8840] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 464.815651][ T8840] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 464.837879][ T8840] usb 1-1: config 128 has no interface number 0 [ 464.847349][ T8840] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 464.860725][ T8840] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.872224][ T8840] usb 1-1: config 128 interface 127 has no altsetting 0 [ 464.890764][ T8840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.902521][ T8840] usb 1-1: Product: syz [ 464.906814][ T8840] usb 1-1: Manufacturer: syz [ 464.912344][ T8840] usb 1-1: SerialNumber: syz [ 464.941399][ T5713] usb 6-1: Using ep0 maxpacket: 32 [ 464.962320][ T5713] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 464.993786][ T5713] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 465.008855][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 465.047440][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.060535][ T5732] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 465.069795][ T5713] usb 6-1: Product: syz [ 465.080850][ T5713] usb 6-1: Manufacturer: syz [ 465.094020][ T5713] usb 6-1: SerialNumber: syz [ 465.144234][ T5713] usb 6-1: config 0 descriptor?? [ 465.180267][ T5713] hub 6-1:0.0: bad descriptor, ignoring hub [ 465.199911][ T5732] usb 2-1: device descriptor read/64, error -71 [ 465.201095][ T5713] hub 6-1:0.0: probe with driver hub failed with error -5 [ 465.236759][T11626] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 465.249116][T11630] netlink: 'syz.2.1530': attribute type 13 has an invalid length. [ 465.315104][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 465.373558][ T8840] usb 1-1: USB disconnect, device number 108 [ 465.450377][ T5732] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 465.550745][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.620808][ T5732] usb 2-1: device descriptor read/64, error -71 [ 465.665814][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.689995][ T5713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.698000][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.740316][ T5732] usb usb2-port1: attempt power cycle [ 465.961963][ T5713] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 465.982475][ T5713] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 466.080964][ T5732] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 466.140325][ T5732] usb 2-1: device descriptor read/8, error -71 [ 466.399474][ T5732] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 466.440127][ T5732] usb 2-1: device descriptor read/8, error -71 [ 466.519446][ T5713] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 466.569784][ T5732] usb usb2-port1: unable to enumerate USB device [ 466.589925][ T8813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.603198][T11654] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 466.679282][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 466.686959][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 466.703438][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.714856][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.725257][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.741130][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.756094][ T5713] usb 3-1: config 0 descriptor?? [ 467.450482][ T5713] usbhid 3-1:0.0: can't add hid device: -71 [ 467.464090][ T5713] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 467.503842][ T5713] usb 3-1: USB disconnect, device number 118 [ 467.723837][ T8840] usb 6-1: USB disconnect, device number 21 [ 467.938111][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1540'. [ 468.087568][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 468.141397][T11666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 468.529403][ T5713] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 468.691219][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 468.714173][ T5713] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 468.778149][ T5713] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 468.828015][ T5713] usb 3-1: config 1 has no interface number 0 [ 468.855380][ T5713] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 468.886740][ T5713] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 468.906849][ T5713] usb 3-1: config 1 interface 105 has no altsetting 0 [ 468.941086][T11687] loop5: detected capacity change from 0 to 7 [ 468.950946][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 468.962637][ T5713] usb 3-1: Product: syz [ 468.982372][T11687] Dev loop5: unable to read RDB block 7 [ 469.004208][ T5713] usb 3-1: Manufacturer: syz [ 469.021130][T11687] loop5: AHDI p1 p3 p4 [ 469.021690][ T5713] usb 3-1: SerialNumber: syz [ 469.031181][T11689] netlink: 'syz.5.1547': attribute type 2 has an invalid length. [ 469.043008][T11687] loop5: partition table partially beyond EOD, truncated [ 469.060051][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1547'. [ 469.078506][T11687] loop5: p1 size 100663296 extends beyond EOD, truncated [ 469.110050][T11669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.160280][T11669] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.219474][T11687] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 469.375540][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 469.386356][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 469.402251][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 469.416327][T11689] : entered promiscuous mode [ 469.428179][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 469.455773][T11711] CUSE: unknown device info "n|zQC*" [ 469.478215][T11711] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 469.517322][T11711] CUSE: unknown device info "" [ 469.535392][ T5717] udevd[5717]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 469.547354][T11711] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 469.562827][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 469.567806][ T5713] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 469.586722][T11711] CUSE: DEVNAME unspecified [ 469.665187][ T5713] usb 3-1: USB disconnect, device number 119 [ 469.709424][ T8814] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 469.876266][T11713] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 469.898169][ T8814] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 469.937238][ T8814] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 469.959663][ T8814] usb 1-1: config 0 has no interface number 0 [ 469.965985][ T8814] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.995321][ T8814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.016010][ T8814] usb 1-1: Product: syz [ 470.034909][ T8814] usb 1-1: Manufacturer: syz [ 470.050855][ T8814] usb 1-1: SerialNumber: syz [ 470.083541][ T8814] usb 1-1: config 0 descriptor?? [ 470.128036][ T8814] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 470.386669][ T8815] usb 1-1: USB disconnect, device number 109 [ 470.450998][ T8815] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 470.490791][ T8814] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 470.693947][ T8814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 470.746578][ T8814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 470.794066][ T8814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.830672][ T8814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.873140][ T8814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 470.897264][ T8814] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 470.935637][ T8814] usb 3-1: Manufacturer: syz [ 470.965995][ T8814] usb 3-1: config 0 descriptor?? [ 471.052879][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1560'. [ 471.078681][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1560'. [ 471.239388][ T8840] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 471.354498][T11742] netlink: 'syz.5.1564': attribute type 4 has an invalid length. [ 471.392264][ T8840] usb 2-1: device descriptor read/64, error -71 [ 471.403322][T11742] netlink: 'syz.5.1564': attribute type 4 has an invalid length. [ 471.432594][ T8814] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 471.504680][ T8814] appleir 0003:05AC:8243.0026: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 471.524589][T11742] kvm: kvm [11741]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 471.611511][ T5732] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 471.649742][ T8840] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 471.694557][T11754] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1557'. [ 471.780892][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 471.797319][ T5732] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 471.810696][ T8840] usb 2-1: device descriptor read/64, error -71 [ 471.854162][ T5732] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.877228][T11753] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 471.910710][ T5732] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x6E, changing to 0xE [ 471.932160][ T5732] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0xE has invalid wMaxPacketSize 0 [ 471.953627][ T8840] usb usb2-port1: attempt power cycle [ 471.985523][ T5732] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 472.036603][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 472.045692][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.060387][ T5732] usb 1-1: config 0 descriptor?? [ 472.240123][T11763] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1569'. [ 472.319775][ T8840] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 472.354961][ T8840] usb 2-1: device descriptor read/8, error -71 [ 472.412057][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1568'. [ 472.492311][ T5732] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 472.522431][ T5732] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 472.553107][ T5732] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 472.575563][ T5732] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 472.596129][ T5732] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0 [ 472.619445][ T8840] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 472.648900][ T5732] hid-thrustmaster 0003:044F:B65D.0027: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 472.681029][ T8840] usb 2-1: device descriptor read/8, error -71 [ 472.691122][ T5732] hid-thrustmaster 0003:044F:B65D.0027: Unexpected non-int endpoint [ 472.708665][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.756595][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.819674][ T8840] usb usb2-port1: unable to enumerate USB device [ 472.833230][ C1] hid-thrustmaster 0003:044F:B65D.0027: URB to get model id failed with error -71 [ 472.834649][ T8815] usb 1-1: USB disconnect, device number 110 [ 472.933590][T11770] fido_id[11770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 473.282289][ T8815] usb 3-1: USB disconnect, device number 120 [ 473.502592][T11763] IPv6: Can't replace route, no match found [ 474.179551][ T8815] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 474.350157][ T8815] usb 3-1: Using ep0 maxpacket: 32 [ 474.385321][ T8815] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 474.410305][ T8815] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 474.434161][T11802] bridge0: port 3(syz_tun) entered blocking state [ 474.440827][T11802] bridge0: port 3(syz_tun) entered forwarding state [ 474.441036][ T8815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 474.461922][T11802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.478153][T11802] batman_adv: batadv0: Interface activated: dummy0 [ 474.498123][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.504931][ T8815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.538937][ T8815] usb 3-1: config 0 descriptor?? [ 474.610101][T11802] tipc: Resetting bearer [ 474.632456][T11802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.647330][T11802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.662823][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1580'. [ 474.672020][T11802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.688330][T11802] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.715411][T11818] Cannot find add_set index 0 as target [ 474.912967][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.921572][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.994332][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.001661][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.219350][ T8844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 475.369014][T11812] bond3: entered allmulticast mode [ 476.325777][T11836] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 476.449410][T11834] kvm: pic: non byte read [ 476.669798][ T10] iguanair 4-1:0.0: failed to get version [ 476.710456][ T10] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 476.795984][ T10] usb 4-1: USB disconnect, device number 90 [ 477.252743][ T8815] usbhid 3-1:0.0: can't add hid device: -71 [ 477.298486][ T8815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 477.304860][T11845] netlink: 'syz.0.1587': attribute type 12 has an invalid length. [ 477.365810][ T8815] usb 3-1: USB disconnect, device number 121 [ 477.688759][T11853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 477.880117][ T5713] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 478.079700][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 478.095832][ T5713] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 478.111347][ T8844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 478.139370][ T8844] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 478.140068][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.188761][ T8844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 478.219378][ T8844] usb 2-1: can't read configurations, error -71 [ 478.219375][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.237485][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 478.296281][ T5713] usb 3-1: config 0 descriptor?? [ 478.324342][ T5713] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 478.411615][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 478.444738][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 478.468198][ T10] usb 4-1: can't read configurations, error -61 [ 478.660582][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 478.860495][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 478.903789][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 478.927967][ T10] usb 4-1: can't read configurations, error -61 [ 478.954936][ T10] usb usb4-port1: attempt power cycle [ 479.039800][ T5713] gspca_vc032x: reg_w err -71 [ 479.051355][ T5713] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 479.063070][ T8844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 479.123786][ T5713] usb 3-1: USB disconnect, device number 122 [ 479.260356][ T8844] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 479.298114][ T8844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.321624][ T8844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.355498][ T8844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.366532][ T8844] usb 2-1: Product: syz [ 479.379614][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 479.385835][ T8844] usb 2-1: Manufacturer: syz [ 479.426140][ T8844] usb 2-1: SerialNumber: syz [ 479.442687][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 479.481773][ T8844] usb 2-1: 0:1 : does not exist [ 479.484823][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 479.508514][ T10] usb 4-1: can't read configurations, error -61 [ 479.637654][T11878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1598'. [ 479.665845][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 479.680576][ T8844] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 479.720654][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 479.728645][ T8844] usb 2-1: unit 13 not found! [ 479.797366][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 479.834322][ T10] usb 4-1: can't read configurations, error -61 [ 479.874842][ T10] usb usb4-port1: unable to enumerate USB device [ 479.990976][ T8844] usb 2-1: USB disconnect, device number 15 [ 480.152020][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.220231][T11884] vivid-000: ================= START STATUS ================= [ 480.251368][T11884] vivid-000: Radio HW Seek Mode: Bounded [ 480.268693][T11884] vivid-000: Radio Programmable HW Seek: false [ 480.299504][T11884] vivid-000: RDS Rx I/O Mode: Block I/O [ 480.323790][T11884] vivid-000: Generate RBDS Instead of RDS: false [ 480.340665][T11884] vivid-000: RDS Reception: true [ 480.362511][T11884] vivid-000: RDS Program Type: 0 inactive [ 480.387597][T11884] vivid-000: RDS PS Name: inactive [ 480.406822][T11884] vivid-000: RDS Radio Text: inactive [ 480.434648][T11884] vivid-000: RDS Traffic Announcement: false inactive [ 480.462932][T11884] vivid-000: RDS Traffic Program: false inactive [ 480.501191][T11884] vivid-000: RDS Music: false inactive [ 480.527269][T11884] vivid-000: ================== END STATUS ================== [ 480.870290][T11896] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.254628][ T8842] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.392081][T11910] fuse: Unknown parameter 'rootmz*ode' [ 481.431610][ T8842] usb 6-1: Using ep0 maxpacket: 16 [ 481.459163][ T8842] usb 6-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 481.503292][T11907] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.521809][ T8842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.561159][ T8842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.583092][ T8842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.604786][ T8842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.698392][ T8842] usb 6-1: config 0 descriptor?? [ 481.779497][ T8844] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 481.890064][T11918] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1609'. [ 481.959472][ T8844] usb 3-1: device descriptor read/64, error -71 [ 482.259388][ T8844] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 482.419444][ T8844] usb 3-1: device descriptor read/64, error -71 [ 482.581437][ T8844] usb usb3-port1: attempt power cycle [ 482.806678][ T8842] usbhid 6-1:0.0: can't add hid device: -71 [ 482.863149][ T8842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 482.939836][ T8842] usb 6-1: USB disconnect, device number 22 [ 482.964367][ T8844] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 483.014250][ T8844] usb 3-1: device descriptor read/8, error -71 [ 483.147680][T11941] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 483.280098][ T8844] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 483.340328][ T8844] usb 3-1: device descriptor read/8, error -71 [ 483.509975][ T8844] usb usb3-port1: unable to enumerate USB device [ 483.972411][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 484.045993][T11963] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 485.133046][T11982] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.699389][ T8842] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 486.932828][ T8842] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 487.021647][ T8842] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 487.084288][ T8842] usb 2-1: config 0 has no interface number 0 [ 487.135756][ T8842] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 487.205975][ T8842] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 487.263902][ T8842] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 487.333398][ T8842] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 487.371079][ T8842] usb 2-1: Product: syz [ 487.402871][ T8842] usb 2-1: SerialNumber: syz [ 487.476817][ T8842] usb 2-1: config 0 descriptor?? [ 487.586412][ T8842] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 487.765543][T11997] binder: 11995:11997 ioctl c0306201 0 returned -14 [ 488.349342][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 488.674997][T12006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 488.693414][T12006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 488.793235][T12005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.922942][T12012] syz.0.1635 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 489.220015][ T8842] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 489.260997][ T10] usb 2-1: USB disconnect, device number 16 [ 489.392369][ T8842] usb 1-1: Using ep0 maxpacket: 32 [ 489.423650][ T8842] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 489.470190][ T8842] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 489.525382][ T8842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.548136][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 489.595430][ T8842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 106, changing to 10 [ 489.695220][ T8842] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 489.775138][ T8842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.848672][ T8842] usb 1-1: config 0 descriptor?? [ 489.889273][T12025] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 489.996927][T12025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.081876][T12025] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 490.314640][ T8842] saitek 0003:06A3:0CFA.0028: item fetching failed at offset 0/6 [ 490.333186][ T8842] saitek 0003:06A3:0CFA.0028: parse failed [ 490.351273][ T8842] saitek 0003:06A3:0CFA.0028: probe with driver saitek failed with error -22 [ 490.545209][T12011] bond0: Caught tx_queue_len zero misconfig [ 490.617160][ T10] usb 1-1: USB disconnect, device number 111 [ 490.693884][ T5713] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 490.840047][T12048] input: syz0 as /devices/virtual/input/input59 [ 490.880115][ T5713] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 490.902611][ T5713] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 490.919375][ T5713] usb 4-1: config 0 has no interface number 0 [ 490.946538][ T5713] usb 4-1: config 0 interface 41 has no altsetting 0 [ 490.969126][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.998526][ T5713] usb 4-1: Product: syz [ 491.003360][ T5713] usb 4-1: Manufacturer: syz [ 491.008026][ T5713] usb 4-1: SerialNumber: syz [ 491.022285][ T5713] usb 4-1: config 0 descriptor?? [ 491.448878][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.473537][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.499118][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.535902][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.626972][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 491.644426][T12035] tap0: tun_chr_ioctl cmd 1074025677 [ 491.656032][T12035] tap0: linktype set to 0 [ 491.882917][ T5713] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 492.109982][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 492.159359][ T5732] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 492.259329][ T8815] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 492.267072][ T10] usb 6-1: device descriptor read/64, error -71 [ 492.320983][ T5732] usb 2-1: not running at top speed; connect to a high speed hub [ 492.328781][ T5732] usb 2-1: New USB device found, idVendor=106c, idProduct=3701, bcdDevice=1f.a5 [ 492.341862][ T5732] usb 2-1: config 8 has an invalid interface number: 133 but max is 2 [ 492.352166][ T5732] usb 2-1: config 8 has an invalid interface number: 59 but max is 2 [ 492.362473][ T5732] usb 2-1: config 8 has an invalid interface number: 128 but max is 2 [ 492.371135][ T5732] usb 2-1: config 8 has no interface number 0 [ 492.377404][ T5732] usb 2-1: config 8 has no interface number 1 [ 492.383748][ T5732] usb 2-1: config 8 has no interface number 2 [ 492.391768][ T5732] usb 2-1: config 8 interface 133 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 492.403117][ T5732] usb 2-1: config 8 interface 59 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 492.414192][ T5732] usb 2-1: config 8 interface 59 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 492.425343][ T5732] usb 2-1: config 8 interface 59 altsetting 5 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 492.431759][ T8815] usb 3-1: not running at top speed; connect to a high speed hub [ 492.439593][ T5732] usb 2-1: config 8 interface 59 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 492.457042][ T8815] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.40 [ 492.457449][ T5732] usb 2-1: config 8 interface 59 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 492.482088][ T8815] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 492.484083][ T5732] usb 2-1: config 8 interface 59 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 492.508936][ T8815] usb 3-1: config 1 interface 0 has no altsetting 1 [ 492.509471][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 492.519711][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 492.526492][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 492.545007][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 492.546996][ T8815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.564787][ T8815] usb 3-1: Product: ೥ᣉ䉇醥瞾饧㜏ಯ깩ꄅ穙㉦緧玥㖊䏖牕톑矛啋鿳鯌ꃮ펍ꎜ㇠㖰ꘙ [ 492.568779][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 492.578418][ T8815] usb 3-1: Manufacturer: ⠉ [ 492.594768][ T8815] usb 3-1: SerialNumber: syz [ 492.614089][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 492.625440][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 492.636439][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 492.656193][ T5732] usb 2-1: config 8 interface 128 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 492.670784][ T5732] usb 2-1: config 8 interface 133 has no altsetting 0 [ 492.677925][ T5732] usb 2-1: config 8 interface 59 has no altsetting 0 [ 492.685317][ T5732] usb 2-1: config 8 interface 128 has no altsetting 0 [ 492.697106][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.706899][ T5732] usb 2-1: Product: ␉ [ 492.711364][ T5732] usb 2-1: Manufacturer: 眠 [ 492.716061][ T5732] usb 2-1: SerialNumber: 峜ꂠ⡗踼硅쁸巈쬁ꪠᰈճ뺷戀ǥ譃穁뀼뷯蠚䅫ꐱ晉ࣼ尐ꓮ傿኶苶刯뿥痡鍈늂뾙ᦲ鼯䳩댵༗ꍪᅭ൛੔꼸難끸娅ꝿ혆ﳯᗅ㕰빳䑻띀ᤱ嶐䆖驒ᅪ窨㬻ᵝḮً昚맂峖醳㷘틐޾⹲졎舆巕듦ƿ쐜痪涂可梁⊘ [ 492.721429][ T10] usb 6-1: device descriptor read/64, error -71 [ 492.769909][T12078] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 492.853718][T12081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 492.863319][ T10] usb usb6-port1: attempt power cycle [ 492.881362][ T8815] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 492.884386][T12096] trusted_key: encrypted_key: keyword 'nāeefault' not recognized [ 492.923357][ T8815] usb 3-1: USB disconnect, device number 127 [ 492.992673][ T5732] qcaux 2-1:8.133: qcaux converter detected [ 493.015246][ T5732] usb 2-1: qcaux converter now attached to ttyUSB0 [ 493.058152][ T5732] usb 2-1: USB disconnect, device number 17 [ 493.092577][ T5732] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 493.121747][ T5732] qcaux 2-1:8.133: device disconnected [ 493.170429][T12103] usb usb7: usbfs: process 12103 (syz.0.1662) did not claim interface 0 before use [ 493.209385][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 493.230208][ T10] usb 6-1: device descriptor read/8, error -71 [ 493.469597][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 493.487550][ T8815] usb 4-1: USB disconnect, device number 95 [ 493.506510][ T10] usb 6-1: device descriptor read/8, error -71 [ 493.610064][T12108] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.1664'. [ 493.634720][ T10] usb usb6-port1: unable to enumerate USB device [ 493.716585][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1666'. [ 493.869330][ T5732] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 493.939367][ T8815] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 494.009530][ T5732] usb 2-1: device descriptor read/64, error -71 [ 494.109289][ T8815] usb 4-1: Using ep0 maxpacket: 32 [ 494.120056][ T8815] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 494.140777][ T8815] usb 4-1: config index 0 descriptor too short (expected 181, got 36) [ 494.159315][ T8815] usb 4-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 494.179882][ T8815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 64, changing to 10 [ 494.209303][ T8815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 494.220907][ T8815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.251578][ T8815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.269516][ T5732] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 494.277370][ T8815] usb 4-1: Product: syz [ 494.282565][ T8815] usb 4-1: Manufacturer: syz [ 494.298295][ T8815] usb 4-1: SerialNumber: syz [ 494.318914][ T8815] usb 4-1: config 0 descriptor?? [ 494.411609][ T5732] usb 2-1: device descriptor read/64, error -71 [ 494.541293][ T5732] usb usb2-port1: attempt power cycle [ 494.555076][ T8842] usb 4-1: USB disconnect, device number 96 [ 494.689408][ T8844] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 494.831329][ T8844] usb 3-1: device descriptor read/64, error -71 [ 494.889361][ T5732] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 494.905006][T12130] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1672'. [ 494.930333][ T5732] usb 2-1: device descriptor read/8, error -71 [ 495.069572][ T8844] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 495.179777][ T5732] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 495.212080][ T5732] usb 2-1: device descriptor read/8, error -71 [ 495.222804][ T8844] usb 3-1: device descriptor read/64, error -71 [ 495.359722][ T5732] usb usb2-port1: unable to enumerate USB device [ 495.369716][ T8844] usb usb3-port1: attempt power cycle [ 495.471147][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 495.660367][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.672010][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.699352][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.730454][ T8844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 495.742023][ T10] usb 6-1: config 0 descriptor?? [ 495.793410][ T8844] usb 3-1: device descriptor read/8, error -71 [ 495.966070][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 495.985456][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 496.020278][ T10] usb 6-1: USB disconnect, device number 27 [ 496.059519][ T8844] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 496.100735][ T5732] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 496.119714][ T8844] usb 3-1: device descriptor read/8, error -71 [ 496.250785][ T8844] usb usb3-port1: unable to enumerate USB device [ 496.269731][ T5732] usb 4-1: device descriptor read/64, error -71 [ 496.489325][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 496.529538][ T5732] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 496.639989][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 496.659920][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.682024][ T5732] usb 4-1: device descriptor read/64, error -71 [ 496.682083][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.709784][ T10] usb 6-1: config 0 descriptor?? [ 496.810244][ T5732] usb usb4-port1: attempt power cycle [ 497.039345][ T8840] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 497.136607][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.147563][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.149436][ T5732] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 497.157191][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.176477][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.189918][ T8840] usb 2-1: Using ep0 maxpacket: 16 [ 497.195948][ T5732] usb 4-1: device descriptor read/8, error -71 [ 497.203558][ T8840] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 497.215337][ T8840] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 497.227771][ T8840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 497.237963][ T8840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.246516][ T8840] usb 2-1: Product: syz [ 497.251276][ T8840] usb 2-1: Manufacturer: 柧좹泺碏瞽잹侠碨缱䛘㣩迌㓚쮛䄍Ὄ欔盢臓쭼䈋颤㴧夭โ䨔Რꚡ䀎쀃嫃鲞טּ愧줆୲畺⺴皊嶴㽚组뫈▱滪Ň읬붱똗๜끆謹㳥⟖䟖㱱뿃ᴛ顥殼ᐒ䝫챂疀ﶅඉ㛗썂䂘ে勈푪❗ɓ艪丏꩓綋瀐ऎ逽꩞ꮇ붅ᝡ瘚𢡄绩願⏄薨橖䶵滰礖ዺȡ进턅 [ 497.285772][ T8840] usb 2-1: SerialNumber: syz [ 497.449538][ T5732] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 497.472805][ T5732] usb 4-1: device descriptor read/8, error -71 [ 497.522555][ T8840] usbhid 2-1:1.0: can't add hid device: -71 [ 497.530540][ T8840] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 497.551011][ T8840] usb 2-1: USB disconnect, device number 22 [ 497.552561][ T10] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 497.588146][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input60 [ 497.600575][ T5732] usb usb4-port1: unable to enumerate USB device [ 497.927593][ T5713] usb 6-1: USB disconnect, device number 28 [ 497.933827][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 498.072045][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1685'. [ 498.379728][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 498.589973][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.607172][ T10] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 498.662211][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.705230][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 498.734646][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.762395][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.792934][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 498.816303][ T10] usb 2-1: Product: syz [ 498.828823][ T10] usb 2-1: Manufacturer: syz [ 498.846675][ T10] usb 2-1: SerialNumber: syz [ 499.343691][ T10] usb 2-1: USB disconnect, device number 23 [ 499.535274][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.835939][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 499.850825][T12215] ip6t_srh: unknown srh match flags 4000 [ 500.072099][ T5732] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 500.179449][ T10] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 500.269335][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 500.276429][ T5732] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 500.300144][ T5732] usb 3-1: config 123 interface 0 has no altsetting 0 [ 500.312853][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.321277][ T5732] usb 3-1: Product: syz [ 500.325516][ T5732] usb 3-1: Manufacturer: syz [ 500.331101][ T5732] usb 3-1: SerialNumber: syz [ 500.355060][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.363467][ T10] usb 2-1: New USB device found, idVendor=0452, idProduct=0000, bcdDevice= 0.40 [ 500.374877][ T10] usb 2-1: config 0 has too many interfaces: 227, using maximum allowed: 32 [ 500.385133][ T10] usb 2-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 500.395810][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 227 [ 500.415906][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 500.428235][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.458509][ T10] usb 2-1: string descriptor 0 read error: -22 [ 500.466109][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.484168][ T10] usb 2-1: config 0 descriptor?? [ 500.497760][T12220] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 500.521248][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.530996][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 500.538711][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 500.549472][ T8815] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 500.559485][ T30] audit: type=1326 audit(1787121052.729:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 500.588105][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 500.608284][ T30] audit: type=1326 audit(1787121052.729:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 500.609689][T12238] sctp: [Deprecated]: syz.5.1705 (pid 12238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.609689][T12238] Use struct sctp_sack_info instead [ 500.653557][T12237] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 500.694788][ T30] audit: type=1326 audit(1787121052.779:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 500.719426][ T5713] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 500.743111][ T8815] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 500.785304][ T8815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 500.807416][ T5732] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 500.831693][ T8815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 500.835912][ T30] audit: type=1326 audit(1787121052.779:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 500.863205][ T8815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 500.890544][ T5732] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.891667][ T5713] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 500.914362][ T5732] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 500.920767][ T8815] usb 1-1: Product: syz [ 500.930503][ T5732] usb 3-1: media controller created [ 500.937175][ T30] audit: type=1326 audit(1787121052.779:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 500.946001][ T8815] usb 1-1: Manufacturer: syz [ 500.966987][ T8814] usb 2-1: USB disconnect, device number 24 [ 501.018379][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.025084][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.038076][ T30] audit: type=1326 audit(1787121052.779:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 501.063158][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.064905][ T8815] usb 1-1: SerialNumber: syz [ 501.079016][ T5713] usb 4-1: config 0 descriptor?? [ 501.150274][ T8815] usb 1-1: config 0 descriptor?? [ 501.195898][ T30] audit: type=1326 audit(1787121052.779:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 501.224228][ T5732] set interface failed [ 501.224844][ T5732] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 501.249299][ T5732] error writing reg: 0xff, val: 0x00 [ 501.250931][ T30] audit: type=1326 audit(1787121052.779:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 501.284521][ T30] audit: type=1326 audit(1787121052.779:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 501.311925][ T5732] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 501.327219][ T30] audit: type=1326 audit(1787121052.819:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12213 comm="syz.2.1695" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa557b9e0d9 code=0x7ffc0000 [ 501.337868][ T5732] usb 3-1: USB disconnect, device number 6 [ 501.366386][ T5713] usbhid 4-1:0.0: can't add hid device: -71 [ 501.376442][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.393077][ T5713] usb 4-1: USB disconnect, device number 101 [ 501.393114][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.417246][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.606377][T12256] netlink: 'syz.1.1709': attribute type 10 has an invalid length. [ 501.615426][T12256] ipvlan0: entered allmulticast mode [ 501.621557][T12256] veth0_vlan: entered allmulticast mode [ 501.634841][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.647428][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.869620][ T5713] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 502.031749][ T5713] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 502.061493][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.107002][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.158469][ T5713] usb 4-1: config 0 descriptor?? [ 502.384635][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.408246][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.440338][ T5732] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 502.601462][ T5732] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.630755][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.649303][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.669321][ T8844] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 502.676987][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.691312][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.704156][ T5732] usb 3-1: config 0 descriptor?? [ 502.839737][ T8844] usb 6-1: Using ep0 maxpacket: 16 [ 502.852292][ T8844] usb 6-1: New USB device found, idVendor=0f88, idProduct=042e, bcdDevice= 1.00 [ 502.877432][ T8844] usb 6-1: config 12 has an invalid interface number: 65 but max is 2 [ 502.895701][ T8844] usb 6-1: config 12 has an invalid interface number: 25 but max is 2 [ 502.905125][ T8844] usb 6-1: config 12 has an invalid interface number: 88 but max is 2 [ 502.919369][ T8844] usb 6-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 502.934155][ T8844] usb 6-1: config 12 has no interface number 0 [ 502.943421][ T8844] usb 6-1: config 12 has no interface number 1 [ 502.969326][ T8844] usb 6-1: config 12 has no interface number 2 [ 502.982212][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 502.997668][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 503.011871][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 503.023402][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x5, skipping [ 503.040656][ T5713] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 503.054411][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.059360][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x2, skipping [ 503.076511][ T5713] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 503.093654][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.094313][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has an invalid descriptor for endpoint zero, skipping [ 503.133596][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x82, skipping [ 503.133631][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x7, skipping [ 503.133657][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 503.133685][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 503.133747][ T8844] usb 6-1: config 12 interface 88 altsetting 99 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 503.133774][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x7, skipping [ 503.133798][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x5, skipping [ 503.133820][ T8844] usb 6-1: config 12 interface 88 altsetting 99 has a duplicate endpoint with address 0x2, skipping [ 503.133841][ T8844] usb 6-1: config 12 interface 65 has no altsetting 0 [ 503.133920][ T8844] usb 6-1: config 12 interface 25 has no altsetting 0 [ 503.133940][ T8844] usb 6-1: config 12 interface 88 has no altsetting 0 [ 503.176876][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 503.178723][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 503.179646][ C1] raw-gadget.4 gadget.2: ignoring, device is not running [ 503.180230][ T5732] usbhid 3-1:0.0: can't add hid device: -32 [ 503.185626][ T5732] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 503.215935][ T8844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.215968][ T8844] usb 6-1: Product: syz [ 503.215987][ T8844] usb 6-1: Manufacturer: syz [ 503.216032][ T8844] usb 6-1: SerialNumber: syz [ 503.274083][ T5732] usb 3-1: USB disconnect, device number 7 [ 503.302019][ T8815] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 503.475460][ T8815] pctv452e: pctv452e_power_ctrl: 1 [ 503.475460][ T8815] [ 503.477954][ T8814] usb 4-1: USB disconnect, device number 102 [ 503.485491][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 503.506623][ T8815] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 503.506623][ T8815] [ 503.547379][ T8815] dvb-usb: bulk message failed: -22 (5/0) [ 503.606006][ T8815] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 503.647206][ T8815] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 503.697384][ T8844] usb-storage 6-1:12.65: USB Mass Storage device detected [ 503.717204][ T8815] usb 1-1: USB disconnect, device number 112 [ 503.747277][ T8844] usb-storage 6-1:12.65: Quirks match for vid 0f88 pid 042e: 10 [ 503.878391][ T8844] usb-storage 6-1:12.25: USB Mass Storage device detected [ 503.916720][ T8844] usb-storage 6-1:12.25: Quirks match for vid 0f88 pid 042e: 10 [ 503.929931][T12302] bond4: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 503.965447][ T5732] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 503.998241][ T8844] usb-storage 6-1:12.88: USB Mass Storage device detected [ 504.007429][ T5732] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.009037][T12302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.033554][ T8844] usb-storage 6-1:12.88: Quirks match for vid 0f88 pid 042e: 10 [ 504.426094][ T8844] usb 6-1: USB disconnect, device number 29 [ 504.589783][ T8842] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 504.659310][ T8815] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 504.762545][ T8842] usb 4-1: Using ep0 maxpacket: 8 [ 504.782064][ T8842] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 504.820919][ T8842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.843250][ T8815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 504.863554][ T8815] usb 1-1: not running at top speed; connect to a high speed hub [ 504.896518][ T8815] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 504.937530][ T8815] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 504.970514][ T8815] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 504.983295][ T8815] usb 1-1: config 14 has no interface number 0 [ 505.010809][ T8842] pvrusb2: Hardware description: Terratec Grabster AV400 [ 505.035335][ T8815] usb 1-1: config 14 has no interface number 1 [ 505.042348][ T8842] pvrusb2: ********** [ 505.042395][ T8842] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 505.042411][ T8842] pvrusb2: Important functionality might not be entirely working. [ 505.042422][ T8842] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 505.042436][ T8842] pvrusb2: ********** [ 505.094516][ T8815] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 505.173625][ T2356] pvrusb2: Invalid write control endpoint [ 505.192127][ T8815] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 505.240538][ T8815] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 505.293044][ T8815] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 505.296339][ T8842] IPVS: starting estimator thread 0... [ 505.368302][ T8815] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 505.398662][ T8814] usb 4-1: USB disconnect, device number 103 [ 505.470317][ T8815] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 505.490826][T12334] IPVS: using max 50 ests per chain, 120000 per kthread [ 505.528182][ T8815] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.576119][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 505.609126][ T8815] usb 1-1: config 14 interface 57 has no altsetting 0 [ 505.632374][ T8815] usb 1-1: config 14 interface 228 has no altsetting 0 [ 505.703869][ T8815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.759532][ T8815] usb 1-1: Product: syz [ 505.787939][ T8815] usb 1-1: Manufacturer: syz [ 505.809057][ T8815] usb 1-1: SerialNumber: syz [ 505.838391][ T2356] pvrusb2: Invalid write control endpoint [ 505.886430][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 505.928137][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 505.952505][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 505.983879][ T2356] pvrusb2: Device being rendered inoperable [ 506.037447][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 506.072133][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 506.305344][ T2356] pvrusb2: Attached sub-driver cx25840 [ 506.344880][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 506.389507][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 506.499391][ T8842] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 506.620005][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 506.637272][ T8815] legousbtower 1-1:14.57: interrupt endpoints not found [ 506.675317][ T8842] usb 3-1: Using ep0 maxpacket: 32 [ 506.692317][ T8842] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 506.695501][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 506.730910][ T8842] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 506.730943][ T8842] usb 3-1: config 0 has no interface number 0 [ 506.731013][ T8842] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.731037][ T8842] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 506.746016][ T8842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.746046][ T8842] usb 3-1: Product: syz [ 506.746088][ T8842] usb 3-1: Manufacturer: syz [ 506.746103][ T8842] usb 3-1: SerialNumber: syz [ 506.800689][ T8842] usb 3-1: config 0 descriptor?? [ 506.823256][ T8842] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 506.886723][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 506.886742][ T30] audit: type=1326 audit(1787121059.059:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.886816][ T30] audit: type=1326 audit(1787121059.059:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.886882][ T30] audit: type=1326 audit(1787121059.059:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b09f5e90e code=0x7ffc0000 [ 506.886960][ T30] audit: type=1326 audit(1787121059.059:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.887006][ T30] audit: type=1326 audit(1787121059.059:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.887062][ T30] audit: type=1326 audit(1787121059.059:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.887130][ T30] audit: type=1326 audit(1787121059.059:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.887169][ T30] audit: type=1326 audit(1787121059.059:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.909950][ T30] audit: type=1326 audit(1787121059.079:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 506.916749][ T30] audit: type=1326 audit(1787121059.089:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12354 comm="syz.3.1735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b09f9e0d9 code=0x7ffc0000 [ 507.055322][ T8842] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 507.196965][ T8815] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 507.198948][ T8815] legousbtower 1-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 507.283121][ T8842] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 507.299753][ T8842] usb 3-1: USB disconnect, device number 8 [ 508.233254][T12370] program syz.2.1739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.287590][T12372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 508.858029][ T8815] usb 1-1: USB disconnect, device number 113 [ 508.913079][ T8815] legousbtower 1-1:14.228: LEGO USB Tower #-159 now disconnected [ 509.290583][ T8815] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 509.455300][ T8815] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 509.500621][ T8815] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 509.531223][ T8815] usb 1-1: config 0 has no interface number 0 [ 509.569048][ T8815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.612026][ T8815] usb 1-1: Product: syz [ 509.622772][ T8815] usb 1-1: Manufacturer: syz [ 509.634098][ T8815] usb 1-1: SerialNumber: syz [ 509.670247][ T8815] usb 1-1: config 0 descriptor?? [ 509.969415][ T8842] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 510.154233][ T8842] usb 2-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 0.00 [ 510.184718][ T8842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.258186][ T8842] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.303434][ T8842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 510.318708][ T8842] usb 2-1: Product: syz [ 510.333387][ T8842] usb 2-1: Manufacturer: syz [ 510.393369][ T8842] ums-sddr55 2-1:1.0: USB Mass Storage device detected [ 510.433189][ T8842] ums-sddr55 2-1:1.0: Quirks match for vid 07c4 pid a103: 8 [ 510.440082][ T8815] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 510.465066][ T8815] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 510.478352][ T8815] asix 1-1:0.251: probe with driver asix failed with error -71 [ 510.485460][ T8842] ums-sddr55 2-1:1.0: This device (07c4,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 510.485460][ T8842] Please send a copy of this message to and [ 510.490674][ T8815] usb 1-1: USB disconnect, device number 114 [ 510.714850][T12415] IPVS: set_ctl: invalid protocol: 135 172.20.20.50:20000 [ 510.736621][ T8842] usb 2-1: USB disconnect, device number 25 [ 510.895373][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discverxzzl]! [ 510.914051][T12418] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discverxzzl]" [ 511.230167][ T31] INFO: task syz.4.1066:9843 blocked for more than 143 seconds. [ 511.273285][ T31] Tainted: G L syzkaller #0 [ 511.307425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.340648][ T31] task:syz.4.1066 state:D stack:27584 pid:9843 tgid:9841 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 511.356033][T12436] netlink: 'syz.0.1754': attribute type 3 has an invalid length. [ 511.358477][ T31] Call Trace: [ 511.370255][ T31] [ 511.377008][ T31] __schedule+0x17d9/0x56c0 [ 511.382353][ T31] ? __lock_acquire+0x683/0x2cf0 [ 511.400838][ T31] ? __pfx___schedule+0x10/0x10 [ 511.412121][ T31] ? schedule+0x90/0x2b0 [ 511.425559][ T31] schedule+0x164/0x2b0 [ 511.438976][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.450261][ T31] __mutex_lock+0x7bf/0x1550 [ 511.455154][ T31] ? __mutex_lock+0x5d4/0x1550 [ 511.464936][ T31] ? device_release_driver_internal+0x93/0x880 [ 511.485251][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.498578][ T31] ? _raw_spin_unlock+0x28/0x50 [ 511.522432][ T31] ? bus_find_device_by_name+0x235/0x280 [ 511.536611][ T31] ? __pfx_bus_find_device_by_name+0x10/0x10 [ 511.547151][ T31] device_release_driver_internal+0x93/0x880 [ 511.559240][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 511.567003][ T31] unbind_store+0x1a1/0x1d0 [ 511.574970][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 511.585279][ T31] kernfs_fop_write_iter+0x3a4/0x540 [ 511.595271][ T31] vfs_write+0x612/0xba0 [ 511.607815][ T31] ? __pfx_vfs_write+0x10/0x10 [ 511.620961][ T31] ? __fget_files+0x2a/0x420 [ 511.639802][ T31] ksys_write+0x150/0x270 [ 511.656589][ T31] ? __pfx_ksys_write+0x10/0x10 [ 511.670990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.696013][ T31] do_syscall_64+0x174/0x580 [ 511.713099][ T31] ? trace_irq_disable+0x3b/0x140 [ 511.731969][ T31] ? clear_bhb_loop+0x70/0xc0 [ 511.748605][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.765735][ T31] RIP: 0033:0x7fdfbe39e0d9 [ 511.776790][ T31] RSP: 002b:00007fdfbf201028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.796925][ T31] RAX: ffffffffffffffda RBX: 00007fdfbe625fa0 RCX: 00007fdfbe39e0d9 [ 511.816054][ T31] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000009 [ 511.834374][ T31] RBP: 00007fdfbe435024 R08: 0000000000000000 R09: 0000000000000000 [ 511.852216][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.868803][ T31] R13: 00007fdfbe626038 R14: 00007fdfbe625fa0 R15: 00007fdfbe74fa48 [ 511.879506][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.908303][ T31] [ 511.916915][ T31] [ 511.916915][ T31] Showing all locks held in the system: [ 511.944018][ T31] 5 locks held by kworker/1:0/24: [ 511.977082][ T31] #0: ffff88802028a940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.023116][ T31] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 512.055840][ T31] #2: ffff88802aac81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 512.079619][ T31] #3: ffff88807e3401d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 512.101954][ T31] #4: ffff888026c211a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 512.129278][ T31] 1 lock held by khungtaskd/31: [ 512.141052][ T31] #0: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.158838][ T31] 2 locks held by getty/5368: [ 512.167500][ T31] #0: ffff88803633a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.178265][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 512.191217][ T31] 1 lock held by syz-executor/5599: [ 512.197509][ T31] #0: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 512.207735][ T31] 5 locks held by kworker/1:15/8842: [ 512.213808][ T31] #0: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 512.227035][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 512.238600][ T31] #2: ffffffff8eb59dc0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x25f/0x7e0 [ 512.249513][ T31] #3: ffffffff9a7da748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 512.259100][ T31] #4: ffffffff9aa22f50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 512.274096][ T31] 4 locks held by syz.4.1066/9843: [ 512.280543][ T31] #0: ffff88807fd7a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 512.289789][ T31] #1: ffff8880265aa460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 512.298731][ T31] #2: ffff888057b21c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 512.308798][ T31] #3: ffff88807e3401d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0x93/0x880 [ 512.319580][ T31] 1 lock held by syz.2.1756/12440: [ 512.324733][ T31] 1 lock held by syz.2.1756/12442: [ 512.330040][ T31] #0: ffffffff8eb60068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 512.344427][ T31] [ 512.347154][ T31] ============================================= [ 512.347154][ T31] [ 512.372045][ T31] NMI backtrace for cpu 0 [ 512.372071][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 512.372098][ T31] Tainted: [L]=SOFTLOCKUP [ 512.372106][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.372117][ T31] Call Trace: [ 512.372125][ T31] [ 512.372135][ T31] dump_stack_lvl+0xe8/0x150 [ 512.372168][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 512.372312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.372341][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 512.372367][ T31] sys_info+0x135/0x170 [ 512.372388][ T31] watchdog+0xfd7/0x1030 [ 512.372437][ T31] ? watchdog+0x1c7/0x1030 [ 512.372457][ T31] kthread+0x388/0x470 [ 512.372472][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.372484][ T31] ? __pfx_kthread+0x10/0x10 [ 512.372501][ T31] ret_from_fork+0x514/0xb70 [ 512.372543][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.372568][ T31] ? __switch_to+0xc89/0x1420 [ 512.372592][ T31] ? __pfx_kthread+0x10/0x10 [ 512.372618][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.372642][ T31] [ 512.372657][ T31] Sending NMI from CPU 0 to CPUs 1: [ 512.491234][ C1] NMI backtrace for cpu 1 [ 512.491255][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.491276][ C1] Tainted: [L]=SOFTLOCKUP [ 512.491283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.491292][ C1] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 512.491317][ C1] Code: c7 20 dc 4b 8c 48 c7 c6 60 dc 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 77 ad 99 07 65 8b 0d 6c ad 99 07 f7 c1 [ 512.491334][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000083 [ 512.491350][ C1] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 0000000080000001 [ 512.491362][ C1] RDX: 0000000000000000 RSI: ffffffff8bf7d140 RDI: ffffffff8c4bdc80 [ 512.491372][ C1] RBP: 0000000000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 512.491383][ C1] R10: dffffc0000000000 R11: fffffbfff20af3e7 R12: 0000000000000000 [ 512.491394][ C1] R13: 1ffff11003bdc000 R14: 0000000000000001 R15: ffff8880b87338d0 [ 512.491405][ C1] FS: 0000000000000000(0000) GS:ffff88812503f000(0000) knlGS:0000000000000000 [ 512.491419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.491430][ C1] CR2: 0000001b339feff8 CR3: 00000000259e2000 CR4: 00000000003526f0 [ 512.491463][ C1] Call Trace: [ 512.491471][ C1] [ 512.491477][ C1] ct_kernel_exit+0x36/0x1a0 [ 512.491495][ C1] default_idle_call+0x60/0xb0 [ 512.491512][ C1] do_idle+0x2e0/0x540 [ 512.491532][ C1] ? __pfx_do_idle+0x10/0x10 [ 512.491554][ C1] cpu_startup_entry+0x43/0x60 [ 512.491572][ C1] start_secondary+0x101/0x110 [ 512.491592][ C1] common_startup_64+0x13e/0x157 [ 512.491616][ C1] [ 512.660972][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 512.667856][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 512.678562][ T31] Tainted: [L]=SOFTLOCKUP [ 512.682912][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.692992][ T31] Call Trace: [ 512.696284][ T31] [ 512.699220][ T31] vpanic+0x56c/0xa60 [ 512.703235][ T31] ? __pfx___schedule+0x10/0x10 [ 512.708099][ T31] ? __pfx_vpanic+0x10/0x10 [ 512.712641][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 512.718814][ T31] panic+0xc5/0xd0 [ 512.722546][ T31] ? __pfx_panic+0x10/0x10 [ 512.726988][ T31] ? preempt_schedule_common+0x82/0xd0 [ 512.732460][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 512.737840][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 512.744003][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 512.750165][ T31] watchdog+0x1030/0x1030 [ 512.754509][ T31] ? watchdog+0x1c7/0x1030 [ 512.758935][ T31] kthread+0x388/0x470 [ 512.763017][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.767704][ T31] ? __pfx_kthread+0x10/0x10 [ 512.772302][ T31] ret_from_fork+0x514/0xb70 [ 512.776908][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.782028][ T31] ? __switch_to+0xc89/0x1420 [ 512.786724][ T31] ? __pfx_kthread+0x10/0x10 [ 512.791325][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.796113][ T31] [ 512.799288][ T31] Kernel Offset: disabled [ 512.803617][ T31] Rebooting in 86400 seconds..