last executing test programs: 19.26844548s ago: executing program 1 (id=72): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x20) write(r4, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) 17.965940439s ago: executing program 1 (id=73): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) kexec_load(0x2, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x190) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000200)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 17.662668268s ago: executing program 1 (id=78): r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000002200)=ANY=[], 0xfffffcd9) 16.440605904s ago: executing program 1 (id=80): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000200)=[0x2, 0x6], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) close(r2) 14.944278943s ago: executing program 1 (id=87): socket$kcm(0x10, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x85, 0x7d, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='.', 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210327bd7000fcdbdf25060000000c0001800800030001000000"], 0x20}}, 0x4000000) 14.379173336s ago: executing program 1 (id=88): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff400, 0x0, 0x0, 0x0, 0x9}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 13.044057309s ago: executing program 0 (id=91): socket$kcm(0x10, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x85, 0x7d, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='.', 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210327bd7000fcdbdf25060000000c0001800800030001000000"], 0x20}}, 0x4000000) 13.042306068s ago: executing program 4 (id=92): socket$kcm(0x10, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x85, 0x7d, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='.', 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210327bd7000fcdbdf25060000000c0001800800030001000000"], 0x20}}, 0x4000000) 12.485122721s ago: executing program 3 (id=93): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x2, 0x4008440) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 12.285818704s ago: executing program 0 (id=94): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x110, 0xf5, 0x29, 0x8b, 0x20, 0x46d, 0x92e, 0x6bbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x5, 0x20, 0x45, "", [{{0x9, 0x4, 0x65, 0x2, 0x0, 0x5f, 0xe1, 0x20, 0x5b}}, {{0x9, 0x4, 0xe, 0x3, 0x0, 0x3f, 0x1c, 0xdb, 0xb9}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x55, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000d80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 12.067706357s ago: executing program 2 (id=95): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 10.318969192s ago: executing program 3 (id=96): syz_usb_connect(0x0, 0x75, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001fa73184099040e5087ff010203010902630002fd03700c0904ed05016ad3b5080a2401cf90130002010209240301050401030109050f03400001000e09044b0401928c25cb07240600019d2105240010000d240f010400000004000900da06241a090001042402090905020340"], 0x0) 10.210281356s ago: executing program 4 (id=97): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001f00)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r1], 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 9.23826523s ago: executing program 0 (id=98): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0xb, 0x4, "bd7ce6aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xe}, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x49) 8.788103449s ago: executing program 3 (id=99): r0 = syz_usb_connect(0x0, 0x495, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bc6c994086124420804d0000000109028304010000000009046e0010ffffff000905081c08000902001411427e76ec46643fbcfdda95793befdb5f07b30725010189030009050400000410010524210111ea1e8faa85e2624a04551cf55bed15d172b3f0c9db2156606b688a3b475a566809050c08ff03051008072501830981001205f162e6"], 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c17a78"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="1201a5b310000000000010b2cd6edcd804dd00000038903465a8"], 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x190, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffe0, 0x8, 0x9, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x5, 0x1, {0x8, 0x25, 0x1, 0x82, 0x3c, 0x81, 0x46d0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x8, 0x6, {0x8, 0x25, 0x1, 0x81, 0x33, 0x8, 0x7443}}}}}}}}]}}, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x9, 0xd, 0xff, 0x86}, 0x0, 0x0}) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x5f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x80, 0xfb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x7, 0x24, 0x6, 0x0, 0x0, "34a6"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x10, 0xfb}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0xc1, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1a, 0x3, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x91, 0x8, 0x40}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x9, 0x0, 0x7f, 0x40, 0xfe}, 0x2c, &(0x7f0000000500)={0x5, 0xf, 0x2c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "cfc95fe56aa33301ce2d3303bfba544d"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x81a}}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f77010000002aff0083"], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd4, 0x24, 0xe9, 0x40, 0x1de1, 0xc102, 0xf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x5, 0x0, 0x8}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000002480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x931c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x6, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x2, [], [{{0x9, 0x5, 0x2b9bf0ccbea08295, 0x3, 0x8, 0x7, 0x9, 0x6, {0x14, 0x25, 0x1, 0x10, "ff350ff707613403f3261fa8e7481e64"}}}]}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x7, 0xd0, 0xe0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "0c2511c2b46f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x67e, 0x6, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x7, 0x21}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x7b, 0xa3}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x3, 0x6d, 0x0, 0x10, 0x87}, 0x23, &(0x7f0000000780)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "b0880d61de951a1562d4907bcee54ee8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xc0, 0x3, 0x70b}]}, 0x1, [{0xb8, &(0x7f00000007c0)=@string={0xb8, 0x3, "879109a7272ce57bd05853851699c54035105f4d236d5c276c4c66749eeccae81cd4dda10506f0eda62e3dd4d0d7244bd85eaa0c60d881416af7421226983e22120d84be6c8341cd4676158ae11dc394ff670dab11d731dd2882329f760e2271013b260ae42a8e46e49f6412565e269dbee19b10fd1ea63e51e46a88062c2310ebb79fa1f4be02d2203dade333d80f85eafeabb7c837a50107a09e3db4d4e363888bf64e426cb810f7b028e8d96219ebda7aa92d04b3"}}]}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000206b1d01014000010203010902a20003016440070904000000010100000a240105001b00020102112406050605010009000300030008004809040100000102000009040101010102000007240108c9011009240201053500037f11240202060009002ded7e16d4d24f629d07240108010100092402010004000603094a9be504391e533807250108066a02090402000001020000090402010101020000090582090800050c0b0900000000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf8, 0x8, 0x9b, 0xff, 0x82}, 0x3c, &(0x7f0000000100)={0x5, 0xf, 0x3c, 0x2, [@generic={0x30, 0x10, 0x4, "4ed14aeec61501b4f4a5c9707bc19f507c475cd7962a50a019c05a8b36d492b1824043e2db09fb4bf8c610a91d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x9}]}, 0x5, [{0x6b, &(0x7f0000000200)=@string={0x6b, 0x3, "a6ab29f8d20ea02d0713c608b86bd52001ff3d01d1da0ea0a77fdbd56e21f92672411aff4da4192ec37222b0f9c658be98b8199de7aa4cf4ce21a159f9a104b9cd6728028a266c9866be2a7f6be28197650dc10677a012061195e48821da37820a73fd18dc9055e35f"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x807}}, {0xcb, &(0x7f0000000300)=ANY=[@ANYBLOB="cb0319e4cab1d0e5b8bba990244edf1c95a9b908f08389685e84eb100f4ecb4715879f435724e26fe42f277e6417b04310d92f29efc809fcdb2bcbe06926f25c42491a817437f0f813d9e465a1306fe22c3078df94784f7dd6d860fca16648c5951486e37c4015bef3870c5fb5756941d89ed846dafe27d400c2409e4e23bbb1a8140a6101720353f0d2b4e361a09c0f2905003684adfe8da503afc85c25a063b500bba555ef61bc0264cf9875a479b50fbe53bdcc43d0fe1b00"/199]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x421}}]}) 8.64099921s ago: executing program 4 (id=100): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 8.326816221s ago: executing program 2 (id=101): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201ea0503ebb6103b0b12165d01010203010902120001080780030904a60c0033e75f00"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f090581032000030864090502c2d3"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a20709046800000d10b90b0231"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x2b, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0}, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r3 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x42) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.895855505s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x40, 0x31, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.852141648s ago: executing program 3 (id=103): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.138158291s ago: executing program 2 (id=104): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r3, 0x401c5820, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5.36407481s ago: executing program 4 (id=105): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a24010300030201020904010000010200"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0xac502) 4.724050358s ago: executing program 3 (id=106): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_open_dev$evdev(0x0, 0x7, 0x107003) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x800, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x73}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") syz_usb_connect(0x0, 0x34, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x1, '%'}, 0x0, 0x0, &(0x7f0000000a80)={0x20, 0x84, 0x1, "ce"}, 0x0}) read$char_usb(0xffffffffffffffff, &(0x7f0000001bc0)=""/10, 0xfffffffffffffc2e) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9d, 0xbd, 0x45, 0x40, 0x10b9, 0x6000, 0xbe16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x40, 0x19, 0x0, 0x3a, 0x92, 0xe0, 0x8}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) 4.353196107s ago: executing program 2 (id=107): read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00"], 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a0800040935"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.643899883s ago: executing program 4 (id=108): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xfa, 0x47, 0x59, 0x8, 0x124a, 0x4023, 0x234a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x6, 0x40, 0x7, "", [{{0x9, 0x4, 0x8c, 0x8, 0x2, 0xc2, 0xbe, 0x19, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0xa1, 0x3}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x7, 0x0, 0xd}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, &(0x7f0000000500)={0x20, 0x6, 0x8e, {0x8e, 0x7, "41ded9fc659b86bebe5d6d2805025f79a71c3a381adb3735645fec6afec3bf617800842c5a1f0c4b901fd8b2190259a7c5374c85cb403600ce13992f9d938deaff41e4968e2c75e6e070614a0fae4d20fa6235b8bfab7a870dc2387e2589ae1064c5e24a5ce80e9626cf23332c6f4424dfc9289ed7db0f3543436632d33677ddebcb3882da722d41398fb300"}}, &(0x7f0000000740)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "896ebed47ab8f7df87965738bb299e2c90c3c9aebed04ebd2232f87b30ba574620e0bb299d04b8e1bd0d53e7ef5c33533c8071e6bc686846bd65ba6cd379abb793c4a3d45c2b7251e60f241beddb55ced609660e70e157f550e3d224cbf53e2fd4bdeb0d0ca6c9afc03cff806192324ff2c74b98c56f3ad08a63afbeaa038da04d122e56d87c95eed2efa30c04cb58fa14b7f785379d3d4b4163621ab824e88f4b04584d83af15882bd5d1d7dcf9f5bbb7"}}, &(0x7f0000000800)={0x0, 0x22, 0x18, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0xb, "3e2947c6"}, @main=@item_4={0x3, 0x0, 0xb, "7cdcea00"}, @local=@item_4={0x3, 0x2, 0xa, "4e7c6feb"}, @local=@item_012={0x2, 0x2, 0xa, "55f7"}, @main=@item_4={0x3, 0x0, 0xc, "697256b7"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x392}}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000008c0)={0x20, 0x7, 0x3, "276af5"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xc7}, &(0x7f0000000a80)={0x20, 0x1, 0xa3, "41c76464ddcd3f207ece9f344ea8fe9153551e10d75ec70e229bf7ba84e37960601f05b47f4727cce067cd56c8fe23073540196f6248290b14944de54f8619275263d8de7ba59f42dc71206ced5b718a440c38b73a7a850222efba00be756b961af7b57caaf67eb0f060f36235dd12b6b5f65b563da6e68b9c9fd1d984f12a4ae8b0f481bf20bbf11fa9280b85c7e544e1457b7c83bd88b8dc2ef5ec5a58d04c7704f5"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x2}}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x35, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xd5, 0x5f, 0xc8, 0x8, 0x499, 0x89a4, 0x4fcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x2, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0xe8, 0x80, 0x1, 0xff, 0xa5, 0x73, 0x50, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x81, 0x2, 0x1}]}], [{{0x9, 0x5, 0x8, 0x2, 0x400, 0x6, 0x6, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0xf, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xeb, 0x90, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x2, 0x9, 0x7, 0x6e, 0x7}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x1, 0x8, "ff7a462ede"}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xe3, '{'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x29c8, 0x407, 0x80, "90e247b0ef6812"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x6, 0x6, "9710a346a01f9a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x1a, 0xce, 0xce}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8000, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x5, 0x9, {0x7, 0x25, 0x1, 0x4, 0x5, 0xff9e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xa, 0x0, 0x10, {0x7, 0x25, 0x1, 0xc, 0x4d, 0x7}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xd, 0x7f, 0x81, 0x20, 0x5}, 0xf8, &(0x7f0000000300)={0x5, 0xf, 0xf8, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xf, 0x0, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bc3cd6559df2cbf5c5e3fd6fdc023aaa"}, @generic={0xb9, 0x10, 0xa, "bf153cbfc51dcc1a21d75a3a61daaf32c36faedc13ec0312470e2b6d85dd9bb29bbaed60f8d6a6de60a8e4f0fbcd1450d23d7a826464f91d64a007f9c0b7d0c969e049322373ec19ad381fa5c522e240cd8e23063e5200aa16c699eb1931512403f49617bce9f6d5cad5ebc53127e601813809620b2c788068095d49ff372347900d831cd7dcd6ab269b4ba8bf5cbc631a708a1aeb3e50d5d37b6616d107e825a11748135904cf3fa24d2a72d3021e2124ee7ecd184a"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x81, 0xff00, 0x5, [0x30, 0xff0028]}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0xd6, &(0x7f0000000600)=@string={0xd6, 0x3, "5353955d52b412d2058ce527a0f7e9912ae32a69700e5f687ea07d93ef0b8ecd6422b03ce1f452e447d4620da45d61936bc8b8b8c4860a64ab14e885777f126acfd9039591d82a13102051b2d7cf2f480cc301da2eb41bfbfe5fd0ddf09537223dd0d40e3fdcfc9eaf17e7716b9af439221ce437cf2d3f1080c5314464ff9b8e138c8feb719ddb55cb3ec4dcf3496d527d66ab5c79276a23d5982c752668b79f6df6b0f30979019742f2cbadb6f249046f70a93d6911823da17b5d266417f79dece5dda39fb8bb672c52e3046a77e4c13ee6e006"}}]}) syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f0000000bc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x4, 0x20, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f892f0cc2a51"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6d4a, 0x0, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0xe}, [@country_functional={0x6, 0x24, 0x7, 0xc, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x43, 0xc}, @obex={0x5, 0x24, 0x15, 0x1ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x8, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x4, 0x5}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x300, 0x8, 0x7, 0xe, 0x40, 0x9}, 0xf, &(0x7f0000000cc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x896b534ef305f848, 0x8, 0x12, 0x9, 0x1}]}, 0x2, [{0x96, &(0x7f0000000d00)=@string={0x96, 0x3, "47b9d86d41a67c51526218d50d40623680ada77e97e8d8415d1cc9551dd84276a73432c3a5a407b394bd470f60b82256e8337b2fc8cff689384b642dd5810ad415ce75af43d82d52023db407250e8774f56ec0c5064a924c88d508b91bba4ecfc8ac7ba1e146194c02a16bbf709772b7a934c33efbd2a1b5116c55b8230853efb6f36bb1d788eafdc17f14771bd2f0a4497bf585"}}, {0x79, &(0x7f0000000dc0)=@string={0x79, 0x3, "d36ac16f81995462a6d88f9a9ca2fd22b9a0e5570e0251d2c4824c44a180dafe4bba8f84e38c47f6e92f85be74e401744b6bcbe080ea125279bba16bee92b06779ad4e58d6a8a77a6873211c10bdd59394adf80b1716b0282eceba0b2beceb84f9f047476a2d99f37b487c5700d9816ad5bc9025b4eba4"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.920529938s ago: executing program 2 (id=109): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0xffffffffffffffd8, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") 2.19061617s ago: executing program 0 (id=110): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400) read$hidraw(r1, 0x0, 0x60) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000100)='B@\x00') r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) 1.31589893s ago: executing program 4 (id=111): syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.09209239s ago: executing program 3 (id=112): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)="5aaa8912", 0x4) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x766, 0x204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0xe, {0x9, 0x21, 0x34, 0x1, 0x1, {0x22, 0xcc6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x5e, 0x40}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x78c502e8f2a5d526, 0x1, 0x0, 0xd4, 0xff, 0x3}, 0x7d, &(0x7f0000000400)={0x5, 0xf, 0x7d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0xb, 0xd3d}, @ssp_cap={0xc, 0x10, 0xa, 0xf3, 0x0, 0x6, 0x0, 0xdaf}, @generic={0x65, 0x10, 0x4, "72c0930aa5b2b657b2c9fe9e23bb0055a63684865614c52d9391e30cf557206fc5dee2281b50a4287ee491e2ed808f1f7c3a3d19276457e9c73e8e5aff623993f3ab6293f8256c463450afcf6cbff4b6a8ab76a1149afe780789cddf2b5fa896550c"}]}, 0x3, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x443}}, {0x6b, &(0x7f0000000900)=@string={0x6b, 0x3, "27f6cb4bcf88760b88153cd6d304513aa51f15c18faab70461ee3083e39a9427006d73c9671ad05981628264567ca4ebfa1c85edf5ad7cd10f3becbcc31958bd60c7203c8734ca6ea89bd5df9a0bc8213fb1b0d163acb9f2d348be93273747002732990b4786975f87"}}, {0xda, &(0x7f0000000980)=@string={0xda, 0x3, "fe6330ed19f333b94c698cbe5947efac45d27d51764898fadc777c4d1547a97cfedc9775d1538f69605007d90e95bda625ca253cbd8380aa6781df5dfe281f100d7467706a9c2932c007fe960db11e248f58007525d60fb9f4fd9934780625b4f5ef45dce73f282f0f37d662313eb190ed0ef492a9fce4f461c3ec20c1497f71c6f6dc9d616ae590768ef0594f33bd6c617a326eff316da611100086d67181aa2d015637d9378ab6caae6090cfad42139d662627cfc640c8e6c681285e1001f279fc10cb98a56eee99a3077ea4b0d64128b084b3da17c80f"}}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0xac502) syz_usb_connect(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff0169000524060010"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000880), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80284511, 0x0) syz_usb_ep_write(r2, 0x81, 0x5, &(0x7f0000000180)="6173b2983a") syz_usb_control_io$uac3(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x2, 0xe3, {0xe3, 0x2, "31d2a713d0955ecbde1e0cb8df2a2d8f6fe2b7195cc2db327df0afc8f85268ecb753b6d513efd895bcb663763b8240760bf6060c812d9b26b41851e2159dd07c0ee4d8f6df1ce0d92e99c1856c9f3da07ee1dd47fef8de3c5bae5ee700a09575b626676518c5874bb6fa2ab0146a3e1ea55d10deff46b28a95dbfcb186dd51882e5c74510c6fdc308cf0a53f80760cee3f7e7c2296b185d90bcf3062a84490f6921262a7cdbf08181063911d3b039a3c68b16d0c884d2a9ce38b34b62ed2fb7a5bb76c5e7ba9d192b6242e341ac5591bf583663b0c891a76c1f0275a813adaff34"}}, &(0x7f0000000340)={0x0, 0x3, 0x49, @string={0x49, 0x3, "f2f510720a47767201920f915816093991cdcac6b37b152fc2f6891ca8aac13a19d47a555ad62c339e824ed2c668db6050af2f8af142c8c5d485ed120fe26b3ee741375508ba71"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x20, 0x14, 0xfe, "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"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "8110bf"}, 0x0, &(0x7f0000000740)={0x20, 0x83, 0x2, "51ac"}, &(0x7f0000000780)={0x20, 0x84, 0x2, "39b0"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "8c4182"}}) 131.48594ms ago: executing program 2 (id=113): r0 = syz_usb_connect(0x0, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002001009240302010100010009"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000240)=ANY=[@ANYBLOB="000304000000040b0a44"]}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x16, 0xbc, "764312bb2110a973641b04ffc2e4c3d067b5aad70cfee97e9901ec7b0a33e127979bb346ef83928e7a21bf95c2b8d23f1de05c53a1826cf651d95241b023ec8047802b69db52e57337c4bfab0233cc7dab206c95e5d523663cf28af0e19636b6b08ef8af66453cc1939977c3181d14616c80c63027870d7637460f8b03f755547a590eaaa1d8349346a6f1997cc43a8fb961462e0f61c16e2609ec4e7f672ea4d6546099f1816cd9e9b625ee3ad39e417db36bd3dda339cdbc9105e3"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x2}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xc6}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000"], 0x0) 0s ago: executing program 0 (id=114): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x8, 0x50, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xd0, 0x8, {0x7, 0x25, 0x1, 0xc, 0xf9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf7, 0xbd1e, 0x6, 0x6}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0xda}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x7, 0x1, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x3, 0x9, {0x7, 0x25, 0x1, 0x8, 0x1a, 0xfffe}}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 83.064382][ T5600] cgroup: Unknown subsys name 'net' [ 83.154410][ T5600] cgroup: Unknown subsys name 'cpuset' [ 83.163608][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.904454][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.555759][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.557240][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.557708][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.589013][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.589364][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.590598][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.600004][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.606544][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.613540][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.619287][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.623891][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.625320][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.628375][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.631240][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.633825][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.644609][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.645226][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.656657][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.674804][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.704816][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.744870][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.747991][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.748784][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.751242][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.755780][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.720449][ T5619] Bluetooth: hci0: command tx timeout [ 89.720456][ T4930] Bluetooth: hci1: command tx timeout [ 89.780288][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.780413][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.780993][ T5625] bridge_slave_0: entered allmulticast mode [ 89.782514][ T5625] bridge_slave_0: entered promiscuous mode [ 89.800405][ T5619] Bluetooth: hci4: command tx timeout [ 89.800797][ T5619] Bluetooth: hci2: command tx timeout [ 89.805072][ T5619] Bluetooth: hci3: command tx timeout [ 89.864073][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.864188][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.864473][ T5625] bridge_slave_1: entered allmulticast mode [ 89.865821][ T5625] bridge_slave_1: entered promiscuous mode [ 90.003069][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.003253][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.003709][ T5617] bridge_slave_0: entered allmulticast mode [ 90.005271][ T5617] bridge_slave_0: entered promiscuous mode [ 90.021670][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.031401][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.079775][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.079984][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.080104][ T5612] bridge_slave_0: entered allmulticast mode [ 90.081626][ T5612] bridge_slave_0: entered promiscuous mode [ 90.087636][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.087939][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.088272][ T5617] bridge_slave_1: entered allmulticast mode [ 90.097356][ T5617] bridge_slave_1: entered promiscuous mode [ 90.159760][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.160234][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.160371][ T5612] bridge_slave_1: entered allmulticast mode [ 90.178399][ T5612] bridge_slave_1: entered promiscuous mode [ 90.200741][ T5625] team0: Port device team_slave_0 added [ 90.200939][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.201045][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.201187][ T5611] bridge_slave_0: entered allmulticast mode [ 90.202922][ T5611] bridge_slave_0: entered promiscuous mode [ 90.210245][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.210662][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.211046][ T5611] bridge_slave_1: entered allmulticast mode [ 90.216350][ T5611] bridge_slave_1: entered promiscuous mode [ 90.226032][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.226334][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.226714][ T5620] bridge_slave_0: entered allmulticast mode [ 90.234500][ T5620] bridge_slave_0: entered promiscuous mode [ 90.305516][ T5625] team0: Port device team_slave_1 added [ 90.321279][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.321485][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.321794][ T5620] bridge_slave_1: entered allmulticast mode [ 90.323213][ T5620] bridge_slave_1: entered promiscuous mode [ 90.367935][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.411301][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.413644][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.442687][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.445591][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.447910][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.492575][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.492589][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.492613][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.496312][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.498442][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.574241][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.574258][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.574303][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.576599][ T5617] team0: Port device team_slave_0 added [ 90.641481][ T5612] team0: Port device team_slave_0 added [ 90.657208][ T5617] team0: Port device team_slave_1 added [ 90.688271][ T5612] team0: Port device team_slave_1 added [ 90.717577][ T5611] team0: Port device team_slave_0 added [ 90.721073][ T5620] team0: Port device team_slave_0 added [ 90.764758][ T5611] team0: Port device team_slave_1 added [ 90.766656][ T5620] team0: Port device team_slave_1 added [ 90.787155][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.787171][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.787207][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.789349][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.789364][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.789391][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.886868][ T5625] hsr_slave_0: entered promiscuous mode [ 90.887971][ T5625] hsr_slave_1: entered promiscuous mode [ 90.890087][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.890127][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.890192][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.912174][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.912241][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.912323][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.013794][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.013812][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.013835][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.015620][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.015634][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.015656][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.107936][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.107953][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.107978][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.109125][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.109146][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.109165][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.256395][ T5617] hsr_slave_0: entered promiscuous mode [ 91.257156][ T5617] hsr_slave_1: entered promiscuous mode [ 91.257711][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 91.257778][ T5617] Cannot create hsr debugfs directory [ 91.345385][ T5612] hsr_slave_0: entered promiscuous mode [ 91.346227][ T5612] hsr_slave_1: entered promiscuous mode [ 91.346815][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 91.346835][ T5612] Cannot create hsr debugfs directory [ 91.390620][ T5611] hsr_slave_0: entered promiscuous mode [ 91.391436][ T5611] hsr_slave_1: entered promiscuous mode [ 91.391975][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 91.391995][ T5611] Cannot create hsr debugfs directory [ 91.453094][ T5620] hsr_slave_0: entered promiscuous mode [ 91.453869][ T5620] hsr_slave_1: entered promiscuous mode [ 91.454450][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 91.454471][ T5620] Cannot create hsr debugfs directory [ 91.800580][ T5619] Bluetooth: hci0: command tx timeout [ 91.800612][ T5619] Bluetooth: hci1: command tx timeout [ 91.880317][ T4930] Bluetooth: hci3: command tx timeout [ 91.880349][ T4930] Bluetooth: hci2: command tx timeout [ 91.880368][ T4930] Bluetooth: hci4: command tx timeout [ 92.004452][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.021859][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.023321][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.028218][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.029139][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.061427][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.065925][ T992] cfg80211: failed to load regulatory.db [ 92.085775][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.089303][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.163018][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.167219][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.168242][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.193035][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.193962][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.197493][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.198321][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.231557][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.327539][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.340474][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.341579][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.346188][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.346987][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.367345][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.387659][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.399125][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.515612][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.525543][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.534676][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.538068][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.566410][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.576107][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.592378][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.598066][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.683822][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.728252][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.737800][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.742297][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.762831][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.765789][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.768183][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.768337][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.800548][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.812607][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.821931][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.836340][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.850465][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.850561][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.855325][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.963222][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.989155][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.014164][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.014310][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.062051][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.062355][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.135862][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.183822][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.183939][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.234868][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.234979][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.268665][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.369869][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.371862][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.433806][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.433919][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.494821][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.519157][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.519280][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.558629][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.558743][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.622472][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.622565][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.880429][ T5619] Bluetooth: hci1: command tx timeout [ 93.880464][ T5619] Bluetooth: hci0: command tx timeout [ 93.959977][ T4930] Bluetooth: hci2: command tx timeout [ 93.960013][ T4930] Bluetooth: hci4: command tx timeout [ 93.960117][ T4930] Bluetooth: hci3: command tx timeout [ 94.140748][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.373474][ T5625] veth0_vlan: entered promiscuous mode [ 94.424771][ T5625] veth1_vlan: entered promiscuous mode [ 94.562492][ T5625] veth0_macvtap: entered promiscuous mode [ 94.583875][ T5625] veth1_macvtap: entered promiscuous mode [ 94.684088][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.743182][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.831980][ T45] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836081][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836141][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852669][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911394][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.957656][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.986227][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.173642][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.177520][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.177542][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.302723][ T5617] veth0_vlan: entered promiscuous mode [ 95.306178][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.306200][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.322514][ T5611] veth0_vlan: entered promiscuous mode [ 95.349504][ T5612] veth0_vlan: entered promiscuous mode [ 95.357803][ T5617] veth1_vlan: entered promiscuous mode [ 95.403699][ T5612] veth1_vlan: entered promiscuous mode [ 95.408676][ T5611] veth1_vlan: entered promiscuous mode [ 95.568479][ T5617] veth0_macvtap: entered promiscuous mode [ 95.583956][ T5612] veth0_macvtap: entered promiscuous mode [ 95.602820][ T5625] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.634423][ T5617] veth1_macvtap: entered promiscuous mode [ 95.636321][ T5612] veth1_macvtap: entered promiscuous mode [ 95.659397][ T5611] veth0_macvtap: entered promiscuous mode [ 95.707377][ T5611] veth1_macvtap: entered promiscuous mode [ 95.744252][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.795142][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.832630][ T5620] veth0_vlan: entered promiscuous mode [ 95.845829][ T5620] veth1_vlan: entered promiscuous mode [ 95.877477][ T5620] veth0_macvtap: entered promiscuous mode [ 95.884181][ T5620] veth1_macvtap: entered promiscuous mode [ 95.904372][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.910840][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.930725][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935092][ T1011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935141][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935182][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.965313][ T5619] Bluetooth: hci0: command tx timeout [ 95.965349][ T5619] Bluetooth: hci1: command tx timeout [ 96.060063][ T4930] Bluetooth: hci3: command tx timeout [ 96.060100][ T4930] Bluetooth: hci4: command tx timeout [ 96.060125][ T4930] Bluetooth: hci2: command tx timeout [ 96.094514][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.366836][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.416947][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.808386][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.943144][ T3350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943195][ T3350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943233][ T3350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943273][ T3350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943308][ T3350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943344][ T3350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943382][ T3350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943416][ T3350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052917][ T101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052969][ T101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.053008][ T101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.053045][ T101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127704][ T5810] netlink: del zone limit has 4 unknown bytes [ 97.142392][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.142415][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.197358][ T5810] bridge0: port 3(syz_tun) entered blocking state [ 97.197492][ T5810] bridge0: port 3(syz_tun) entered disabled state [ 97.197642][ T5810] syz_tun: entered allmulticast mode [ 97.199231][ T5810] syz_tun: entered promiscuous mode [ 97.202508][ T5810] bridge0: port 3(syz_tun) entered blocking state [ 97.202927][ T5810] bridge0: port 3(syz_tun) entered forwarding state [ 97.325908][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.325931][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.392940][ T5812] process 'syz.2.7' launched './file1' with NULL argv: empty string added [ 97.396579][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 97.435918][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.435935][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.431669][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.431725][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.719505][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.730300][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.776264][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 98.858209][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.885293][ T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.885316][ T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.035071][ T5820] syzkaller1: entered promiscuous mode [ 99.035097][ T5820] syzkaller1: entered allmulticast mode [ 99.166375][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.166399][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.224973][ T5826] syzkaller1: entered promiscuous mode [ 99.224998][ T5826] syzkaller1: entered allmulticast mode [ 99.919102][ T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.919858][ T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.650536][ T33] audit: type=1800 audit(1790167728.956:2): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 101.729239][ T33] audit: type=1800 audit(1790167728.996:3): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 102.621256][ T5849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 103.487253][ T1032] IPVS: starting estimator thread 0... [ 103.581044][ T5869] IPVS: using max 29 ests per chain, 69600 per kthread [ 104.015573][ T33] audit: type=1800 audit(1790167731.326:4): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 104.796181][ T5888] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 104.841972][ T5888] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.847337][ T5888] nbd: illegal input index -1 [ 104.876295][ T5889] netlink: del zone limit has 4 unknown bytes [ 105.006396][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.849357][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 107.044079][ T5883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19'. [ 107.599908][ T5613] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.778049][ T5613] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.805610][ T5613] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 107.808791][ T5613] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 107.808822][ T5613] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.864771][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.864803][ T5613] usb 2-1: Product: syz [ 107.864820][ T5613] usb 2-1: Manufacturer: syz [ 107.864835][ T5613] usb 2-1: SerialNumber: syz [ 107.949401][ T5613] usb 2-1: config 0 descriptor?? [ 107.986394][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'. [ 108.427846][ T5613] usb 2-1: selecting invalid altsetting 0 [ 109.141021][ T5613] usb 2-1: USB disconnect, device number 2 [ 109.379622][ T5726] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.541090][ T5726] usb 3-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 109.677170][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.677242][ T5726] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.180601][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.180632][ T5726] usb 3-1: Product: syz [ 110.180648][ T5726] usb 3-1: Manufacturer: syz [ 110.180665][ T5726] usb 3-1: SerialNumber: syz [ 110.257978][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.427503][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.28'. [ 110.583139][ T33] audit: type=1800 audit(1790167737.896:5): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 111.857199][ T5938] ======================================================= [ 111.857199][ T5938] WARNING: The mand mount option has been deprecated and [ 111.857199][ T5938] and is ignored by this kernel. Remove the mand [ 111.857199][ T5938] option from the mount to silence this warning. [ 111.857199][ T5938] ======================================================= [ 111.857774][ T5938] FAULT_INJECTION: forcing a failure. [ 111.857774][ T5938] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.857829][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(full) [ 111.857855][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.857875][ T5938] Call Trace: [ 111.857885][ T5938] [ 111.857899][ T5938] dump_stack_lvl+0xe8/0x150 [ 111.857943][ T5938] should_fail_ex+0x3eb/0x540 [ 111.857974][ T5938] get_futex_key+0x1b4/0x1580 [ 111.858001][ T5938] ? __lock_acquire+0x747/0x2de0 [ 111.858039][ T5938] ? __pfx_get_futex_key+0x10/0x10 [ 111.858083][ T5938] futex_wait_setup+0x4a/0x590 [ 111.858127][ T5938] ? __resched_curr+0x106/0x540 [ 111.858149][ T5938] ? __futex_wait+0xdb/0x470 [ 111.858178][ T5938] __futex_wait+0x175/0x470 [ 111.858213][ T5938] ? __pfx___futex_wait+0x10/0x10 [ 111.858266][ T5938] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.858298][ T5938] ? try_to_wake_up+0x8c5/0x14d0 [ 111.858340][ T5938] futex_wait+0x121/0x390 [ 111.858369][ T5938] ? __pfx_futex_wait+0x10/0x10 [ 111.858413][ T5938] do_futex+0x3e7/0x4e0 [ 111.858439][ T5938] ? __pfx_do_futex+0x10/0x10 [ 111.858469][ T5938] __se_sys_futex+0x3a8/0x450 [ 111.858498][ T5938] ? __pfx___se_sys_futex+0x10/0x10 [ 111.858520][ T5938] ? __pfx___se_sys_mount+0x10/0x10 [ 111.858547][ T5938] ? __x64_sys_futex+0x21/0xf0 [ 111.858572][ T5938] do_syscall_64+0x166/0x520 [ 111.858604][ T5938] ? trace_irq_disable+0x3b/0x140 [ 111.858634][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.858668][ T5938] ? clear_bhb_loop+0x70/0xc0 [ 111.858696][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.858719][ T5938] RIP: 0033:0x7f375839e159 [ 111.858748][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.858767][ T5938] RSP: 002b:00007f37592650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.858792][ T5938] RAX: ffffffffffffffda RBX: 00007f3758625fa8 RCX: 00007f375839e159 [ 111.858809][ T5938] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3758625fa8 [ 111.858824][ T5938] RBP: 00007f3758625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.858838][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.858851][ T5938] R13: 00007f3758626038 R14: 00007fff88d169e0 R15: 00007fff88d16ac8 [ 111.858885][ T5938] [ 112.093652][ C0] usb 3-1: received EP1 urb->status = -71 [ 112.332840][ T33] audit: type=1800 audit(1790167739.646:6): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.36" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 113.015504][ T5726] usb 3-1: unable to init card! (ret=-19) [ 113.110042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 113.164597][ T5726] usb 3-1: USB disconnect, device number 2 [ 113.434375][ T5952] Zero length message leads to an empty skb [ 113.439938][ T5745] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 113.498159][ T5954] nbd: illegal input index -1 [ 113.589684][ T5718] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.611656][ T5745] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.617415][ T5745] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.617446][ T5745] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.647684][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.647793][ T5745] usb 5-1: Product: syz [ 113.647835][ T5745] usb 5-1: Manufacturer: syz [ 113.647850][ T5745] usb 5-1: SerialNumber: syz [ 113.674440][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 113.696768][ T5745] usb 5-1: config 0 descriptor?? [ 113.766495][ T5718] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.856584][ T5718] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.856620][ T5718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.039169][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.039200][ T5718] usb 2-1: Product: syz [ 114.039216][ T5718] usb 2-1: Manufacturer: syz [ 114.039231][ T5718] usb 2-1: SerialNumber: syz [ 114.413631][ T5745] usb 5-1: selecting invalid altsetting 0 [ 114.872146][ T5718] usb 2-1: config 0 descriptor?? [ 115.099333][ T5718] usb 2-1: selecting invalid altsetting 0 [ 115.108310][ T5745] usb 5-1: USB disconnect, device number 2 [ 116.185687][ T5718] usb 2-1: USB disconnect, device number 3 [ 119.122901][ T33] audit: type=1800 audit(1790167746.446:7): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 119.599176][ T33] audit: type=1804 audit(1790167746.916:8): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.53" name="/newroot/13/file0" dev="tmpfs" ino=100 res=1 errno=0 [ 121.635720][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 123.496908][ T6050] FAULT_INJECTION: forcing a failure. [ 123.496908][ T6050] name failslab, interval 1, probability 0, space 0, times 1 [ 123.496940][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT(full) [ 123.496958][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.496967][ T6050] Call Trace: [ 123.496974][ T6050] [ 123.496980][ T6050] dump_stack_lvl+0xe8/0x150 [ 123.497017][ T6050] should_fail_ex+0x3eb/0x540 [ 123.497040][ T6050] ? alloc_slab_obj_exts+0x5c/0x180 [ 123.497071][ T6050] should_failslab+0xa8/0x100 [ 123.497095][ T6050] ? alloc_slab_obj_exts+0x5c/0x180 [ 123.497117][ T6050] __kmalloc_flags_noprof+0x123/0x790 [ 123.497136][ T6050] ? alloc_slab_obj_exts+0x5c/0x180 [ 123.497164][ T6050] alloc_slab_obj_exts+0x5c/0x180 [ 123.497189][ T6050] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 123.497220][ T6050] ? alloc_vfsmnt+0x23/0x410 [ 123.497240][ T6050] kmem_cache_alloc_noprof+0x362/0x600 [ 123.497264][ T6050] ? alloc_vfsmnt+0x23/0x410 [ 123.497282][ T6050] ? kmem_cache_alloc_noprof+0x151/0x600 [ 123.497306][ T6050] ? alloc_vfsmnt+0x23/0x410 [ 123.497330][ T6050] alloc_vfsmnt+0x23/0x410 [ 123.497351][ T6050] vfs_create_mount+0x68/0x310 [ 123.497373][ T6050] do_new_mount+0x399/0xdc0 [ 123.497401][ T6050] ? __pfx_do_new_mount+0x10/0x10 [ 123.497427][ T6050] ? ns_capable+0x84/0xe0 [ 123.497450][ T6050] ? path_mount+0x647/0x1050 [ 123.497476][ T6050] ? user_path_at+0xd4/0x160 [ 123.497494][ T6050] __se_sys_mount+0x31d/0x420 [ 123.497513][ T6050] ? __pfx___se_sys_mount+0x10/0x10 [ 123.497532][ T6050] ? __x64_sys_mount+0x20/0xc0 [ 123.497548][ T6050] do_syscall_64+0x166/0x520 [ 123.497573][ T6050] ? trace_irq_disable+0x3b/0x140 [ 123.497594][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.497610][ T6050] ? clear_bhb_loop+0x70/0xc0 [ 123.497629][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.497644][ T6050] RIP: 0033:0x7fafc259e159 [ 123.497663][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.497676][ T6050] RSP: 002b:00007fafc07f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.497693][ T6050] RAX: ffffffffffffffda RBX: 00007fafc2825fa0 RCX: 00007fafc259e159 [ 123.497704][ T6050] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 123.497715][ T6050] RBP: 00007fafc263506b R08: 0000200000000200 R09: 0000000000000000 [ 123.497725][ T6050] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 123.497734][ T6050] R13: 00007fafc2826038 R14: 00007fafc2825fa0 R15: 00007ffd79f5bec8 [ 123.497758][ T6050] [ 124.053573][ T6058] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 126.013318][ T33] audit: type=1800 audit(1790167752.546:9): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 126.393850][ T6085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.417119][ T33] audit: type=1804 audit(1790167753.736:10): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.79" name="/newroot/18/file0" dev="tmpfs" ino=128 res=1 errno=0 [ 127.920815][ T6098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.941157][ T33] audit: type=1804 audit(1790167755.266:11): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.84" name="/newroot/17/file0" dev="tmpfs" ino=121 res=1 errno=0 [ 127.983481][ T1233] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 128.242841][ T1233] usb 4-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 128.247250][ T1233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.247315][ T1233] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 128.304999][ T1233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.305020][ T1233] usb 4-1: Product: syz [ 128.305031][ T1233] usb 4-1: Manufacturer: syz [ 128.305042][ T1233] usb 4-1: SerialNumber: syz [ 128.864080][ T6113] warning: `syz.3.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.477324][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.490439][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.493141][ C0] usb 4-1: received EP1 urb->status = -71 [ 129.879040][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.83'. [ 130.365747][ T1233] usb 4-1: unable to init card! (ret=-19) [ 130.393581][ T1233] usb 4-1: USB disconnect, device number 2 [ 131.118741][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 131.301264][ T27] usb 1-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 131.302324][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.302348][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.304147][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.304165][ T27] usb 1-1: Product: syz [ 131.304175][ T27] usb 1-1: Manufacturer: syz [ 131.304186][ T27] usb 1-1: SerialNumber: syz [ 131.355026][ T27] usb 1-1: config 0 descriptor?? [ 131.384109][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.384139][ T27] hub 1-1:0.0: probe with driver hub failed with error -5 [ 131.422422][ T27] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 131.440549][ T5764] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.590311][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 131.591368][ T5764] usb 3-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 131.592556][ T5764] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 131.592581][ T5764] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 131.592602][ T5764] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 131.592644][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.592666][ T5764] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.592691][ T5764] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.592739][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.714051][ T5764] usb 3-1: config 0 descriptor?? [ 131.727501][ T5725] usb 1-1: USB disconnect, device number 2 [ 131.997452][ T5764] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 132.023413][ T5764] usb 3-1: USB disconnect, device number 3 [ 132.096594][ T5764] usblp0: removed [ 132.280230][ T5725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.434553][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 132.435323][ T5725] usb 1-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 132.436651][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.436683][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.458274][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.458348][ T5725] usb 1-1: Product: syz [ 132.458396][ T5725] usb 1-1: Manufacturer: syz [ 132.458444][ T5725] usb 1-1: SerialNumber: syz [ 132.501310][ T5764] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.505030][ T5725] usb 1-1: config 0 descriptor?? [ 132.526667][ T5725] hub 1-1:0.0: bad descriptor, ignoring hub [ 132.526696][ T5725] hub 1-1:0.0: probe with driver hub failed with error -5 [ 132.548080][ T5725] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 132.640721][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.660533][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 132.662552][ T5764] usb 3-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 132.666826][ T5764] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 132.666856][ T5764] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 132.666877][ T5764] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 132.666926][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.666949][ T5764] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.666974][ T5764] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.667019][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.758152][ T5764] usb 3-1: config 0 descriptor?? [ 132.841224][ T27] usb 4-1: New USB device found: idVendor=0499, idProduct=500e, bcdDevice=ff.87 [ 132.843292][ T27] usb 4-1: config 253 has an invalid interface number: 237 but max is 1 [ 132.843321][ T27] usb 4-1: config 253 has an invalid interface number: 75 but max is 1 [ 132.843342][ T27] usb 4-1: config 253 has no interface number 0 [ 132.843358][ T27] usb 4-1: config 253 has no interface number 1 [ 132.843415][ T27] usb 4-1: config 253 interface 75 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 132.843435][ T27] usb 4-1: config 253 interface 237 has no altsetting 0 [ 132.843448][ T27] usb 4-1: config 253 interface 75 has no altsetting 0 [ 132.845614][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.845632][ T27] usb 4-1: Product: syz [ 132.845643][ T27] usb 4-1: Manufacturer: syz [ 132.845653][ T27] usb 4-1: SerialNumber: syz [ 132.910257][ T5613] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.980099][ T5764] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 133.002328][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002414][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099689][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 133.100401][ T5613] usb 5-1: New USB device found: idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 133.102314][ T5613] usb 5-1: config 91 has an invalid interface number: 231 but max is 0 [ 133.102340][ T5613] usb 5-1: config 91 has no interface number 0 [ 133.102372][ T5613] usb 5-1: config 91 interface 231 has no altsetting 0 [ 133.105230][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.105256][ T5613] usb 5-1: Product: syz [ 133.105300][ T5613] usb 5-1: Manufacturer: syz [ 133.105317][ T5613] usb 5-1: SerialNumber: syz [ 133.192392][ T27] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.208019][ T27] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.208680][ T27] usb 4-1: invalid MIDI in EP 0 [ 133.238927][ C1] usblp0: nonzero read bulk status received: -71 [ 133.243964][ T9] usb 3-1: USB disconnect, device number 4 [ 133.256729][ T6144] usblp0: error -71 reading from printer [ 133.374958][ T27] snd-usb-audio 4-1:253.75: probe with driver snd-usb-audio failed with error -22 [ 133.393276][ T27] usb 4-1: USB disconnect, device number 3 [ 133.394289][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.417399][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.441738][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.442362][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.477814][ T5613] ums-cypress 5-1:91.231: USB Mass Storage device detected [ 133.595638][ T5613] usb 5-1: USB disconnect, device number 3 [ 133.674126][ T6143] usblp0: removed [ 133.702199][ T5971] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 133.707058][ T5971] usb 1-1: device reset changed ep0 maxpacket size! [ 133.734893][ T5725] usb 1-1: USB disconnect, device number 3 [ 133.784710][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:253.237/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.983063][ T5725] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.140277][ T5725] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 134.141490][ T5725] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.141518][ T5725] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.141537][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.141582][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.141600][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.143406][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.143431][ T5725] usb 1-1: Product: syz [ 134.143446][ T5725] usb 1-1: Manufacturer: syz [ 134.212037][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.227639][ T5725] cdc_wdm 1-1:1.0: skipping garbage [ 134.227700][ T5725] cdc_wdm 1-1:1.0: skipping garbage [ 134.261717][ T5725] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.261748][ T5725] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.319625][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.390606][ T27] usb 4-1: New USB device found: idVendor=1286, idProduct=2044, bcdDevice=4d.80 [ 134.393857][ T27] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 134.393888][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.393908][ T27] usb 4-1: config 0 has no interface number 0 [ 134.393952][ T27] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 134.393981][ T27] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 134.394008][ T27] usb 4-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 134.394035][ T27] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 230 [ 134.394060][ T27] usb 4-1: config 0 interface 110 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 134.394104][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.459697][ T27] usb 4-1: config 0 descriptor?? [ 134.472722][ T6161] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.480458][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 134.482074][ T9] usb 5-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 134.493721][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.493824][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.493897][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.493982][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.582412][ T9] usb 5-1: config 0 descriptor?? [ 134.700821][ T5613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.731160][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.731679][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.736091][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.739181][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.753015][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.754995][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.801549][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.802279][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.803741][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.817317][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.869678][ T5613] usb 3-1: Using ep0 maxpacket: 16 [ 134.872421][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.872506][ T5613] usb 3-1: New USB device found: idVendor=0b3b, idProduct=1612, bcdDevice=1.5d [ 134.873877][ T5613] usb 3-1: config 8 has an invalid interface number: 166 but max is 0 [ 134.873903][ T5613] usb 3-1: config 8 has no interface number 0 [ 134.873934][ T5613] usb 3-1: config 8 interface 166 has no altsetting 0 [ 134.877712][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.877737][ T5613] usb 3-1: Product: syz [ 134.877753][ T5613] usb 3-1: Manufacturer: syz [ 134.877768][ T5613] usb 3-1: SerialNumber: syz [ 135.053150][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 135.053281][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 135.053521][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 135.053542][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 135.053751][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 135.053772][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 135.053974][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 135.053993][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 135.054093][ T1233] usb 1-1: USB disconnect, device number 4 [ 135.054206][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 135.054227][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 135.054244][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.057490][ T9] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0001/input/input7 [ 135.174366][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.177551][ T5746] usb 4-1: USB disconnect, device number 4 [ 135.204263][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.225676][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.226212][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.343870][ T9] elan 0003:04F3:074D.0001: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 135.441476][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.444226][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.647329][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.659034][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.872782][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.880393][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.957631][ T5613] usb 3-1: USB disconnect, device number 5 [ 136.122070][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 136.219669][ T5764] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.280436][ T9] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.286229][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.286258][ T9] usb 1-1: Product: syz [ 136.286274][ T9] usb 1-1: Manufacturer: syz [ 136.286318][ T9] usb 1-1: SerialNumber: syz [ 136.324176][ T9] usb 1-1: config 0 descriptor?? [ 136.370720][ T5764] usb 4-1: New USB device found: idVendor=0738, idProduct=1709, bcdDevice=0.00 [ 136.372061][ T5764] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 136.372105][ T5764] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.372134][ T5764] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 136.372162][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.372195][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.376942][ T5764] usb 4-1: config 0 descriptor?? [ 136.550400][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.789646][ T5613] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.816612][ T5764] input: HID 0738:1709 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0738:1709.0002/input/input8 [ 136.932889][ T5764] saitek 0003:0738:1709.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.3-1/input0 [ 136.940007][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 136.952015][ T5613] usb 3-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 136.976093][ T5613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.976151][ T5613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.976200][ T5613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 136.976229][ T5613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 136.976301][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.089390][ T5613] hub 3-1:1.0: bad descriptor, ignoring hub [ 137.089422][ T5613] hub 3-1:1.0: probe with driver hub failed with error -5 [ 137.102039][ T5613] cdc_wdm 3-1:1.0: skipping garbage [ 137.102093][ T5613] cdc_wdm 3-1:1.0: skipping garbage [ 137.134006][ T5613] cdc_wdm 3-1:1.0: cdc-wdm2: USB WDM device [ 137.134060][ T5613] cdc_wdm 3-1:1.0: Unknown control protocol [ 137.213931][ T5745] usb 5-1: USB disconnect, device number 4 [ 137.374302][ T5613] usb 4-1: USB disconnect, device number 5 [ 137.601545][ T5764] usb 3-1: USB disconnect, device number 6 [ 137.800654][ T5745] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.949685][ T5745] usb 5-1: Using ep0 maxpacket: 8 [ 137.950466][ T5745] usb 5-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 137.953378][ T5745] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.953405][ T5745] usb 5-1: config 179 has no interface number 0 [ 137.953454][ T5745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 137.953518][ T5745] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 137.953549][ T5745] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.953578][ T5745] usb 5-1: config 179 interface 65 has no altsetting 0 [ 137.953613][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.074956][ T5745] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 138.121598][ T4965] input input9: unable to receive magic message: -110 [ 138.125192][ T4965] input input9: unable to receive magic message: -32 [ 138.127153][ T4965] input input9: unable to receive magic message: -32 [ 138.153064][ T4965] input input9: unable to receive magic message: -32 [ 138.193216][ T4965] input input9: unable to receive magic message: -32 [ 138.209951][ T5629] input input9: unable to receive magic message: -32 [ 138.245693][ T4965] input input9: unable to receive magic message: -32 [ 138.260097][ T4965] input input9: unable to receive magic message: -32 [ 138.268891][ T6178] input input9: unable to receive magic message: -32 [ 138.290999][ T5746] usb 5-1: USB disconnect, device number 5 [ 138.291038][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.340925][ T1233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.500124][ T1233] usb 4-1: Using ep0 maxpacket: 16 [ 138.500895][ T1233] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 138.502159][ T1233] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.502192][ T1233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 138.502219][ T1233] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 138.502243][ T1233] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.503570][ T1233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.503596][ T1233] usb 4-1: SerialNumber: syz [ 138.591116][ T6180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.591280][ T6180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.593411][ T1233] hub 4-1:1.0: bad descriptor, ignoring hub [ 138.593470][ T1233] hub 4-1:1.0: probe with driver hub failed with error -5 [ 138.659659][ T5613] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.803073][ T6180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.803259][ T6180] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.809777][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 138.837140][ T5613] usb 3-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 138.843007][ T5613] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.868261][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.868300][ T5613] usb 3-1: Product: syz [ 138.868317][ T5613] usb 3-1: Manufacturer: syz [ 138.868332][ T5613] usb 3-1: SerialNumber: syz [ 138.905194][ T5613] usb 3-1: config 0 descriptor?? [ 138.917037][ T5613] usb 3-1: No union descriptors [ 138.928319][ T5613] usb 3-1: unsupported MDLM descriptors [ 139.116957][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.117863][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.151830][ T5745] usb 3-1: USB disconnect, device number 7 [ 139.238120][ T1233] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 139.269911][ T5725] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.430786][ T5725] usb 5-1: Using ep0 maxpacket: 8 [ 139.433828][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.433882][ T5725] usb 5-1: New USB device found: idVendor=124a, idProduct=4023, bcdDevice=23.4a [ 139.435542][ T5725] usb 5-1: config 8 has an invalid interface number: 140 but max is 0 [ 139.435568][ T5725] usb 5-1: config 8 has no interface number 0 [ 139.435638][ T5725] usb 5-1: config 8 interface 140 altsetting 8 bulk endpoint 0xB has invalid maxpacket 16 [ 139.435667][ T5725] usb 5-1: config 8 interface 140 has no altsetting 0 [ 139.498117][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.498146][ T5725] usb 5-1: Product: syz [ 139.498161][ T5725] usb 5-1: Manufacturer: syz [ 139.498177][ T5725] usb 5-1: SerialNumber: syz [ 139.533595][ T6184] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 139.792385][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.813435][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.893340][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 139.911508][ T9] usb 1-1: USB disconnect, device number 5 [ 139.989210][ T5725] usb 5-1: USB disconnect, device number 6 [ 140.044592][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.049332][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.077937][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.078439][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.119897][ T1233] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.271893][ T1233] usb 3-1: Using ep0 maxpacket: 16 [ 140.273682][ T1233] usb 3-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 140.278383][ T1233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.278417][ T1233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 140.278444][ T1233] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 140.278487][ T1233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.345752][ T1233] usb 3-1: config 0 descriptor?? [ 140.525547][ T5725] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.594806][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 140.598848][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 140.619724][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 07! [ 140.621373][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 1c! [ 140.669739][ T5725] usb 5-1: Using ep0 maxpacket: 8 [ 140.675882][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.679676][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.706235][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.718050][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.729965][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.730017][ T5725] usb 5-1: New USB device found: idVendor=124a, idProduct=4023, bcdDevice=23.4a [ 140.731082][ T5725] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 140.731126][ T5725] usb 5-1: can't read configurations, error -71 [ 140.779664][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.812638][ T1233] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 140.843226][ T10] usb 4-1: USB disconnect, device number 6 [ 140.874284][ T10] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 140.934396][ T9] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 140.939085][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.939138][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.975663][ T9] usb 1-1: config 0 descriptor?? [ 141.402581][ T1233] nintendo 0003:057E:2019.0003: Failed to set baudrate (ret=-71), continuing anyway [ 141.422648][ T1233] nintendo 0003:057E:2019.0003: Failed handshake; ret=-71 [ 141.422703][ T1233] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-71 [ 141.456890][ T1233] nintendo 0003:057E:2019.0003: probe - fail = -71 [ 141.457179][ T1233] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -71 [ 141.465429][ T9] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 141.505929][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input10 [ 141.507270][ T1233] usb 3-1: USB disconnect, device number 8 [ 141.696694][ T9] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 141.819673][ T5725] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.862411][ T5613] usb 1-1: USB disconnect, device number 6 [ 141.900847][ T5746] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.948594][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 141.989673][ T5725] usb 5-1: Using ep0 maxpacket: 32 [ 141.994646][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.994698][ T5725] usb 5-1: New USB device found: idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 141.995941][ T5725] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 141.995968][ T5725] usb 5-1: config 3 has an invalid interface number: 25 but max is 1 [ 141.995989][ T5725] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 141.996010][ T5725] usb 5-1: config 3 has no interface number 0 [ 141.996027][ T5725] usb 5-1: config 3 has no interface number 1 [ 141.996076][ T5725] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 141.996099][ T5725] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 141.996128][ T5725] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 141.996167][ T5725] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 141.996197][ T5725] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 141.996226][ T5725] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 141.996254][ T5725] usb 5-1: config 3 interface 223 has no altsetting 1 [ 141.996273][ T5725] usb 5-1: config 3 interface 25 has no altsetting 0 [ 142.049757][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 142.052557][ T5746] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.075057][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.075083][ T5725] usb 5-1: Product: syz [ 142.075098][ T5725] usb 5-1: Manufacturer: syz [ 142.075110][ T5725] usb 5-1: SerialNumber: syz [ 142.082628][ T5746] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 142.082739][ T5746] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 142.082853][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.082935][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.083009][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.083082][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.083157][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 142.083231][ T5746] usb 4-1: config 168 interface 0 has no altsetting 0 [ 142.140734][ T5746] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 142.154134][ T5746] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 142.154281][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.154363][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.154429][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.158639][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.158724][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 142.158799][ T5746] usb 4-1: config 168 interface 0 has no altsetting 0 [ 142.187962][ T5746] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 142.188078][ T5746] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 142.188213][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 142.188289][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.188362][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.188436][ T5746] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 142.188489][ T5746] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 142.188584][ T5746] usb 4-1: config 168 interface 0 has no altsetting 0 [ 142.299998][ T5746] usb 4-1: string descriptor 0 read error: -22 [ 142.300380][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.566963][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.567555][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.590214][ T5746] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.619826][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.620296][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.690906][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.695792][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.698352][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.699009][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.757736][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.769461][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.809804][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.836486][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.850818][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.965416][ T9] usb 3-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 142.967708][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.967735][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.967786][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.990974][ T1233] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.035084][ T9] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 143.094655][ T5725] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 143.110654][ T5725] usb 5-1: USB disconnect, device number 8 [ 143.160894][ T1233] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 143.162543][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.162592][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.179284][ T1233] usb 1-1: config 0 descriptor?? [ 143.231706][ T5725] [ 143.234092][ T5725] ========================= [ 143.238621][ T5725] WARNING: held lock freed! [ 143.243172][ T5725] syzkaller #0 Not tainted [ 143.247644][ T5725] ------------------------- [ 143.252167][ T5725] kworker/0:4/5725 is freeing memory ffff888055d81000-ffff888055d817ff, with a lock still held there! [ 143.263128][ T5725] ffff888055d811a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 143.273279][ T5725] locks held by kworker/0:4/5725: 5, last CPU#0: [ 143.279657][ T5725] #0: ffff8880226d2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 143.291043][ T5725] #1: ffffc90004b3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 143.302954][ T5725] #2: ffff88802a31a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 143.311927][ T5725] #3: ffff88807db181d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 143.321134][ T5725] #4: ffff888055d811a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 143.331741][ T5725] [ 143.331741][ T5725] stack backtrace: [ 143.337660][ T5725] CPU: 0 UID: 0 PID: 5725 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 143.347057][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.357154][ T5725] Workqueue: usb_hub_wq hub_event [ 143.362230][ T5725] Call Trace: [ 143.365573][ T5725] [ 143.368541][ T5725] dump_stack_lvl+0xe8/0x150 [ 143.373169][ T5725] debug_check_no_locks_freed+0x149/0x170 [ 143.378967][ T5725] kfree+0x12b/0x650 [ 143.382920][ T5725] ? device_release+0xc4/0x1f0 [ 143.387718][ T5725] ? __pfx_usb_release_interface+0x10/0x10 [ 143.393558][ T5725] device_release+0xc4/0x1f0 [ 143.398192][ T5725] kobject_put+0x222/0x550 [ 143.402650][ T5725] v4l2_device_disconnect+0x79/0xd0 [ 143.407900][ T5725] usbtv_video_free+0x29/0x80 [ 143.412623][ T5725] usbtv_disconnect+0x59/0x80 [ 143.417339][ T5725] usb_unbind_interface+0x295/0x9f0 [ 143.422588][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.428365][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.434141][ T5725] ? __pfx_usb_unbind_interface+0x10/0x10 [ 143.439908][ T5725] device_release_driver_internal+0x4f5/0x880 [ 143.446021][ T5725] bus_remove_device+0x444/0x560 [ 143.451026][ T5725] ? __pfx_bus_remove_device+0x10/0x10 [ 143.456523][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.462282][ T5725] device_del+0x524/0x8f0 [ 143.466673][ T5725] ? __pfx_device_del+0x10/0x10 [ 143.471556][ T5725] ? __pfx___mutex_lock+0x10/0x10 [ 143.476618][ T5725] usb_disable_device+0x3d4/0x8d0 [ 143.481673][ T5725] usb_disconnect+0x346/0x9a0 [ 143.486383][ T5725] hub_event+0x1bbb/0x4d30 [ 143.490915][ T5725] ? do_raw_spin_unlock+0xf5/0x200 [ 143.496156][ T5725] ? register_lock_class+0x31/0x2e0 [ 143.501407][ T5725] ? __pfx_hub_event+0x10/0x10 [ 143.506203][ T5725] ? rcu_is_watching+0x16/0xb0 [ 143.511026][ T5725] ? process_scheduled_works+0x97a/0x1630 [ 143.516775][ T5725] process_scheduled_works+0xc3d/0x1630 [ 143.522376][ T5725] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.528436][ T5725] ? assign_work+0x3cf/0x5d0 [ 143.533065][ T5725] worker_thread+0xa47/0xfb0 [ 143.537697][ T5725] ? __kthread_parkme+0x71/0x1f0 [ 143.542662][ T5725] kthread+0x38b/0x480 [ 143.546770][ T5725] ? __pfx_worker_thread+0x10/0x10 [ 143.551909][ T5725] ? __pfx_kthread+0x10/0x10 [ 143.556523][ T5725] ret_from_fork+0x514/0xb70 [ 143.561131][ T5725] ? save_fpregs_to_fpstate+0x176/0x200 [ 143.566705][ T5725] ? __pfx_ret_from_fork+0x10/0x10 [ 143.571838][ T5725] ? __switch_to+0xc78/0x1410 [ 143.576545][ T5725] ? __pfx_kthread+0x10/0x10 [ 143.581246][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.586073][ T5725] [ 143.600907][ T9] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 143.610653][ T5725] ================================================================== [ 143.610673][ T5725] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 [ 143.610708][ T5725] Read of size 8 at addr ffff888055d81008 by task kworker/0:4/5725 [ 143.610727][ T5725] [ 143.610738][ T5725] CPU: 0 UID: 0 PID: 5725 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 143.610764][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.610778][ T5725] Workqueue: usb_hub_wq hub_event [ 143.610806][ T5725] Call Trace: [ 143.610814][ T5725] [ 143.610824][ T5725] dump_stack_lvl+0xe8/0x150 [ 143.610857][ T5725] print_address_description+0x55/0x1e0 [ 143.610888][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 143.610912][ T5725] print_report+0x58/0x70 [ 143.610938][ T5725] kasan_report+0x117/0x150 [ 143.610966][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 143.610996][ T5725] usb_unbind_interface+0x2c2/0x9f0 [ 143.611020][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.611054][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.611084][ T5725] ? __pfx_usb_unbind_interface+0x10/0x10 [ 143.611108][ T5725] device_release_driver_internal+0x4f5/0x880 [ 143.611134][ T5725] bus_remove_device+0x444/0x560 [ 143.611166][ T5725] ? __pfx_bus_remove_device+0x10/0x10 [ 143.611196][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 143.611227][ T5725] device_del+0x524/0x8f0 [ 143.611275][ T5725] ? __pfx_device_del+0x10/0x10 [ 143.611309][ T5725] ? __pfx___mutex_lock+0x10/0x10 [ 143.611346][ T5725] usb_disable_device+0x3d4/0x8d0 [ 143.611374][ T5725] usb_disconnect+0x346/0x9a0 [ 143.611411][ T5725] hub_event+0x1bbb/0x4d30 [ 143.611433][ T5725] ? do_raw_spin_unlock+0xf5/0x200 [ 143.611460][ T5725] ? register_lock_class+0x31/0x2e0 [ 143.611501][ T5725] ? __pfx_hub_event+0x10/0x10 [ 143.611527][ T5725] ? rcu_is_watching+0x16/0xb0 [ 143.611558][ T5725] ? process_scheduled_works+0x97a/0x1630 [ 143.611591][ T5725] process_scheduled_works+0xc3d/0x1630 [ 143.611638][ T5725] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.611673][ T5725] ? assign_work+0x3cf/0x5d0 [ 143.611706][ T5725] worker_thread+0xa47/0xfb0 [ 143.611745][ T5725] ? __kthread_parkme+0x71/0x1f0 [ 143.611771][ T5725] kthread+0x38b/0x480 [ 143.611796][ T5725] ? __pfx_worker_thread+0x10/0x10 [ 143.611827][ T5725] ? __pfx_kthread+0x10/0x10 [ 143.611853][ T5725] ret_from_fork+0x514/0xb70 [ 143.611873][ T5725] ? save_fpregs_to_fpstate+0x176/0x200 [ 143.611902][ T5725] ? __pfx_ret_from_fork+0x10/0x10 [ 143.611922][ T5725] ? __switch_to+0xc78/0x1410 [ 143.611953][ T5725] ? __pfx_kthread+0x10/0x10 [ 143.611978][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.612019][ T5725] [ 143.612027][ T5725] [ 143.612032][ T5725] Allocated by task 5725: [ 143.612043][ T5725] kasan_save_track+0x3e/0x80 [ 143.612064][ T5725] __kasan_kmalloc+0x93/0xb0 [ 143.612086][ T5725] __kmalloc_cache_noprof+0x31c/0x600 [ 143.612106][ T5725] usb_set_configuration+0x3cc/0x2180 [ 143.612128][ T5725] usb_generic_driver_probe+0x8d/0x150 [ 143.612149][ T5725] usb_probe_device+0x1c3/0x3b0 [ 143.612172][ T5725] really_probe+0x254/0xae0 [ 143.612192][ T5725] __driver_probe_device+0x1e8/0x360 [ 143.612210][ T5725] driver_probe_device+0x4f/0x240 [ 143.612230][ T5725] __device_attach_driver+0x270/0x410 [ 143.612251][ T5725] bus_for_each_drv+0x258/0x2f0 [ 143.612288][ T5725] __device_attach+0x2c4/0x450 [ 143.612322][ T5725] device_initial_probe+0xa1/0xd0 [ 143.612341][ T5725] bus_probe_device+0x12a/0x220 [ 143.612366][ T5725] device_add+0x7d7/0xb80 [ 143.612395][ T5725] usb_new_device+0x9aa/0x1690 [ 143.612425][ T5725] hub_event+0x28e8/0x4d30 [ 143.612445][ T5725] process_scheduled_works+0xc3d/0x1630 [ 143.612474][ T5725] worker_thread+0xa47/0xfb0 [ 143.612504][ T5725] kthread+0x38b/0x480 [ 143.612525][ T5725] ret_from_fork+0x514/0xb70 [ 143.612542][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.612572][ T5725] [ 143.612577][ T5725] Freed by task 5725: [ 143.612587][ T5725] kasan_save_track+0x3e/0x80 [ 143.612608][ T5725] kasan_save_free_info+0x40/0x50 [ 143.612637][ T5725] __kasan_slab_free+0x5c/0x80 [ 143.612659][ T5725] kfree+0x1c5/0x650 [ 143.612688][ T5725] device_release+0xc4/0x1f0 [ 143.612710][ T5725] kobject_put+0x222/0x550 [ 143.612729][ T5725] v4l2_device_disconnect+0x79/0xd0 [ 143.612754][ T5725] usbtv_video_free+0x29/0x80 [ 143.612777][ T5725] usbtv_disconnect+0x59/0x80 [ 143.612800][ T5725] usb_unbind_interface+0x295/0x9f0 [ 143.612822][ T5725] device_release_driver_internal+0x4f5/0x880 [ 143.612841][ T5725] bus_remove_device+0x444/0x560 [ 143.612866][ T5725] device_del+0x524/0x8f0 [ 143.612895][ T5725] usb_disable_device+0x3d4/0x8d0 [ 143.612915][ T5725] usb_disconnect+0x346/0x9a0 [ 143.612944][ T5725] hub_event+0x1bbb/0x4d30 [ 143.612963][ T5725] process_scheduled_works+0xc3d/0x1630 [ 143.612993][ T5725] worker_thread+0xa47/0xfb0 [ 143.613023][ T5725] kthread+0x38b/0x480 [ 143.613044][ T5725] ret_from_fork+0x514/0xb70 [ 143.613062][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.613091][ T5725] [ 143.613097][ T5725] The buggy address belongs to the object at ffff888055d81000 [ 143.613097][ T5725] which belongs to the cache kmalloc-2k of size 2048 [ 143.613116][ T5725] The buggy address is located 8 bytes inside of [ 143.613116][ T5725] freed 2048-byte region [ffff888055d81000, ffff888055d81800) [ 143.613138][ T5725] [ 143.613144][ T5725] The buggy address belongs to the physical page: [ 143.613171][ T5725] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055d83000 pfn:0x55d80 [ 143.613194][ T5725] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.613212][ T5725] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 143.613244][ T5725] page_type: f5(slab) [ 143.613282][ T5725] raw: 00fff00000000240 ffff88801b042000 ffffea00007fae10 ffffea0000c70e10 [ 143.613301][ T5725] raw: ffff888055d83000 0000000000080005 00000000f5000000 0000000000000000 [ 143.613322][ T5725] head: 00fff00000000240 ffff88801b042000 ffffea00007fae10 ffffea0000c70e10 [ 143.613341][ T5725] head: ffff888055d83000 0000000000080005 00000000f5000000 0000000000000000 [ 143.613361][ T5725] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 143.613379][ T5725] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 143.613390][ T5725] page dumped because: kasan: bad access detected [ 143.613406][ T5725] page_owner tracks the page as allocated [ 143.613414][ T5725] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5745, tgid 5745 (kworker/0:6), ts 100188635280 [ 143.613449][ T5725] post_alloc_hook+0x1f9/0x250 [ 143.613481][ T5725] get_page_from_freelist+0x2209/0x2280 [ 143.613503][ T5725] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 143.613525][ T5725] allocate_slab+0x7d/0x620 [ 143.613550][ T5725] refill_objects+0x2d5/0x350 [ 143.613576][ T5725] __pcs_replace_empty_main+0x2c8/0x6c0 [ 143.613601][ T5725] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 143.613622][ T5725] __alloc_skb+0x2c1/0x7a0 [ 143.613647][ T5725] mld_newpack+0x165/0xcb0 [ 143.613671][ T5725] add_grec+0x119f/0x19d0 [ 143.613695][ T5725] mld_ifc_work+0x6f1/0xd60 [ 143.613717][ T5725] process_scheduled_works+0xc3d/0x1630 [ 143.613746][ T5725] worker_thread+0xa47/0xfb0 [ 143.613773][ T5725] kthread+0x38b/0x480 [ 143.613791][ T5725] ret_from_fork+0x514/0xb70 [ 143.613808][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.613838][ T5725] page last free pid 1 tgid 1 ts 27081313154 stack trace: [ 143.613853][ T5725] free_pages_prepare+0x9eb/0xaf0 [ 143.613882][ T5725] __free_contig_range_common+0x174/0x340 [ 143.613906][ T5725] destroy_args+0x4e5/0x570 [ 143.613925][ T5725] debug_vm_pgtable+0x3f8/0x410 [ 143.613954][ T5725] do_one_initcall+0x250/0x870 [ 143.613983][ T5725] do_initcall_level+0x10a/0x1a0 [ 143.614012][ T5725] do_initcalls+0x59/0xa0 [ 143.614040][ T5725] kernel_init_freeable+0x29d/0x3e0 [ 143.614068][ T5725] kernel_init+0x22/0x1d0 [ 143.614089][ T5725] ret_from_fork+0x514/0xb70 [ 143.614106][ T5725] ret_from_fork_asm+0x1a/0x30 [ 143.614136][ T5725] [ 143.614142][ T5725] Memory state around the buggy address: [ 143.614154][ T5725] ffff888055d80f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.614168][ T5725] ffff888055d80f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.614183][ T5725] >ffff888055d81000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.614194][ T5725] ^ [ 143.614205][ T5725] ffff888055d81080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.614219][ T5725] ffff888055d81100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.614230][ T5725] ================================================================== [ 143.614302][ T5725] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.455468][ T5725] CPU: 0 UID: 0 PID: 5725 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 144.464993][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.475089][ T5725] Workqueue: usb_hub_wq hub_event [ 144.480179][ T5725] Call Trace: [ 144.483497][ T5725] [ 144.486466][ T5725] vpanic+0x26f/0x710 [ 144.490505][ T5725] panic+0xc5/0xd0 [ 144.494275][ T5725] ? __pfx_panic+0x10/0x10 [ 144.498735][ T5725] ? preempt_schedule_thunk+0x16/0x40 [ 144.504179][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 144.509592][ T5725] check_panic_on_warn+0x89/0xb0 [ 144.514608][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 144.520052][ T5725] end_report+0x73/0x170 [ 144.524343][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 144.529757][ T5725] kasan_report+0x128/0x150 [ 144.534310][ T5725] ? usb_unbind_interface+0x2c2/0x9f0 [ 144.539741][ T5725] usb_unbind_interface+0x2c2/0x9f0 [ 144.544988][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 144.550758][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 144.556525][ T5725] ? __pfx_usb_unbind_interface+0x10/0x10 [ 144.562293][ T5725] device_release_driver_internal+0x4f5/0x880 [ 144.568409][ T5725] bus_remove_device+0x444/0x560 [ 144.573397][ T5725] ? __pfx_bus_remove_device+0x10/0x10 [ 144.578893][ T5725] ? kernfs_remove_by_name_ns+0x101/0x140 [ 144.584658][ T5725] device_del+0x524/0x8f0 [ 144.589041][ T5725] ? __pfx_device_del+0x10/0x10 [ 144.594028][ T5725] ? __pfx___mutex_lock+0x10/0x10 [ 144.599109][ T5725] usb_disable_device+0x3d4/0x8d0 [ 144.604193][ T5725] usb_disconnect+0x346/0x9a0 [ 144.608934][ T5725] hub_event+0x1bbb/0x4d30 [ 144.613391][ T5725] ? do_raw_spin_unlock+0xf5/0x200 [ 144.618571][ T5725] ? register_lock_class+0x31/0x2e0 [ 144.623912][ T5725] ? __pfx_hub_event+0x10/0x10 [ 144.628723][ T5725] ? rcu_is_watching+0x16/0xb0 [ 144.633526][ T5725] ? process_scheduled_works+0x97a/0x1630 [ 144.639331][ T5725] process_scheduled_works+0xc3d/0x1630 [ 144.644938][ T5725] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.650962][ T5725] ? assign_work+0x3cf/0x5d0 [ 144.655603][ T5725] worker_thread+0xa47/0xfb0 [ 144.660255][ T5725] ? __kthread_parkme+0x71/0x1f0 [ 144.665238][ T5725] kthread+0x38b/0x480 [ 144.669339][ T5725] ? __pfx_worker_thread+0x10/0x10 [ 144.674537][ T5725] ? __pfx_kthread+0x10/0x10 [ 144.679167][ T5725] ret_from_fork+0x514/0xb70 [ 144.683798][ T5725] ? save_fpregs_to_fpstate+0x176/0x200 [ 144.689389][ T5725] ? __pfx_ret_from_fork+0x10/0x10 [ 144.694538][ T5725] ? __switch_to+0xc78/0x1410 [ 144.699268][ T5725] ? __pfx_kthread+0x10/0x10 [ 144.703901][ T5725] ret_from_fork_asm+0x1a/0x30 [ 144.708838][ T5725] [ 144.712107][ T5725] Kernel Offset: disabled [ 144.716531][ T5725] Rebooting in 86400 seconds..