last executing test programs: 13.58806933s ago: executing program 1 (id=601): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000240), 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x4}, 0x20) 12.943843683s ago: executing program 4 (id=605): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x600) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) sendto$packet(r3, &(0x7f00000008c0)="f257a8a885c273dfaeab9685746e527f70d1d8cd5666c745457f417f164530a65bcf2f9fb79016c01848163391bb93327e68b74a0c2287007756bd4c464139c89e93b4f6076d4c6f0549230fda62cd3a6568864338413c1c753217789f1ab087f644e37aaa78312f5474f966099f891839575cc9ffa16877717edd59431e3941ae58a1c63311c092ee9832001716f9df31583752f91ba4f3479d9f5f6f6153ce26df30b8472cbb", 0xa7, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006880)={&(0x7f0000000140)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x1ff, 0x100, 0xc, 0x2, 0xfea, 0x101, 0x0, 0x0, 0x80, 0xffffff20}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f0000000200)={0x18, 0x0, 0x7fffffffffffffff, {0xfffffffffffff001}}, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x7ff, {0x5}}, &(0x7f00000003c0)={0x28, 0x0, 0x2, {{0x36, 0x200000000000eda3}}}, &(0x7f0000000400)={0x60, 0x0, 0x1, {{0x8000, 0x1, 0x8000, 0xffffffffffffff0f, 0xfffffffffffffffd, 0x9, 0x7, 0x1}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8}, &(0x7f0000000300)=ANY=[@ANYBLOB="3a000000000000009cffffffffffffff6e4a7464657673696d00d9b5b4525e4e5540c0edae9d68c31293b8b6cd5e78970f160bb8ff11cf910acc48c5bb67e9f894b96a4522a7721616acbae724e074d01c0068375451e8626c8db1a06a766e0b8c13fcf5a290ad4433c65d09ee052caa2322b27e1ae4d925719a01b01ed3e04124aa06a128a1638c2e20"], 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffffe, 0x23b, {0x4, 0x7, 0x0, {0x6, 0x2, 0x4, 0x0, 0xf, 0x9, 0x5, 0x6, 0x2, 0x6000, 0x0, 0xee00, 0x0, 0x9, 0x6}}}, &(0x7f0000000680)={0x90, 0x0, 0x5, {0x3, 0x1, 0x5, 0xa, 0x0, 0x6, {0x2, 0xffffffffffffff4a, 0x8, 0xa6, 0x9, 0x7, 0x8, 0xe, 0x8, 0xb000, 0xfff, 0x0, 0x0, 0x2, 0x267}}}, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000fc0)=ANY=[@ANYBLOB="68040000000000000000000000000000000000000000000003000000000000000f000000000000000600000000000000fbffffff0600000006000000000000000e00000000000000c9080000000000000000000000000000ffff000000000000008000000000000091000000060000000100008000a0000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0500000008000000000000000100000000000000090000000000000002000000060000002c210000000000000500000000000000000000000000000053000000000000000100000000000000070000000100000004000000000000000900000000000000000000000000000002000000000000000c000000000000000600000000000000ff03000080000000080000000020000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000000000000000000000000005900000000000000030000000400000023282b0000000000000000000000000003000000000000000800000000000000080000000000000002000000030000000600000000000000faffffffffffffff05000000000000000700000000000000580000000000000008000000000000000100010004000000020000000020000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff03000000100000000000000400000000000000a8b800000000000008000000040000006465766c696e6b00060000000000000003000000000000000d0000000000000000000000000000000b0000000900000005000000000000005a7e00000000000040000000000000000500000000000000090000000000000002000000000000007f000000060000000900000000a0000005000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="0600000004000000000000000600000000000000010000000000000008000000040000006465766c696e6b00010000000000000003000000000000001ec3000000000000000000000000000007000000ffffff7f050000000000000099fa00000000000002000000000000002b05000000000000a405000000000000ffffffffffffffff0f00000005000000b00b000000c0000000080000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="06000000030000000000000002000000000000000600000000000000080000000700000062617461647630000000000000000000000000000000000009000000000000007c00000000000000060000000100000005000000000000001000000000000000000000000200000008000000000000000000000000000000158affffffffffff02000000050000000008000000c0000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f9ffffff19000000000000000500000000000000080000000000000001000000ea0b000024000000000000000000000000000000030000000000000001000000000000000900000000000000e5000000ff7f00000300000000000000000000000000000008000000000000001b0d0000000000000000000000000028b17ff2b10004000000000000000600000025000020050000000060000001000080", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="a90000000100000000000000060000000000000005000000000000000000000001010000"], &(0x7f0000006680)={0xa0, 0x0, 0x9, {{0x2, 0x0, 0x10, 0x400, 0x5, 0xaab, {0x1, 0x9, 0x3, 0x1, 0x7, 0x7, 0x7, 0x7, 0x5, 0xa000, 0xa0000, 0x0, 0x0, 0x2, 0x8}}, {0x0, 0xc29739591a85279a}}}, &(0x7f0000002100)={0x20, 0x0, 0x7, {0xd47, 0x4, 0x2, 0x3be0}}, &(0x7f0000006740)={0x130, 0x0, 0x7, {0x401, 0x7, 0x0, '\x00', {0x200, 0x0, 0x6, 0x8, 0x0, 0x0, 0x8000, '\x00', 0x3845, 0x100000000, 0x4, 0x778, {0x9, 0x7ff}, {0x0, 0x2}, {0x2, 0xfffff800}, {0x81, 0x1}, 0x7fff, 0x3, 0x10001, 0x6}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40080) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="34607f57170c0131ec89de730000dceda610b1bd9e43cd9e4f3f49a400d58362611ef7a115b5bcf3faff69fd696cd0a6be3811c1ec8a3d6286359d34eb66392722fb8013cd038c4f160ae379852714aa6c88ebb6adb24479c68e2c5532bc0805c21c66edbc30ab1a0045c0eba5554611a5347a44c08d8d2c660d20190c4cc275", @ANYRES16=r7, @ANYBLOB="01072bbd7000fcdbdf25340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) 12.141716333s ago: executing program 1 (id=607): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000002040)=@multiplanar_mmap={0x6, 0xb, 0x4, 0x800, 0x5, {}, {0x5, 0x1, 0x50, 0x6, 0x9, 0x6, "f5e3daf6"}, 0x6, 0x1, {0x0}, 0x3}) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x0, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x4400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000280)={0x2, 0x3, 0xff, 0x0, 0x11}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x1, 0x3, 0x63, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}]}}]}}]}}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 8.949941327s ago: executing program 4 (id=620): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000848) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_delete(r4) clock_gettime(0x0, &(0x7f0000000040)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000340)) 8.489451489s ago: executing program 4 (id=622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x114, &(0x7f0000000400)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e21, 0x4a23, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x3}, {"451f69721cfd24937c99d354661e7603aa4851bf6c7994b5edadd94ab4b069ef8bc100a509a8d24e310d786cbece59278218a0677db62d14d9f9cac29fa94fa22cc680e8f254b5542c92105cadc53b7628e773a68a7cff5af42f1b587cc59b68a7ffba2f38aa4a7dc84de514f3fff817033d53b5f15b3a7040267cb78bc30086526600104a8f3342c0ffceaa0fb7dd359b66f99e7d6b11e1f232cacd34c2cf211f8b2efcfc47a43f10dd9e2a2b4f5e407d29d28c0e3491eb97db9c78bdd751fd530ffcc38fbfd7a57e9db549ed63ffa4d13c52865ca9"}}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000140)={'ip_vti0\x00', 0x7fffffff}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) 7.727502616s ago: executing program 1 (id=624): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x14, 0x4, "6ee6d2b4"}, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000200)={&(0x7f0000000300), 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x28}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000000)) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000240)) 7.259637833s ago: executing program 2 (id=625): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0x300) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 6.886356307s ago: executing program 3 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0xe6, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x2}}}, 0x108) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000400)={0x60, 0x2, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x5984, &(0x7f0000000340)=[{0x7fff, 0x1, 0x401}, {0x1, 0x5, 0xf6}, {0x9, 0x3, 0x6}, {0x8000000000000001, 0x4, 0xe}, {0x8, 0xfeac, 0x4}, {0x1, 0x0, 0x9}], 0x6, 0x7, 0x44, 0x8, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x1, &(0x7f0000000640)=""/162, 0xa2}, &(0x7f0000000600)=0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.217147378s ago: executing program 0 (id=627): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1fb6113269cf30a}, 0x28) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 5.812809931s ago: executing program 0 (id=628): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x578, 0x30, 0x0, 0x0, 0x4, 0x0, {}, {0xfffffffe}, {0x0, 0x4}, {}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}) r1 = socket(0x1e, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x87}, @NFTA_PAYLOAD_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x5, 0x0, 0x10, 0x880}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x5}}) 5.472334518s ago: executing program 0 (id=629): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x210801, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="6261697a9c433ad18c0918f83fca922f", 0x10}, {&(0x7f0000000100)="3e52fecd6d1f0400000000000000000000000000fb05aed4ef0b90178c36f659501223fc41f541f7f117ad745d0943a30c66cabb06fdd9c412581e14b3048299121e8ff5322345e83d0ab000449753d60060a0b913df19f9d7cce2dcc37a2dfe6559", 0x62}, {&(0x7f0000000300)="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"/342, 0x156}, {&(0x7f0000000480)="b72ba058a1120716f2fbf06c4f1f54731ee3835aef16adbf4d4f88c2654d3df3449d1c49b86c06760ed7943172259f531cdbdd49282cfcd54187061771a833052ac76ca630b36de530bfd26bc263c8615085aa7832f7badc3c52349813004e8684f2a62648cc415a610f8dc614ead257ce318ee458d12d2bc8ed39e2d2432cd0b8923388e5559df7ada6c01404b7586a5713ee590ce329a9a8c591cf8e940927472de1ffebd15bf610869e115ee4368e34c818b339a55f767ff91e2fb3ce", 0xbe}], 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 5.325869775s ago: executing program 2 (id=630): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000f80)={&(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40), 0x0, 0x9, 0x3}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @empty, 0x6}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r5, r6, 0x0, 0xfff2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1c02de5d32d0900000000000000a0d30b2345c44996fd"], 0x2a) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x2, 0xfffffffd, 0xb49, 0x9, 0x50, 0x1, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c0000000306010800000000000600000000000000b2a1598586fc00"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) sendfile(r8, r8, 0x0, 0x20004) 5.311172377s ago: executing program 3 (id=631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x20000000b49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) (async) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file1', [{0x20, '-,\\\x89(*'}, {}, {0x20, '[{\xe0-\'/&}.*&,%/^/[#&$^^\'\\.'}, {0x20, 'fuse\x00'}], 0xa, "c90a292f85f4729a981e6aff30aaee1cbaebe9e288edb9ceec233e2d378d779d213a5abb6e7d3fb7d62b61330a2c212e39d1fb788d150302d41a2b572e583f0ba5ec5c0e8b45a50e21641a6242fec3f52ee20d86438b6bd4b0c4267c510306c201ea046fd9ef88f07d5a077a3ed593996d75c48c82f01f6d34f05545fe6ed628e3c1149008940b7c1ae1e9cf36029746a3f43955b2"}, 0xc8) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0xc0045520, &(0x7f00000000c0)=""/92) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) (rerun: 64) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 5.120492189s ago: executing program 4 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4044855}, 0x448c4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'gre0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x7fff, 0x983b, [0x0, 0x92, 0x4]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYBLOB="00002dbd7000fddbdf25040000001400038008000300001000000800020010000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x28000, 0x1000, 0x1, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000400)=0x100022, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) r8 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r8, 0xc008aeba, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x3e9}) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r6, 0x2}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x4000, 0xa35d0e41aad6cab5, 0x1, 0x3}, 0x1c) 4.724100385s ago: executing program 4 (id=633): unshare(0x2c000a00) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c2000905040000000000000705"], 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000040, 0x0, 0x0, 0xb4b, 0xfff, 0x0, 0xffff0001, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socket(0xa, 0x2, 0x1ff) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0x4, 0x8, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x6, '\x00', @p_u16=&(0x7f0000000200)=0x1b5}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) getsockopt$bt_hci(r5, 0x0, 0x18, 0x0, &(0x7f0000001840)) execve(0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x6, 0x14400) ioctl$int_in(r6, 0x5421, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xfff) fcntl$setstatus(r3, 0x4, 0x4400) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000002300)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58e5c5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b017494917392", 0x81, 0xfffffffffffffffe) 4.619055767s ago: executing program 1 (id=634): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x20, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000400)="a55e5cfe2953a70a008458d8760fe88042503dddb88185c24a23c0a7d4aec35a0b9654ce8549ee57ca991c8fc56b7f6cebd7413c74e57cc1ad42ef8b82449abe9d3e18f1c3fd63b5065075d0ec90ba48f7b9c6d7d43993fdca8309d6694c575331aa239c8f36aaf18f39534195fa906f8e3fa23f714b614b9d72bbef96b03c10f70b67df8efbb76c26e40cab82626c6771f0191ad124ecc8acf0cc2e5eae203eba3d60df7de503cce75fd385f99a449b1f4c74a268acb4aa5c37e1964fa5e243424b9eb718b4f9c7d3cba4b096cf2682", 0xd0}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r1, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r1, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb8, 0x4004}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5571422cdc76ac4eeaef1481e0cc5f7f49ccc51aecfcd3b82c4680f4654e9a85bec4824404f553b79e2f0d24636bc1c2065953af2562352c9e31796aa5444cd88c34f6def3ced037335e69ead0298ce14460f63928874faf9812267833f5b1253c7688e08f814e61a833ebbd298846c29ea31953de166f7fcf21e24c9785d1d15143c2fbf6f24e3af75a634ad6e564e5e825336f56e77ee51f2aeb290bc8bd8caa1bf7715cad11ee49e614f8d1c8271a54088ba2a0d619c48ab080b9ff5adc62e77dc3d4c34f1f23f27b42cc404164d6", 0xd0}, {&(0x7f0000000340)="f163f25129c243301a843960a76b9859b79b9993017f640d3350810d77b5d0efec08b707d9b74f449f3205221e41145c70a33c4b6a8803553c97499d900fbaf2c5b1a4764e059ec0bb407f8ef575d5b5495228dba1e23ac7802c2839f3", 0x5d}], 0x2, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x800c5}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.324581337s ago: executing program 3 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000005509010001000000950000000000000085000000a00000008500000002bb4c29baf25f9a4f3b652a000000bf91000000000000b7020000020000008500000085000000b700000000000000950000e4ff000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000a004e240000a9a200000000000000000000ffffac1414aa0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b36234c075"], 0x110) ioctl$int_in(r2, 0x5421, &(0x7f0000000980)=0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mlockall(0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x10, @buffer={0x0, 0xc8, &(0x7f0000000640)=""/200}, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getpid() syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29", 0xd}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3.336262073s ago: executing program 2 (id=636): syz_usb_connect$uac1(0x4, 0xd4, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x2365164ea00bc80c, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x4, 0x20, 0x89, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4b, 0xa}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x2, 0xae, "368a93"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x0, "c036fb5e"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x2, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x0, "4fa5"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x3, 0xdb, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x9, 0x2, {0x7, 0x25, 0x1, 0x2, 0x4, 0xb08}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x30, 0x7, "3282a6e2bf2b8611"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0xa}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd2, 0x2, 0x5, 0xbb, "be", "aab19d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x4, 0x2, 0x80, "629905d60577a7b02e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x1, {0x7, 0x25, 0x1, 0x83, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x0, 0xfb, 0x0, 0x8}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x7, 0x7fff}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x9f, &(0x7f0000000640)=@string={0x9f, 0x3, "04b1d05002a69a8d217c430c8424a5321136ba0bd8e0c915779fda5a3b584895b9dcb7b4b72f341094777abff03bc8613112198e1c4a434ca03d6aa2879d240b8128f743a488c7822f3f5145e94b465396fcebdd7258f6e93ae91f33068ae8f6d6b480de0f27c73150b2e35b749173fefc71ecd209b6b3df59d4dff841fa2b6e557b23aabc2165ed2f561eb16796e08649002ce68d5d20c2f56f8a1bea"}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x26, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100260089020101884ce7ff00022daa41df7773aaaaaaaaaaaa"], 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="640100003c0001002bbd7000fedbdf2514009e00ff0100000000000000000000000000013f0018800800a700000000007f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c4200"], 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.468186144s ago: executing program 2 (id=637): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400030000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe"], 0x48}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)=0x1) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRES32=r1, @ANYRES64, @ANYRES16=r2], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) 2.362320822s ago: executing program 0 (id=638): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x41341, 0x0) write(r1, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x2, 0x0, 0x8000}}) (async) r2 = syz_io_uring_setup(0x7eb8, &(0x7f0000000400)={0x0, 0xb23b, 0x20000, 0x2, 0x351}, &(0x7f0000000300), &(0x7f0000000480)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async, rerun: 64) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0x3a9f, 0x200, 0x2003, 0x277, 0x0, r2}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000040)={0x3, 0x1, 0x10000000000001, 0x3}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue1\x00', 0x10000}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000380)={0x0, 0x1f3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d, 0xe}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.268926508s ago: executing program 2 (id=639): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r2, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r8, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xffb) 1.941423397s ago: executing program 0 (id=640): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x6, 0x2, {0xa, @pix_mp={0x9, 0x81, 0x30314142, 0x4, 0xa, [{0xd, 0x200}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0xae3e, 0xcc9}, {0x4ce, 0x8}, {0x0, 0x2000000d}, {0x80000001, 0x1}], 0x4, 0x3, 0x6, 0x0, 0x5}}, 0xfffffffa}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket(0x11, 0x3, 0x3) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r10], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68f2e93aa79b1356234800", @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x40) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000fedbdf250f0000000b00310053fffffffec03a80d230ca42"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r14, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r14, 0x0) ioctl$VIDIOC_S_TUNER(r14, 0x4054561e, &(0x7f0000000140)={0x3, "a42597c2cad7432bdb84f487758d45e0eed6b16bb0dedcfccfb3f69a7893d459", 0x5, 0x2, 0x6, 0x10000, 0x4, 0x4, 0xab, 0x8}) 1.323585475s ago: executing program 0 (id=641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28240, 0xc8) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0xffffffff, 0x40000333, 0x0, r5}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x847ba, 0x70c2, 0x4, 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.281243355s ago: executing program 4 (id=642): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x16}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="885e38f070ef4f9b01eb5373270a1739851b5a4782b47bb2fc0641d90be3156a58ce1f9531ee4bea0cb707c17ae64af606480230d977b9950d225221c6c0d20aee83e565b0f4f68dbea378e83674100f4ac3032cf97dd5471b5c6ca08447c9a03ec83ae2d4a777", 0x67}, {&(0x7f00000000c0)="ceb349852b6003f970ab002740efc6ae29569f33a3bbfe7ca15ed2209e8bcc6f7d545f53eb017ba804beb0f42ea48bcf8d06f00ad0e63915136e2bebd434", 0x3e}, {&(0x7f0000000100)="b7daf36244fb2a25c41c", 0xa}, {&(0x7f0000000140)="5671f31ce661fdd6c820275c6c5eff41339f5fbe09713e7594376ee81a73b0d4a4d05db3066bad5d69227eedea0851103e00a5d7769896c5eedea17cbcfffc578bf0bdd2560145399db1190d8a7d3642bcde5534054ac73d0a7bd786ac333c0419a2eb4dfb9c8403fbf1fe74a5cd6bb3700892361355561726cffb2f86a7563ec79ccf6a0e08b2352d8b60c0324d3eddf75e2d56051c8a0c8bee5165995efa904ce359b05303f3c26e2b573b03040cd505a50ea1c2e5b242427e947036be5f7752bf47573cea11d8290cf7a882664b8b57002ea0ff135f308928f873c08721c9f6316dbbefb59def1831b757442df1", 0xef}], 0x4, 0x0, 0x0, 0x24048014}], 0x1, 0x48050) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x8, 0x414802) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x83}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004}, 0x40041) pselect6(0x40, &(0x7f0000000440)={0xb, 0x10a854e9, 0x1bcee096, 0x9, 0x3, 0x4, 0xffff, 0x81}, &(0x7f0000000480)={0x3b, 0x7, 0x0, 0xe, 0x1, 0x0, 0xffff, 0x8}, &(0x7f00000004c0)={0x8, 0x1, 0xf6, 0x3, 0xd, 0x1, 0x351d, 0x5}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x3]}, 0x8}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x4, 0x0, [{0x6, 0x1, 0x0, 0x0, @msi={0x7, 0x2, 0x6, 0x8}}, {0x1, 0x1, 0x1, 0x0, @adapter={0x338, 0x9, 0x8ef6, 0x7, 0x1000}}, {0xf, 0x4, 0x0, 0x0, @irqchip={0x3, 0x3}}, {0x8, 0x4, 0x0, 0x0, @sint={0x4, 0x100}}]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x10, '\x00', @b}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_test', 0x400002, 0x192) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x400480, 0x0) ppoll(&(0x7f0000000780)=[{r0, 0x1040}, {r3, 0xa100}, {r0, 0x290}, {r0, 0x60c}, {r4, 0x8}, {r0, 0x5107}], 0x6, &(0x7f00000007c0)={0x0, 0x3938700}, &(0x7f0000000800)={[0x1]}, 0x8) preadv(r1, &(0x7f0000001d00)=[{&(0x7f0000000840)=""/5, 0x5}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/57, 0x39}, {&(0x7f0000000900)=""/51, 0x33}, {&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/243, 0xf3}, {&(0x7f0000000b00)=""/235, 0xeb}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/243, 0xf3}], 0x9, 0x9, 0x96) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044844}, 0xc811) clock_gettime(0x3, &(0x7f0000001ec0)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f40), r3) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4884}, 0xc810) r6 = syz_io_uring_complete(0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002040)="7f3a9bf1a4a7da4a3121c0bc27e3d3cdb07a9ca55f82af084fa08a9d656489318e59de0c5c90cda1b389f8cb20c9e7c041843f0bf5e699abacc2c35aae2e99afd61111e8228ba3ecdc3bec753604010da02805d4665abdfabab772ec53d1786008500b67184c5697f427bcb0f86fafe1c9544fe40a02019c411607f11e2524b975c6d65631a5fabc657b2fa15e918a687d5d3037467e0b", 0x97) r7 = syz_open_dev$hiddev(&(0x7f0000002100), 0x1, 0x341203) ioctl$HIDIOCGDEVINFO(r7, 0x801c4803, &(0x7f0000002140)=""/37) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_xfrm(r6, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002340)={&(0x7f00000021c0)=@newae={0x178, 0x1e, 0x100, 0x70bd25, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4d2, 0xa, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x3505}, [@algo_auth={0x8d, 0x1, {{'sha224\x00'}, 0x228, "d2da9ddf649645f7a80e483a7373e9dba683a31201f289db503f19d2c998d4286f323404e63748d39ebfeaf290d76d5b5442620c7c8c9b87163665ddca30cd9ba0ba43a4bc"}}, @sec_ctx={0x66, 0x8, {0x62, 0x8, 0x0, 0x7, 0x5a, "b8e888c19b3f8375b8a8477ba2be7bb1e8845f8df2c756d8ebbe1502b8b1ef149d3a861f80b5a1d01f6f04797a9c7552971d4a5ed385136ae765878c913fc08865dde1549fb22f55b95945a9c212e875341b5264ed9684881dd7"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0x9}}, @lifetime_val={0x24, 0x9, {0x9, 0x0, 0x0, 0x4cd1f943}}, @lastused={0xc, 0xf, 0x5}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000023c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002500)={r9, &(0x7f0000002440)="02832ab27da4ef5ace412264358ff9af785dbccfa49e80e4b1b4a98b83ffc5f9f7b43d623b692873acde0dbc8c762deafca7378e5c9dcc4f8aafbc2382c341f825446bd337972f090a0a9e304ce51cbbf3cca0d8e8d6b5af218ddac44f93f9a9093d50acc3ae298b3c0c7089114ffa4ff42ea0c9448be0ca4c868116dfe64fb9f63b8c88d55ae625c98bed934c2554258ba82e2402a3f7b31cae135386fceeeb2d3b957dfcdc39c83e347a5212512fc5cc"}, 0x20) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000002540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) rt_sigtimedwait(&(0x7f0000002580)={[0x4]}, &(0x7f00000025c0), &(0x7f0000002640)={0x0, 0x989680}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000002680)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000026c0)=r10) socket$nl_netfilter(0x10, 0x3, 0xc) time(&(0x7f0000002700)) 1.188611226s ago: executing program 3 (id=643): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84400) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x6) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000080)=0x5) r2 = shmget(0x3, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x7) r3 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/193) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x400, 0x4, 0xffff, 0x1, 0x101, 0x5e95}) shmctl$IPC_RMID(r3, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x400002, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280)) recvmsg$can_j1939(r1, &(0x7f0000001a80)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/205, 0xcd}], 0xa, &(0x7f0000001a40)=""/53, 0x35}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000001ac0)={0x3, 0x2e, 0x5}) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000001b40)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/37, 0x25}, {&(0x7f0000001cc0)=""/160, 0xa0}], 0x2, &(0x7f0000001dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x1) syz_open_dev$video(&(0x7f0000001f40), 0x8, 0x8c000) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000002200)={{&(0x7f0000002180)={'GENERAL\x00', {}, {&(0x7f0000002100)={'KERNEL\x00', {&(0x7f0000002040)=@adf_hex={@bank={'Bank', '0', 'CoreAffinity\x00'}, {}, {&(0x7f0000001f80)=@adf_str={@format={'Dc', '5', 'NumConcurrentRequests\x00'}, {"7f6a3fea96a81c1d68a4bb1f9128d146ec6c067b9cbdecaf15a25661efbdbe23b44008b2a0ede8fac2635842bf4f3b3f71d288808e5bf16c8e04b4e9b2959180"}}}}}}}}}, 0x9}) wait4(r5, &(0x7f0000002240), 0x80000000, &(0x7f0000002280)) connect$tipc(r0, &(0x7f0000002340)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x4}}, 0x10) socketpair(0xf, 0x5, 0x4, &(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f00000023c0)={0x7, 'macsec0\x00', {0x7}, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000002400)={0x3, 0x35315258, 0x2, @discrete={0x4, 0xffff}}) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x6000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendto$inet6(r6, &(0x7f0000002440)="33e801214873c4a85169822b826ad083bb21ef09de79a310f6ad7bc2c07f83ba2dd6efdea3", 0x25, 0x890, 0x0, 0x0) shmctl$SHM_LOCK(r2, 0xb) socket$inet6_sctp(0xa, 0x1, 0x84) 1.015938501s ago: executing program 1 (id=644): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@sha1={0x1, "3933fc4fcd7f28fa0ecc6444e439b367e09176e7"}, 0x15, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000009c0)={0x3ac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_FRAME={0x366, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x499b}, @device_b, @device_a, @random="adbb355b1fb4", {0x3, 0x8}}, 0x6, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x4, [{0x16, 0x1}, {0x4}, {0x6c, 0x1}, {0x6c}]}, @void, @void, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x0, 0x3, 0x2}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x2, 0x0, {0x5e, 0xcda, 0x0, 0x300, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xffffff81, 0x3}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x62, "0bd98b14013deeeb70bc3fbbd4a8662a687dcb8f7651acb61c6fe21a118d98e8287dc18ce747f24def8159a129de6a12277d5b28de5fac2f9a2a3cd8fe0f87064717c1699d7956e0a53d1d42a479929a3c43fcde623cea47eee0cebdcc4bb2addb8f"}, {0xdd, 0x94, "b631009982a823b969c634e058cfa27c7a6535c9255305c6242aa9e9e5ca6c16b41e16149110158872b64bf6a938f4dc86cd5cbd82ad06013488248fc320ebf66f7097043f0f2aacb3940e861304bc1fd4059852ead7bd25ce3e2079e35de1208cb91c80900905d8b9dceb5bc15d261685cef9ebaacaab7a237bfb0a3f95b1c86c548c8d3d17818653cda7b2390a9df81ede1dd6"}, {0xdd, 0xc8, "11dc85545778a00836b2054ddda10303475af5b6c2e0123a29b48f56b8511ec7973a95a6238b0f5d7a25c4b134758ccce6029f072c30c457d7e5e1f65ace7d044b8e399e72fed7f563f243567f72f579d1fbc13a774ec3c8c19069932bfb7ed1cd14f62749037f8179d1371eda577ef2803c25efdca94ffcdff3ec8c204e87673cbc032c9115d4359b51fb9e340d1ebe1d5f6edb7f4b487696063e72747534043999406542632285b3354016a658ebe5ec9fc0679b1a6130b0672d9d9b39d88508c264b655fe1a19"}, {0xdd, 0x3c, "f4cb6e08fafa88f7c00ea5396c4af5e38235c71c2f7b59f777def79f64557566f1ae452e4ea343e9f7c9de35447fd049d8b2a8b7ae8e68995d68551f"}, {0xdd, 0x86, "d83cd0dc534bd3f461a1fe6bb39e13257bb5938c37be4aed69b86ceaf35c5f00c3ac9e39972cde65dbab8b47b7bd680ef42fe6846935d9c3e4c0d9b4b836c1c476edeca5b9f939cff5c9b9e9475b9868c8e5f428d74b8c3d08cd130262c405b07cda4f6bb6537a333e5fa41493f6d22687538ebd71908019244e6d9e363644d241dc0d7af0b1"}, {0xdd, 0x74, "2ba9ec3eb294488195c971e51ccda565b6f241b4e5efede6e4b092b8d97dcb337da83e4184c19e7c2ff77415b8309e4c9bf7034b9ae7e268c620435c92eecef7440f24a19794f8555a191f73cf1f2531e1a6d8125021680cf71345dda5a131a4ee2016eb7cea23d123735c4c30832c6879bbe9c9"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11d9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3eb}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x1, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r7, r8, 0x0) 982.734527ms ago: executing program 3 (id=645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r7, 0x2}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_TABLE={0x8, 0xf, 0x7ff}]}, 0x24}}, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x40000000000003, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x5, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x5db, 0x80000000000000}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f00000000c0)=0x100, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000004680)={{0x12, 0x1, 0x310, 0x8, 0x31, 0xd8, 0x10, 0x499, 0x1507, 0xaa69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xba, 0x30, 0x7, [{{0x9, 0x4, 0x3, 0xdd, 0x0, 0xff, 0xff, 0xff, 0xc1}}]}}]}}, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x9) 118.313407ms ago: executing program 3 (id=646): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001080)="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", 0x362}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 343.452µs ago: executing program 1 (id=647): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)="f1", 0x1, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x28, "a5ee84f2706002b5bd284eee36e32e2c0843da25f739e139eca3b62102fa5a25fed2cda009e77f86"}, &(0x7f0000000040)=0x30) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) shutdown(r1, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x800) (async) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x848f}], 0x1, 0x60010002, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x100, 0x4) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x9, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 0s ago: executing program 2 (id=648): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x4010, r1, 0x30ed6000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401000000f4ffffffffff070001"], 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x204c040) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200020, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r8, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x90) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) read$dsp(r6, &(0x7f00000000c0)=""/87, 0x57) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="11032bbd7000fbdbdf25e85133ca6e8c9f"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(r3) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) kernel console output (not intermixed with test programs): 50.734474][ T5926] usb 5-1: Manufacturer: syz [ 150.933705][ T6609] bond0: (slave bond_slave_0): Releasing backup interface [ 150.957001][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 150.972047][ T5926] cdc_wdm 5-1:1.0: skipping garbage [ 151.027821][ T5926] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 151.070606][ T5926] cdc_wdm 5-1:1.0: Unknown control protocol [ 151.251174][ T6609] bond0: (slave bond_slave_1): Releasing backup interface [ 151.407142][ T6609] team0: Port device team_slave_0 removed [ 151.460681][ T6609] team0: Port device team_slave_1 removed [ 151.479531][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.570422][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.670129][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.688235][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.264176][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.280117][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.990850][ T24] usb 5-1: USB disconnect, device number 13 [ 153.069976][ T6634] loop2: detected capacity change from 0 to 7 [ 153.122413][ T6634] Dev loop2: unable to read RDB block 7 [ 153.146166][ T6634] loop2: AHDI p1 p2 p3 [ 153.150737][ T6634] loop2: partition table partially beyond EOD, truncated [ 153.185703][ T6634] loop2: p1 start 1601398130 is beyond EOD, truncated [ 153.192973][ T6634] loop2: p2 start 1702059890 is beyond EOD, truncated [ 153.276330][ T6639] kvm: user requested TSC rate below hardware speed [ 153.920371][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 154.075017][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 154.104996][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.120358][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.158568][ T24] usb 5-1: Product: syz [ 154.174073][ T24] usb 5-1: Manufacturer: syz [ 154.178919][ T24] usb 5-1: SerialNumber: syz [ 154.187655][ T24] usb 5-1: config 0 descriptor?? [ 154.214602][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 154.300497][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 154.309733][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.320100][ T43] usb 2-1: config 5 has an invalid interface number: 184 but max is 3 [ 154.333744][ T43] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 154.373052][ T43] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 154.408408][ T43] usb 2-1: config 5 has no interface number 0 [ 154.416036][ T43] usb 2-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 154.431573][ T43] usb 2-1: config 5 interface 184 has no altsetting 0 [ 154.444149][ T43] usb 2-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 154.454825][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.479678][ T43] usb 2-1: Product: syz [ 154.490689][ T43] usb 2-1: Manufacturer: syz [ 154.507959][ T43] usb 2-1: SerialNumber: syz [ 154.765103][ T6663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.181'. [ 154.791085][ T6649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.802056][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.811372][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.984685][ T43] ftdi_sio 2-1:5.184: FTDI USB Serial Device converter detected [ 155.009644][ T24] gspca_sq930x: ucbus_write failed -71 [ 155.031666][ T43] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 155.080827][ T43] usb 2-1: USB disconnect, device number 9 [ 155.088395][ T43] ftdi_sio 2-1:5.184: device disconnected [ 155.260374][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 155.270300][ T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 155.378188][ T24] usb 5-1: USB disconnect, device number 14 [ 155.585184][ T6679] loop2: detected capacity change from 0 to 7 [ 155.634646][ T6679] Dev loop2: unable to read RDB block 7 [ 155.676324][ T6679] loop2: AHDI p1 p2 p3 [ 155.687883][ T6679] loop2: partition table partially beyond EOD, truncated [ 155.727688][ T6679] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.750351][ T6679] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.041961][ T24] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 156.287204][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 156.383467][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'. [ 156.590340][ T24] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 156.750558][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 156.759295][ T24] usb usb2-port1: attempt power cycle [ 157.100340][ T24] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 157.146382][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 157.290339][ T24] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 157.372288][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 157.377901][ T24] usb usb2-port1: unable to enumerate USB device [ 157.911971][ T6587] Set syz1 is full, maxelem 65536 reached [ 158.267430][ T6714] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 158.293061][ T6714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.378255][ T6721] loop2: detected capacity change from 0 to 7 [ 158.386784][ T6721] Dev loop2: unable to read RDB block 7 [ 158.399013][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.405501][ T6721] loop2: AHDI p1 p2 p3 [ 158.415760][ T6718] team0: Port device bond0 added [ 158.416042][ T6721] loop2: partition table partially beyond EOD, truncated [ 158.432885][ T6721] loop2: p1 start 1601398130 is beyond EOD, truncated [ 158.448826][ T6721] loop2: p2 start 1702059890 is beyond EOD, truncated [ 158.649248][ T5953] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.730435][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.841080][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 158.855592][ T5953] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 158.864107][ T5953] usb 3-1: config 0 has no interface number 0 [ 158.871978][ T5953] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 158.882611][ T5953] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 158.895424][ T5953] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 158.904928][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.913201][ T5953] usb 3-1: Product: syz [ 158.917621][ T5953] usb 3-1: Manufacturer: syz [ 158.922323][ T5953] usb 3-1: SerialNumber: syz [ 158.928815][ T5953] usb 3-1: config 0 descriptor?? [ 158.935687][ T6717] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 158.936196][ T43] usb 1-1: config 0 has no interfaces? [ 159.008386][ T6717] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 159.034685][ T43] usb 1-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 159.060293][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.070373][ T5958] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.102832][ T43] usb 1-1: Product: syz [ 159.180513][ T43] usb 1-1: Manufacturer: syz [ 159.190790][ T43] usb 1-1: SerialNumber: syz [ 159.196129][ T5953] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6a:a2:fc:dd:d1:bf [ 159.251206][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 159.261913][ T43] usb 1-1: config 0 descriptor?? [ 159.270666][ T5958] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 159.284032][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 159.294297][ T5958] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 159.308815][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.336297][ T5958] usb 2-1: config 0 descriptor?? [ 159.668445][ T6744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.200'. [ 159.702350][ T5866] usb 1-1: USB disconnect, device number 17 [ 159.819297][ T6744] kvm: pic: non byte read [ 159.879016][ T6744] kvm: pic: level sensitive irq not supported [ 159.879146][ T6744] kvm: pic: non byte read [ 159.973410][ T6744] kvm: pic: level sensitive irq not supported [ 159.973494][ T6744] kvm: pic: non byte read [ 160.279767][ T5958] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 160.427520][ T5958] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -5 [ 160.687669][ T5958] usb 2-1: USB disconnect, device number 14 [ 160.817236][ T6752] fido_id[6752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 161.309233][ T5866] usb 3-1: USB disconnect, device number 13 [ 161.326737][ T5866] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 161.461296][ T6770] dlm: no locking on control device [ 161.827356][ T5953] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.838489][ T6779] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.136121][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.173985][ T5953] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 162.283548][ T6788] loop2: detected capacity change from 0 to 7 [ 162.349487][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.391090][ T6001] Dev loop2: unable to read RDB block 7 [ 162.420388][ T6001] loop2: AHDI p1 p2 p3 [ 162.433036][ T6001] loop2: partition table partially beyond EOD, truncated [ 162.457337][ T6001] loop2: p1 start 1601398130 is beyond EOD, truncated [ 162.472039][ T6001] loop2: p2 start 1702059890 is beyond EOD, truncated [ 162.507904][ T6788] Dev loop2: unable to read RDB block 7 [ 162.513788][ T6788] loop2: AHDI p1 p2 p3 [ 162.518012][ T6788] loop2: partition table partially beyond EOD, truncated [ 162.591248][ T6788] loop2: p1 start 1601398130 is beyond EOD, truncated [ 162.603013][ T5953] usb 5-1: config 0 descriptor?? [ 162.650980][ T6788] loop2: p2 start 1702059890 is beyond EOD, truncated [ 163.297335][ T6794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.681925][ T5184] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 163.774778][ T5953] razer 0003:1532:010D.0006: unbalanced delimiter at end of report description [ 163.828069][ T6794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.377889][ T5953] razer 0003:1532:010D.0006: probe with driver razer failed with error -22 [ 164.415585][ T6794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.430530][ T6794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.439504][ T6794] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.686294][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.701052][ T5953] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.281866][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 165.890735][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.370364][ T5958] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.444947][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.451120][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.520406][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.597032][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.645083][ T5958] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 166.720229][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.763067][ T43] usb 5-1: USB disconnect, device number 15 [ 166.841635][ T5958] usb 3-1: config 0 descriptor?? [ 167.324026][ T5958] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 167.351343][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.531369][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 167.554737][ T43] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 167.594721][ T43] usb 5-1: config 0 has no interface number 0 [ 167.629031][ T43] usb 5-1: config 0 interface 132 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 167.642603][ T43] usb 5-1: config 0 interface 132 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16 [ 167.660561][ T43] usb 5-1: config 0 interface 132 has no altsetting 0 [ 167.678155][ T43] usb 5-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=fe.e3 [ 167.702073][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.713376][ T43] usb 5-1: Product: syz [ 167.721359][ T43] usb 5-1: Manufacturer: syz [ 167.726289][ T43] usb 5-1: SerialNumber: syz [ 167.736178][ T43] usb 5-1: config 0 descriptor?? [ 167.753365][ T6843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.987902][ T43] sierra 5-1:0.132: Sierra USB modem converter detected [ 168.032868][ T43] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 168.062866][ T43] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 168.089235][ T43] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 168.137487][ T43] usb 5-1: USB disconnect, device number 16 [ 168.204475][ T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 168.258047][ T43] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 168.318136][ T43] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 168.341208][ T5958] usb 3-1: USB disconnect, device number 14 [ 168.381315][ T43] sierra 5-1:0.132: device disconnected [ 169.847288][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.877055][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.371739][ T5953] usb 2-1: device descriptor read/all, error -110 [ 170.550407][ T5953] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 171.540425][ T5866] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.700607][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 171.712177][ T5866] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.726703][ T5866] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 171.771379][ T5866] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 171.807670][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.855237][ T5866] usb 3-1: Product: syz [ 171.878699][ T5866] usb 3-1: Manufacturer: syz [ 171.910291][ T5866] usb 3-1: SerialNumber: syz [ 172.159990][ T5866] usb 3-1: Limiting number of CPorts to U8_MAX [ 172.181549][ T5866] usb 3-1: Not enough endpoints found in device, aborting! [ 172.300314][ T5940] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 172.373222][ T5953] usb 3-1: USB disconnect, device number 15 [ 172.480460][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 172.526227][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.541682][ T5940] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 172.554554][ T5940] usb 2-1: config 4 has no interface number 0 [ 172.567514][ T5940] usb 2-1: config 4 interface 30 has no altsetting 0 [ 172.595526][ T5940] usb 2-1: string descriptor 0 read error: -22 [ 172.612773][ T5940] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 172.628112][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.656481][ T5940] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 172.710986][ T5940] dw2102: su3000_power_ctrl: 1, initialized 0 [ 172.736407][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 172.768609][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.801351][ T5940] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 172.827011][ T5940] usb 2-1: media controller created [ 172.868110][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 172.877871][ T6878] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.234'. [ 172.927099][ T5953] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.936333][ T5940] dw2102: i2c transfer failed. [ 172.970718][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 172.976539][ T5940] dw2102: i2c transfer failed. [ 172.982438][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 172.988316][ T5940] dw2102: i2c transfer failed. [ 173.021158][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.033742][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.044023][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 173.049828][ T5940] dw2102: i2c transfer failed. [ 173.075677][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.085663][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 173.092054][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.132507][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.134692][ T5940] dw2102: i2c transfer failed. [ 173.154825][ T5940] dvb-usb: bulk message failed: -22 (6/0) [ 173.165045][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.207127][ T5953] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 173.210292][ T5940] dw2102: i2c transfer failed. [ 173.241703][ T30] audit: type=1326 audit(1758239909.918:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6893 comm="syz.3.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141fd8eba9 code=0x0 [ 173.267136][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.287773][ T6899] fuse: Unknown parameter 'f' [ 173.294377][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.303272][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.320795][ T6900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.337246][ T5953] usb 1-1: config 0 descriptor?? [ 173.352033][ T5940] dvb-usb: MAC address: 02:02:02:02:02:02 [ 173.352222][ T6900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.450688][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.516162][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 173.525207][ T5940] dw2102: command 0x0e transfer failed. [ 173.533870][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 173.539837][ T5940] dw2102: command 0x0e transfer failed. [ 173.713443][ T6855] syz.4.226 (6855): drop_caches: 1 [ 173.782839][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.795220][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.849155][ T5953] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 173.862901][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 173.878666][ T5940] dw2102: command 0x0e transfer failed. [ 173.895519][ T5940] dvb-usb: bulk message failed: -22 (3/0) [ 173.908740][ T5940] dw2102: command 0x0e transfer failed. [ 173.928383][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 173.939177][ T5940] dw2102: command 0x51 transfer failed. [ 173.949144][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 173.969741][ T5940] dw2102: i2c probe for address 0x68 failed. [ 173.976776][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 173.988329][ T5940] dw2102: i2c probe for address 0x69 failed. [ 173.995397][ T5940] dvb-usb: bulk message failed: -22 (5/0) [ 174.009629][ T5953] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 174.011775][ T5940] dw2102: i2c probe for address 0x6a failed. [ 174.056780][ T5953] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 174.066320][ T5940] dw2102: probing for demodulator failed. Is the external power switched on? [ 174.089281][ T5940] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 174.095331][ T5953] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 174.171347][ T5953] usb 1-1: USB disconnect, device number 18 [ 174.300743][ T6905] fido_id[6905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 174.401215][ T5940] rc_core: IR keymap rc-tt-1500 not found [ 174.416708][ T5940] Registered IR keymap rc-empty [ 174.438535][ T5940] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 174.499055][ T5940] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 174.543417][ T5940] dvb-usb: schedule remote query interval to 250 msecs. [ 174.570145][ T5940] dw2102: su3000_power_ctrl: 0, initialized 1 [ 174.613016][ T5940] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 174.676513][ T5940] usb 2-1: USB disconnect, device number 17 [ 174.793442][ T5940] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 174.930766][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 175.092232][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 175.103699][ T5940] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 175.111964][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 175.122958][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 175.135560][ T5866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 175.156227][ T5866] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 175.171069][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.179798][ T5866] usb 1-1: Product: syz [ 175.187567][ T5866] usb 1-1: Manufacturer: syz [ 175.194116][ T5866] usb 1-1: SerialNumber: syz [ 175.240477][ T5953] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 175.256313][ T5866] usb 1-1: config 0 descriptor?? [ 175.268306][ T5866] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 175.323103][ T5940] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 175.332678][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.357836][ T5940] usb 2-1: config 0 descriptor?? [ 175.410533][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 175.425839][ T5953] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 175.434486][ T5953] usb 3-1: config 0 has no interface number 0 [ 175.440714][ T5953] usb 3-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 175.459280][ T5953] usb 3-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 175.475824][ T5953] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 175.494234][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.502865][ T5953] usb 3-1: Product: syz [ 175.507171][ T5953] usb 3-1: Manufacturer: syz [ 175.512054][ T5953] usb 3-1: SerialNumber: syz [ 175.522625][ T5953] usb 3-1: config 0 descriptor?? [ 175.608072][ T5940] kaweth 2-1:0.0: Firmware present in device. [ 175.673866][ T5866] scsi host1: usb-storage 1-1:0.0 [ 175.696981][ T5866] usb 1-1: USB disconnect, device number 19 [ 175.786055][ T5953] usb 3-1: USB disconnect, device number 16 [ 175.813414][ T5940] kaweth 2-1:0.0: Statistics collection: 0 [ 175.863297][ T5940] kaweth 2-1:0.0: Multicast filter limit: 0 [ 175.873039][ T5940] kaweth 2-1:0.0: MTU: 0 [ 175.879553][ T5940] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 176.032358][ T6935] mmap: syz.2.246 (6935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 176.429179][ T5940] kaweth 2-1:0.0: Error setting SOFS wait [ 176.447088][ T5940] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 176.496292][ T5940] usb 2-1: USB disconnect, device number 18 [ 176.532819][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.572084][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.691567][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.700119][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.272551][ T5953] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 177.323977][ T6971] fuse: Bad value for 'rootmode' [ 177.447762][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.455788][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 177.466097][ T5953] usb 3-1: not running at top speed; connect to a high speed hub [ 177.485503][ T5953] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 177.506256][ T5953] usb 3-1: config 12 has no interface number 0 [ 177.516622][ T5953] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 177.534822][ T5953] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 177.546349][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.556775][ T5953] usb 3-1: Product: syz [ 177.561624][ T5953] usb 3-1: Manufacturer: syz [ 177.566269][ T5953] usb 3-1: SerialNumber: syz [ 177.620302][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 177.669004][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 177.684849][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.694675][ T24] usb 2-1: Product: syz [ 177.698910][ T24] usb 2-1: Manufacturer: syz [ 177.710933][ T24] usb 2-1: SerialNumber: syz [ 177.723212][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 177.729720][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 178.144367][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 178.159074][ T24] r8152-cfgselector 2-1: bad CDC descriptors [ 178.183527][ T24] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 178.280410][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.520510][ T30] audit: type=1326 audit(1758239915.138:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 178.545639][ T30] audit: type=1326 audit(1758239915.138:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 179.111781][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 179.468598][ T7003] bridge_slave_1: left allmulticast mode [ 179.507336][ T7003] bridge_slave_1: left promiscuous mode [ 179.519796][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.661059][ T7003] bridge_slave_0: left allmulticast mode [ 179.678060][ T7003] bridge_slave_0: left promiscuous mode [ 179.702263][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.959094][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.156397][ T5953] usb 3-1: USB disconnect, device number 17 [ 180.793619][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.932568][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 180.980495][ T7017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 181.025801][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 181.104391][ T7017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 182.869823][ T7038] tipc: Enabling of bearer rejected, failed to enable media [ 184.279119][ T5926] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 184.561211][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 184.597421][ T5926] usb 3-1: config index 0 descriptor too short (expected 31780, got 36) [ 184.608358][ T5926] usb 3-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 184.627467][ T5926] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 184.639078][ T5926] usb 3-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 184.740080][ T5926] usb 3-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 184.759838][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.781414][ T5926] usb 3-1: Product: syz [ 184.785625][ T5926] usb 3-1: Manufacturer: syz [ 184.809561][ T5926] usb 3-1: SerialNumber: syz [ 185.074701][ T7052] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.278'. [ 185.131463][ T5926] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 185.172012][ T5926] gspca_sn9c20x: Write register 1000 failed -71 [ 185.189451][ T5926] gspca_sn9c20x: Device initialization failed [ 185.205463][ T5926] gspca_sn9c20x 3-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 185.231972][ T5926] usb 3-1: USB disconnect, device number 18 [ 186.382947][ T7099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.687016][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.289'. [ 187.090469][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 187.281225][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 187.301983][ T5866] usb 3-1: config 8 has an invalid interface number: 65 but max is 1 [ 187.331656][ T5866] usb 3-1: config 8 has an invalid descriptor of length 156, skipping remainder of the config [ 187.380346][ T5866] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 187.460464][ T5866] usb 3-1: config 8 has no interface number 0 [ 187.478827][ T5866] usb 3-1: config 8 interface 65 altsetting 2 endpoint 0x4 has an invalid bInterval 172, changing to 11 [ 187.529049][ T5866] usb 3-1: config 8 interface 65 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 187.619788][ T5866] usb 3-1: config 8 interface 65 has no altsetting 0 [ 187.630256][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 187.673277][ T5866] usb 3-1: New USB device found, idVendor=19d2, idProduct=0601, bcdDevice=51.8b [ 187.710341][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.738931][ T5866] usb 3-1: Product: syz [ 187.750760][ T5866] usb 3-1: Manufacturer: ઽ豸㘋⬻泃乍畬棈⹍਼픠ꞯⷣ镙㘺搅亼摸ꁸ༅淝詷‣헝劍蔖ᤨ귵㜩⠪棠䶮약쇬鸩඼褾≹࢖窷㻸凩찣湧ｒ昮৞鹥ꞪҐ㺳塬鶕⴨ઊ璬䟍㒸䠅̈́蓤ﯨ᥺䰸紱褞驸瞿쇯펖ꓨ疫濚㟊簜꿃눖쒯儖頬з隕榢먁윸费貅Ԗ昕ﳻ킥밷単뜢ኂ耡簞⢓睆푗 [ 187.920515][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.949170][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.967251][ T24] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 187.990610][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.009174][ T5866] usb 3-1: SerialNumber: syz [ 188.047355][ T24] usb 2-1: config 0 descriptor?? [ 188.521693][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.557409][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.589192][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.627421][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.645719][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.659736][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.767912][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.768238][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.965976][ T5866] option 3-1:8.65: GSM modem (1-port) converter detected [ 189.149732][ T5866] usb 3-1: USB disconnect, device number 19 [ 189.376250][ T5866] option 3-1:8.65: device disconnected [ 190.050695][ T5866] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 190.180550][ T6985] Set syz1 is full, maxelem 65536 reached [ 190.202083][ T5866] usb 3-1: device descriptor read/64, error -71 [ 190.396298][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 190.419042][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 190.453756][ T24] usb 2-1: USB disconnect, device number 20 [ 190.480382][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 190.671630][ T5866] usb 3-1: device descriptor read/64, error -71 [ 190.763024][ T7140] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 190.987983][ T5866] usb usb3-port1: attempt power cycle [ 190.989672][ T7145] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 191.470337][ T5866] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.507205][ T7148] pim6reg: entered allmulticast mode [ 191.599290][ T5866] usb 3-1: device descriptor read/8, error -71 [ 191.950641][ T5866] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 191.971086][ T5866] usb 3-1: device descriptor read/8, error -71 [ 192.080657][ T5866] usb usb3-port1: unable to enumerate USB device [ 193.800685][ T5926] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 194.366271][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372864][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.496189][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.538825][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.921978][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.039298][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.072137][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.107517][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.740328][ T5866] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 196.854273][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.879813][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 196.900478][ T5926] usb 5-1: can't read configurations, error -71 [ 196.920881][ T5866] usb 3-1: device descriptor read/64, error -71 [ 197.113450][ T7215] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[7215] [ 197.158590][ T7215] netlink: 'syz.0.315': attribute type 6 has an invalid length. [ 197.200771][ T5866] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 197.254159][ T30] audit: type=1326 audit(1758239933.918:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.4.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x0 [ 197.351342][ T5866] usb 3-1: device descriptor read/64, error -71 [ 197.509517][ T5866] usb usb3-port1: attempt power cycle [ 197.523648][ T30] audit: type=1326 audit(1758239934.138:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141fd8eba9 code=0x7ffc0000 [ 197.596812][ T30] audit: type=1326 audit(1758239934.138:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141fd8eba9 code=0x7ffc0000 [ 197.619336][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.980465][ T5866] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 198.011187][ T5866] usb 3-1: device descriptor read/8, error -71 [ 198.520302][ T5866] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 198.876942][ T5866] usb 3-1: device descriptor read/8, error -71 [ 199.059227][ T5866] usb usb3-port1: unable to enumerate USB device [ 199.467450][ T30] audit: type=1326 audit(1758239936.138:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.0.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2f118eba9 code=0x0 [ 199.765493][ T30] audit: type=1326 audit(1758239936.428:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 199.865556][ T30] audit: type=1326 audit(1758239936.428:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 199.959560][ T30] audit: type=1326 audit(1758239936.428:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 200.117300][ T30] audit: type=1326 audit(1758239936.428:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 200.281698][ T30] audit: type=1326 audit(1758239936.428:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 200.281751][ T30] audit: type=1326 audit(1758239936.428:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9e638eba9 code=0x7ffc0000 [ 201.150283][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 201.319482][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 201.341916][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.363483][ T24] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.386854][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 201.393757][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 201.413327][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.432232][ T24] usb 2-1: config 0 descriptor?? [ 201.449254][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.600278][ T5866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.760446][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 201.775657][ T5866] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 201.808231][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.829959][ T5866] usb 5-1: config 0 has no interface number 0 [ 201.849682][ T5866] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.863395][ T5866] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.877733][ T5866] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.889596][ T5866] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.904102][ T5866] usb 5-1: config 0 interface 52 has no altsetting 0 [ 201.911595][ T5866] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 201.929740][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.952791][ T5866] usb 5-1: config 0 descriptor?? [ 202.210764][ T5866] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input8 [ 202.451475][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.485394][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.763444][ T7272] netlink: 64 bytes leftover after parsing attributes in process `syz.4.330'. [ 203.710579][ T7219] Set syz1 is full, maxelem 65536 reached [ 204.154790][ T7279] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.244314][ T5953] usb 2-1: USB disconnect, device number 21 [ 204.910427][ T5866] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 205.003226][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.028127][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.089384][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.160617][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.183964][ T5866] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 205.215859][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.260938][ T5866] usb 3-1: config 0 descriptor?? [ 205.450359][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 205.642308][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.682033][ T5940] usb 5-1: USB disconnect, device number 19 [ 205.730248][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.750229][ T10] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 205.769940][ T5866] uclogic 0003:5543:0042.0009: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 205.791300][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.826574][ T10] usb 2-1: config 0 descriptor?? [ 205.935127][ T5866] usb 3-1: USB disconnect, device number 28 [ 206.114635][ T7320] fido_id[7320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 206.365595][ T7311] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.449088][ T10] hid-alps 0003:044E:1215.000A: unknown main item tag 0x1 [ 206.461619][ T10] hid-alps 0003:044E:1215.000A: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 206.728924][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.744387][ T24] usb 2-1: USB disconnect, device number 22 [ 206.758037][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.347149][ T7356] tipc: Enabling of bearer rejected, failed to enable media [ 207.355867][ T7352] tipc: Enabling of bearer rejected, failed to enable media [ 207.630404][ T5926] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.852505][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 207.873761][ T5926] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 207.885622][ T5926] usb 5-1: config 0 has no interface number 0 [ 207.950081][ T5926] usb 5-1: too many endpoints for config 0 interface 98 altsetting 142: 215, using maximum allowed: 30 [ 208.044996][ T5926] usb 5-1: config 0 interface 98 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 215 [ 208.059992][ T7365] veth0_to_bridge: entered promiscuous mode [ 208.140976][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 208.158610][ T7365] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 208.172120][ T5926] usb 5-1: config 0 interface 98 has no altsetting 0 [ 208.189585][ T5926] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.d5 [ 208.199319][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.229272][ T5926] usb 5-1: Product: syz [ 208.451392][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 208.469415][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.483217][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.504496][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.518110][ T5926] usb 5-1: Manufacturer: syz [ 208.525564][ T5926] usb 5-1: SerialNumber: syz [ 208.538056][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.570519][ T5926] usb 5-1: config 0 descriptor?? [ 208.598256][ T10] usb 2-1: config 0 descriptor?? [ 208.684863][ T10] hub 2-1:0.0: USB hub found [ 208.976939][ T10] hub 2-1:0.0: 1 port detected [ 209.160356][ T5940] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 209.355042][ T5940] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 209.375210][ T5926] dvb_usb_dtv5100 5-1:0.98: probe with driver dvb_usb_dtv5100 failed with error -71 [ 209.405400][ T5940] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 209.445030][ T5926] usb 5-1: USB disconnect, device number 20 [ 209.451060][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.495253][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 209.511118][ T5940] usb 3-1: config 0 has no interface number 0 [ 209.537719][ T5940] usb 3-1: config 0 interface 6 has no altsetting 1 [ 209.559456][ T5940] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=2b.ac [ 209.571661][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.594677][ T5939] hub 2-1:0.0: activate --> -90 [ 209.612517][ T5940] usb 3-1: config 0 descriptor?? [ 209.834832][ T5940] usb 3-1: USB disconnect, device number 29 [ 209.870310][ T5926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.007134][ T10] usb 2-1: USB disconnect, device number 23 [ 210.013368][ T5939] usb 2-1-port1: config error [ 210.061012][ T5926] usb 5-1: device descriptor read/64, error -71 [ 210.300252][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 210.430396][ T5926] usb 5-1: device descriptor read/64, error -71 [ 210.543745][ T5926] usb usb5-port1: attempt power cycle [ 210.666200][ T43] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 210.832140][ T43] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 210.845298][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.864588][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 210.900483][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.908033][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.917972][ T43] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 210.926458][ T43] usb 3-1: Manufacturer: syz [ 210.931107][ T43] usb 3-1: SerialNumber: syz [ 210.971817][ T5926] usb 5-1: device descriptor read/8, error -71 [ 211.166631][ T43] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 211.189386][ T43] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 211.220549][ T5926] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 211.229940][ T43] usb 3-1: USB disconnect, device number 30 [ 211.251245][ T5926] usb 5-1: device descriptor read/8, error -71 [ 211.390865][ T5926] usb usb5-port1: unable to enumerate USB device [ 212.832176][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 213.042676][ T7421] netlink: 'syz.4.372': attribute type 16 has an invalid length. [ 213.052945][ T7421] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 213.062217][ T7421] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.372'. [ 213.550466][ T7435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.573501][ T7435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.608422][ T7435] gre1: entered promiscuous mode [ 213.694124][ T7435] gre1: entered allmulticast mode [ 214.392708][ T7442] syzkaller0: entered promiscuous mode [ 214.398389][ T7442] syzkaller0: entered allmulticast mode [ 215.123633][ T7447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 215.550966][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 215.720439][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 215.795992][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.821779][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.835783][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.849579][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.866589][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.876435][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.101601][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 216.112841][ T10] usbtmc 5-1:16.0: can't read capabilities [ 216.306160][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.323380][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.365163][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.411630][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.456020][ T10] usb 5-1: USB disconnect, device number 25 [ 216.940413][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 217.122959][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 217.136202][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 217.150782][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 217.175844][ T10] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.286126][ T10] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 217.309638][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.327564][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 217.344583][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.356184][ T10] usb 5-1: config 0 descriptor?? [ 217.410406][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 217.574938][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 217.585518][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.596531][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.599605][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 217.613133][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.632005][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.645950][ T24] usb 3-1: Product: syz [ 217.650920][ T24] usb 3-1: Manufacturer: syz [ 217.662957][ T24] usb 3-1: SerialNumber: syz [ 217.695488][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.710754][ T10] usb 5-1: USB disconnect, device number 26 [ 217.892801][ T24] usb 3-1: 0:2 : does not exist [ 217.904317][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 217.988295][ T24] usb 3-1: USB disconnect, device number 31 [ 218.065764][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.598796][ T7481] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 218.617466][ T7482] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 218.722042][ T7489] netlink: 10 bytes leftover after parsing attributes in process `syz.3.389'. [ 219.004022][ T7501] delete_channel: no stack [ 219.486035][ T7509] random: crng reseeded on system resumption [ 219.543179][ T7511] gretap0: entered promiscuous mode [ 219.554768][ T7511] gretap0: left promiscuous mode [ 221.220261][ T5866] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 221.380297][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 221.396261][ T5866] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.405626][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.417238][ T5866] usb 2-1: Product: syz [ 221.425891][ T5866] usb 2-1: Manufacturer: syz [ 221.439974][ T5866] usb 2-1: SerialNumber: syz [ 221.464298][ T5866] usb 2-1: config 0 descriptor?? [ 221.620710][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 221.706202][ T5866] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.084621][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 222.270447][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 222.294329][ T10] usb 3-1: config 4 has an invalid interface number: 222 but max is 2 [ 222.308704][ T10] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 222.327138][ T10] usb 3-1: config 4 has an invalid interface number: 109 but max is 2 [ 222.375403][ T10] usb 3-1: config 4 has an invalid interface number: 24 but max is 2 [ 222.427467][ T10] usb 3-1: config 4 has an invalid interface number: 177 but max is 2 [ 222.459774][ T10] usb 3-1: config 4 has an invalid interface number: 132 but max is 2 [ 222.487405][ T10] usb 3-1: config 4 has 5 interfaces, different from the descriptor's value: 3 [ 222.529645][ T10] usb 3-1: config 4 has no interface number 0 [ 222.547852][ T10] usb 3-1: config 4 has no interface number 1 [ 222.556806][ T10] usb 3-1: config 4 has no interface number 2 [ 222.574678][ T10] usb 3-1: config 4 has no interface number 3 [ 222.583959][ T10] usb 3-1: config 4 has no interface number 4 [ 222.597565][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 222.616968][ T10] usb 3-1: config 4 interface 222 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 222.635596][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0xF has an invalid bInterval 110, changing to 10 [ 222.648309][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0xF has invalid wMaxPacketSize 0 [ 222.667787][ T10] usb 3-1: config 4 interface 222 altsetting 254 has a duplicate endpoint with address 0xF, skipping [ 222.710200][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 222.737831][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 222.756075][ T10] usb 3-1: config 4 interface 222 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 222.769670][ T10] usb 3-1: config 4 interface 222 altsetting 254 has a duplicate endpoint with address 0x9, skipping [ 222.788779][ T10] usb 3-1: config 4 interface 222 altsetting 254 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 222.802008][ T10] usb 3-1: config 4 interface 222 altsetting 254 has a duplicate endpoint with address 0xE, skipping [ 222.818852][ T10] usb 3-1: config 4 interface 222 altsetting 254 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 222.837970][ T10] usb 3-1: too many endpoints for config 4 interface 109 altsetting 178: 177, using maximum allowed: 30 [ 222.853904][ T5866] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.880979][ T10] usb 3-1: config 4 interface 109 altsetting 178 has a duplicate endpoint with address 0xF, skipping [ 222.894884][ T5866] usb 2-1: USB disconnect, device number 24 [ 222.907711][ T10] usb 3-1: config 4 interface 109 altsetting 178 has 1 endpoint descriptor, different from the interface descriptor's value: 177 [ 222.921578][ T10] usb 3-1: config 4 interface 24 altsetting 109 has a duplicate endpoint with address 0xD, skipping [ 222.932728][ T10] usb 3-1: config 4 interface 24 altsetting 109 has a duplicate endpoint with address 0x4, skipping [ 222.944265][ T10] usb 3-1: config 4 interface 24 altsetting 109 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 222.962339][ T10] usb 3-1: too many endpoints for config 4 interface 177 altsetting 187: 206, using maximum allowed: 30 [ 222.975357][ T10] usb 3-1: config 4 interface 177 altsetting 187 has an invalid descriptor for endpoint zero, skipping [ 222.987066][ T10] usb 3-1: config 4 interface 177 altsetting 187 endpoint 0x8 has an invalid bInterval 254, changing to 7 [ 222.998798][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0x1, skipping [ 223.013866][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0x8, skipping [ 223.025528][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0x3, skipping [ 223.036730][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0xC, skipping [ 223.047768][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0xA, skipping [ 223.058845][ T10] usb 3-1: config 4 interface 177 altsetting 187 has a duplicate endpoint with address 0xE, skipping [ 223.072310][ T10] usb 3-1: config 4 interface 177 altsetting 187 has 11 endpoint descriptors, different from the interface descriptor's value: 206 [ 223.086277][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 223.097364][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 223.108229][ T10] usb 3-1: config 4 interface 132 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 223.119200][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 223.130030][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 223.141245][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 223.152983][ T10] usb 3-1: config 4 interface 132 altsetting 8 has an endpoint descriptor with address 0x5A, changing to 0xA [ 223.175433][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 223.186473][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 223.197503][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 223.230222][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 223.246609][ T10] usb 3-1: config 4 interface 132 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 223.278442][ T10] usb 3-1: config 4 interface 132 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 223.289757][ T10] usb 3-1: config 4 interface 132 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 223.301009][ T10] usb 3-1: config 4 interface 222 has no altsetting 0 [ 223.307864][ T10] usb 3-1: config 4 interface 109 has no altsetting 0 [ 223.316609][ T10] usb 3-1: config 4 interface 24 has no altsetting 0 [ 223.323475][ T10] usb 3-1: config 4 interface 177 has no altsetting 0 [ 223.330389][ T10] usb 3-1: config 4 interface 132 has no altsetting 0 [ 223.340385][ T10] usb 3-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=b4.99 [ 223.349821][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.358026][ T10] usb 3-1: Product:  [ 223.362317][ T10] usb 3-1: Manufacturer: 奺︁䤩踭䠄뇃坧䮹陴ﬠ潓畗䊺壵鈮㡱戱蓅㰰栈䖏ڹ꺄䔔䎾錙￑礜ﺴ쑟䆓ꛤḉ䡓ၣ鬽躴⩯袈뙗仰䌱糯Ｗ⒟䎙嫽চ൙䃪㼉篠灭洦팃㼝嗃鱯嶢償戌숡很岨㇑惗喩⛅堛ꮉ騫㋥퓖䊬ﲿ꼳䭊镰섏渮ᯓ吓⛼ﮚ䚭ᇉᑻ㵷છ䫥穯䶫愈␭嚬쭯씡韌魥晙䈛毃 [ 223.395009][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.430235][ T10] usb 3-1: SerialNumber: 囝욲狸嵌펕祴坺峲毦ᄇ뀦➟ᵃ浃䭜爯㐡⒧鱼併⨵ベ÷짷㛛톆掚钍ﱸ줢꒏輻∼쒨翮࡮嶜굇ﳴ聪쥸펁窺(쏟埑냘裰킶뺍縧ᎁ᠚걿켓哟刘Ⅵ싴㢃晎Ᏺ䴍砣ؕ⽍ϕ議覺㢅ꉛ锓ꚧ㤤ᐣ✨곁ꆛ縊爓鏑䒏Ꝼ䲾퓫 [ 223.461815][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.513595][ T7529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.698459][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.708464][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.948611][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 223.948631][ T30] audit: type=1400 audit(1758239960.618:579): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7549 comm="syz.4.408" [ 223.972476][ T7557] usb usb8: usbfs: process 7557 (syz.4.408) did not claim interface 0 before use [ 224.024966][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 224.034711][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 224.055668][ T10] dvb-usb: bulk message failed: -8 (2/0) [ 224.076770][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.118325][ T10] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 224.125887][ T10] usb 3-1: media controller created [ 224.143521][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.149559][ T10] dw2102: i2c transfer failed. [ 224.155212][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.161377][ T10] dw2102: i2c transfer failed. [ 224.166701][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.172876][ T10] dw2102: i2c transfer failed. [ 224.179844][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.186823][ T10] dw2102: i2c transfer failed. [ 224.192445][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.201296][ T10] dw2102: i2c transfer failed. [ 224.206499][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 224.213051][ T10] dw2102: i2c transfer failed. [ 224.218154][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 224.257657][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.291916][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 224.298038][ T10] dw2102: command 0x51 transfer failed. [ 224.377222][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 224.384000][ T10] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 224.523589][ T10] rc_core: IR keymap rc-su3000 not found [ 224.577589][ T10] Registered IR keymap rc-empty [ 224.616685][ T10] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 224.656617][ T10] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 224.679019][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 224.687193][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 224.696397][ T10] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 224.774239][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 224.841641][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 224.859274][ T5940] dw2102: i2c transfer failed. [ 224.869659][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 224.903574][ T10] dvb-usb: bulk message failed: -8 (2/0) [ 224.951314][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.974554][ T10] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 225.034395][ T10] usb 3-1: media controller created [ 225.065610][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.075742][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 225.108721][ T10] dw2102: i2c transfer failed. [ 225.125213][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.141065][ T5940] dw2102: i2c transfer failed. [ 225.157454][ T10] dw2102: i2c transfer failed. [ 225.170043][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.178441][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 225.183864][ T10] dw2102: i2c transfer failed. [ 225.215455][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.273031][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 225.332547][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 225.346878][ T5940] dw2102: i2c transfer failed. [ 225.371540][ T10] dw2102: i2c transfer failed. [ 225.396207][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.434392][ T10] dw2102: i2c transfer failed. [ 225.449701][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 225.456134][ T10] dw2102: i2c transfer failed. [ 225.472609][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 225.510706][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 225.516545][ T5926] dw2102: i2c transfer failed. [ 225.555204][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.628270][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 225.639789][ T10] dw2102: command 0x51 transfer failed. [ 225.690446][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 225.697690][ T5926] dw2102: i2c transfer failed. [ 225.795292][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 225.829575][ T10] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 225.890466][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 225.897160][ T5926] dw2102: i2c transfer failed. [ 225.916785][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 226.038462][ T10] rc_core: IR keymap rc-su3000 not found [ 226.056834][ T10] Registered IR keymap rc-empty [ 226.064521][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 226.070841][ T5940] dw2102: i2c transfer failed. [ 226.156532][ T10] rc rc1: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 226.230357][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 226.236983][ T5940] dw2102: i2c transfer failed. [ 226.299626][ T7602] fuse: Bad value for 'user_id' [ 226.309996][ T7602] fuse: Bad value for 'user_id' [ 226.371533][ T7600] FAULT_INJECTION: forcing a failure. [ 226.371533][ T7600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 226.372058][ T10] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input11 [ 226.437396][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.1.419 Not tainted syzkaller #0 PREEMPT(full) [ 226.437416][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.437424][ T7600] Call Trace: [ 226.437429][ T7600] [ 226.437434][ T7600] dump_stack_lvl+0x189/0x250 [ 226.437453][ T7600] ? __pfx____ratelimit+0x10/0x10 [ 226.437466][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.437479][ T7600] ? __pfx__printk+0x10/0x10 [ 226.437494][ T7600] ? __might_fault+0xb0/0x130 [ 226.437517][ T7600] should_fail_ex+0x414/0x560 [ 226.437537][ T7600] _copy_from_user+0x2d/0xb0 [ 226.437553][ T7600] ___sys_sendmsg+0x158/0x2a0 [ 226.437569][ T7600] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.437604][ T7600] ? __fget_files+0x2a/0x420 [ 226.437615][ T7600] ? __fget_files+0x3a0/0x420 [ 226.437631][ T7600] __x64_sys_sendmsg+0x19b/0x260 [ 226.437646][ T7600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.437666][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 226.437680][ T7600] ? rcu_is_watching+0x15/0xb0 [ 226.437695][ T7600] ? do_syscall_64+0xbe/0x3b0 [ 226.437710][ T7600] do_syscall_64+0xfa/0x3b0 [ 226.437721][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.437735][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.437749][ T7600] ? clear_bhb_loop+0x60/0xb0 [ 226.437763][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.437773][ T7600] RIP: 0033:0x7ff57af8eba9 [ 226.437784][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.437794][ T7600] RSP: 002b:00007ff57bd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.437808][ T7600] RAX: ffffffffffffffda RBX: 00007ff57b1d5fa0 RCX: 00007ff57af8eba9 [ 226.437816][ T7600] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000003 [ 226.437824][ T7600] RBP: 00007ff57bd82090 R08: 0000000000000000 R09: 0000000000000000 [ 226.437831][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.437838][ T7600] R13: 00007ff57b1d6038 R14: 00007ff57b1d5fa0 R15: 00007ff57b2ffa28 [ 226.437855][ T7600] [ 226.705686][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 226.928789][ T5940] dw2102: i2c transfer failed. [ 226.977877][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 227.044662][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 227.054765][ T10] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 227.075428][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 227.092050][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 227.103010][ T10] dvb-usb: bulk message failed: -8 (2/0) [ 227.120758][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.126468][ T5940] dw2102: i2c transfer failed. [ 227.134366][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.149711][ T10] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 227.165184][ T10] usb 3-1: media controller created [ 227.180361][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.190578][ T10] dw2102: i2c transfer failed. [ 227.210721][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.216480][ T5940] dw2102: i2c transfer failed. [ 227.242260][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.265894][ T10] dw2102: i2c transfer failed. [ 227.280264][ T1211] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 227.282709][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.297135][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 227.306049][ T5926] dw2102: i2c transfer failed. [ 227.382019][ T10] dw2102: i2c transfer failed. [ 227.410358][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 227.423764][ T5926] dw2102: i2c transfer failed. [ 227.430298][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.446310][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.453870][ T10] dw2102: i2c transfer failed. [ 227.476234][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.482327][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 227.488255][ T5926] dw2102: i2c transfer failed. [ 227.502723][ T10] dw2102: i2c transfer failed. [ 227.511595][ T1211] usb 2-1: device descriptor read/64, error -71 [ 227.519357][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 227.550418][ T10] dw2102: i2c transfer failed. [ 227.555208][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 227.561966][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.601134][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.618646][ T5940] dw2102: i2c transfer failed. [ 227.647068][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.660341][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.666104][ T5940] dw2102: i2c transfer failed. [ 227.693825][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 227.703891][ T10] dw2102: command 0x51 transfer failed. [ 227.750390][ T1211] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 227.765157][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 227.790289][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.796226][ T10] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 227.806460][ T5940] dw2102: i2c transfer failed. [ 227.840397][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 227.844660][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.846181][ T5940] dw2102: i2c transfer failed. [ 227.961143][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.980304][ T1211] usb 2-1: device descriptor read/64, error -71 [ 227.980334][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.016301][ T5926] dw2102: i2c transfer failed. [ 228.030419][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.050840][ T5940] dw2102: i2c transfer failed. [ 228.070235][ T10] rc_core: IR keymap rc-su3000 not found [ 228.076844][ T10] Registered IR keymap rc-empty [ 228.090870][ T1211] usb usb2-port1: attempt power cycle [ 228.091341][ T10] rc rc2: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc2 [ 228.142531][ T10] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc2/input12 [ 228.188738][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 228.212021][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.221507][ T5926] dw2102: i2c transfer failed. [ 228.226539][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 228.236189][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.242429][ T10] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 228.250570][ T5926] dw2102: i2c transfer failed. [ 228.259516][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 228.266921][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 228.274775][ T10] dvb-usb: bulk message failed: -8 (2/0) [ 228.285378][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.298273][ T10] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 228.305642][ T10] usb 3-1: media controller created [ 228.315331][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.322063][ T10] dw2102: i2c transfer failed. [ 228.326966][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.337849][ T10] dw2102: i2c transfer failed. [ 228.343070][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.390611][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.401817][ T5926] dw2102: i2c transfer failed. [ 228.409991][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.419617][ T5926] dw2102: i2c transfer failed. [ 228.425779][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.433024][ T5940] dw2102: i2c transfer failed. [ 228.439661][ T10] dw2102: i2c transfer failed. [ 228.448056][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.454381][ T10] dw2102: i2c transfer failed. [ 228.460400][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.467162][ T10] dw2102: i2c transfer failed. [ 228.490521][ T1211] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 228.561043][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.573831][ T5940] dw2102: i2c transfer failed. [ 228.576919][ T1211] usb 2-1: device descriptor read/8, error -71 [ 228.589184][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 228.599521][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.615639][ T10] dw2102: i2c transfer failed. [ 228.621060][ T5940] dw2102: i2c transfer failed. [ 228.628066][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 228.646878][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.665490][ T5940] dw2102: i2c transfer failed. [ 228.742767][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.751441][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.767762][ T5940] dw2102: i2c transfer failed. [ 228.800616][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.808026][ T5940] dw2102: i2c transfer failed. [ 228.816929][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 228.823343][ T10] dw2102: command 0x51 transfer failed. [ 228.850305][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 228.856345][ T5940] dw2102: i2c transfer failed. [ 228.886063][ T1211] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 228.930321][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 228.947753][ T5926] dw2102: i2c transfer failed. [ 228.974308][ T7634] bond_slave_1: mtu less than device minimum [ 229.009547][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.016989][ T5866] dw2102: i2c transfer failed. [ 229.035245][ T1211] usb 2-1: device descriptor read/8, error -71 [ 229.111482][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.119371][ T5866] dw2102: i2c transfer failed. [ 229.156402][ T1211] usb usb2-port1: unable to enumerate USB device [ 229.187406][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.206533][ T5866] dw2102: i2c transfer failed. [ 229.241750][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 229.259539][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.271721][ T10] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 229.279928][ T5866] dw2102: i2c transfer failed. [ 229.285648][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 229.291615][ T5940] dw2102: i2c transfer failed. [ 229.410644][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.418770][ T5866] dw2102: i2c transfer failed. [ 229.458222][ T10] rc_core: IR keymap rc-su3000 not found [ 229.464287][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.493678][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 229.843036][ T10] Registered IR keymap rc-empty [ 229.851124][ T5866] dw2102: i2c transfer failed. [ 229.876417][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 229.883598][ T10] rc rc3: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc3 [ 229.900407][ T5866] dw2102: i2c transfer failed. [ 229.917139][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 229.922886][ T5940] dw2102: i2c transfer failed. [ 229.930605][ T10] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc3/input13 [ 229.962428][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 229.969656][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 229.975970][ T10] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 230.021976][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.028824][ T10] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 230.050296][ T5866] dw2102: i2c transfer failed. [ 230.062711][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 230.079589][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 230.089380][ T5940] dw2102: i2c transfer failed. [ 230.097316][ T10] dvb-usb: bulk message failed: -8 (2/0) [ 230.103384][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.131602][ T5866] dw2102: i2c transfer failed. [ 230.161961][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.168988][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.199138][ T5866] dw2102: i2c transfer failed. [ 230.230997][ T10] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 230.240432][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 230.255059][ T5940] dw2102: i2c transfer failed. [ 230.260324][ T10] usb 3-1: media controller created [ 230.261999][ T7641] FAULT_INJECTION: forcing a failure. [ 230.261999][ T7641] name failslab, interval 1, probability 0, space 0, times 1 [ 230.286408][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.294264][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 230.318925][ T5940] dw2102: i2c transfer failed. [ 230.320496][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(full) [ 230.320518][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.320528][ T7641] Call Trace: [ 230.320535][ T7641] [ 230.320543][ T7641] dump_stack_lvl+0x189/0x250 [ 230.320570][ T7641] ? __pfx____ratelimit+0x10/0x10 [ 230.320590][ T7641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.320612][ T7641] ? __pfx__printk+0x10/0x10 [ 230.320642][ T7641] ? __pfx___might_resched+0x10/0x10 [ 230.320682][ T7641] should_fail_ex+0x414/0x560 [ 230.320713][ T7641] should_failslab+0xa8/0x100 [ 230.320747][ T7641] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 230.320772][ T7641] ? __alloc_skb+0x112/0x2d0 [ 230.320797][ T7641] __alloc_skb+0x112/0x2d0 [ 230.320821][ T7641] netlink_sendmsg+0x5c6/0xb30 [ 230.320851][ T7641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.320873][ T7641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 230.320893][ T7641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.320913][ T7641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.320932][ T7641] __sock_sendmsg+0x219/0x270 [ 230.320962][ T7641] ____sys_sendmsg+0x505/0x830 [ 230.320989][ T7641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.321020][ T7641] ? import_iovec+0x74/0xa0 [ 230.321047][ T7641] ___sys_sendmsg+0x21f/0x2a0 [ 230.321071][ T7641] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.321128][ T7641] ? __fget_files+0x2a/0x420 [ 230.321144][ T7641] ? __fget_files+0x3a0/0x420 [ 230.321171][ T7641] __x64_sys_sendmsg+0x19b/0x260 [ 230.321195][ T7641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.321227][ T7641] ? __pfx_ksys_write+0x10/0x10 [ 230.321247][ T7641] ? rcu_is_watching+0x15/0xb0 [ 230.321270][ T7641] ? do_syscall_64+0xbe/0x3b0 [ 230.321293][ T7641] do_syscall_64+0xfa/0x3b0 [ 230.321311][ T7641] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.321328][ T7641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.321346][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 230.321368][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.321385][ T7641] RIP: 0033:0x7ff57af8eba9 [ 230.321401][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.321417][ T7641] RSP: 002b:00007ff57bd82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.321437][ T7641] RAX: ffffffffffffffda RBX: 00007ff57b1d5fa0 RCX: 00007ff57af8eba9 [ 230.321450][ T7641] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000003 [ 230.321462][ T7641] RBP: 00007ff57bd82090 R08: 0000000000000000 R09: 0000000000000000 [ 230.321473][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.321484][ T7641] R13: 00007ff57b1d6038 R14: 00007ff57b1d5fa0 R15: 00007ff57b2ffa28 [ 230.321513][ T7641] [ 230.594040][ T10] dw2102: i2c transfer failed. [ 230.600817][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.606631][ T5866] dw2102: i2c transfer failed. [ 230.611925][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.617648][ T10] dw2102: i2c transfer failed. [ 230.622977][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.628620][ T5866] dw2102: i2c transfer failed. [ 230.633662][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.639320][ T10] dw2102: i2c transfer failed. [ 230.645248][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 230.652011][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.657674][ T10] dw2102: i2c transfer failed. [ 230.663722][ T5866] dw2102: i2c transfer failed. [ 230.669086][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.675034][ T10] dw2102: i2c transfer failed. [ 230.679901][ T10] dvb-usb: bulk message failed: -8 (6/0) [ 230.687481][ T10] dw2102: i2c transfer failed. [ 230.692353][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 230.731142][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.819687][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 230.823585][ T7639] team0 (unregistering): Port device team_slave_0 removed [ 230.844073][ T5926] dw2102: i2c transfer failed. [ 230.849482][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 230.861046][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 230.866732][ T10] dw2102: command 0x51 transfer failed. [ 230.880509][ T5926] dw2102: i2c transfer failed. [ 230.895985][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 230.917133][ T7639] team0 (unregistering): Port device team_slave_1 removed [ 230.930363][ T5926] dw2102: i2c transfer failed. [ 231.001645][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.017921][ T5926] dw2102: i2c transfer failed. [ 231.024171][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'. [ 231.038292][ T7639] team0 (unregistering): Port device bond0 removed [ 231.050293][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 231.073985][ T5866] dw2102: i2c transfer failed. [ 231.104563][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.120345][ T5926] dw2102: i2c transfer failed. [ 231.227092][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 231.244285][ T5940] dw2102: i2c transfer failed. [ 231.293141][ T10] DVB: Unable to find symbol m88rs2000_attach() [ 231.299436][ T10] dvb-usb: no frontend was attached by 'TeVii S421 PCI' [ 231.307779][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 231.314039][ T5866] dw2102: i2c transfer failed. [ 231.320461][ T5866] dvb-usb: bulk message failed: -8 (1/0) [ 231.326222][ T5866] dw2102: i2c transfer failed. [ 231.370357][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.385076][ T5926] dw2102: i2c transfer failed. [ 231.613555][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.641997][ T5926] dw2102: i2c transfer failed. [ 231.661387][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.667101][ T5926] dw2102: i2c transfer failed. [ 231.771081][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.777609][ T5926] dw2102: i2c transfer failed. [ 231.782582][ T10] rc_core: IR keymap rc-su3000 not found [ 231.788358][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 231.794195][ T10] Registered IR keymap rc-empty [ 231.799121][ T5940] dw2102: i2c transfer failed. [ 231.804660][ T10] rc rc4: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc4 [ 231.815860][ T10] input: TeVii S421 PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc4/input14 [ 231.825228][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 231.845232][ T5926] dw2102: i2c transfer failed. [ 231.867680][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 231.878821][ T5940] dw2102: i2c transfer failed. [ 231.893215][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 231.960578][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 232.007238][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 232.013478][ T5926] dw2102: i2c transfer failed. [ 232.029821][ T5926] dvb-usb: bulk message failed: -8 (1/0) [ 232.041858][ T10] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 232.058422][ T5926] dw2102: i2c transfer failed. [ 232.063564][ T5940] dvb-usb: bulk message failed: -8 (1/0) [ 232.073908][ T5940] dw2102: i2c transfer failed. [ 232.089799][ T10] usb 3-1: USB disconnect, device number 32 [ 232.162044][ T5926] dvb-usb: bulk message failed: -19 (1/0) [ 232.207673][ T5926] dw2102: i2c transfer failed. [ 232.212770][ T5940] dvb-usb: bulk message failed: -19 (1/0) [ 232.244235][ T7679] program syz.3.441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.257785][ T5940] dw2102: i2c transfer failed. [ 232.268723][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.442'. [ 232.360358][ T5926] dvb-usb: bulk message failed: -19 (1/0) [ 232.366197][ T5926] dw2102: i2c transfer failed. [ 232.385571][ T5866] dvb-usb: bulk message failed: -19 (1/0) [ 232.400839][ T5866] dw2102: i2c transfer failed. [ 232.420406][ T5866] dvb-usb: bulk message failed: -19 (1/0) [ 232.429599][ T5866] dw2102: i2c transfer failed. [ 232.438412][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.561451][ T5866] dvb-usb: bulk message failed: -19 (1/0) [ 232.567227][ T5866] dw2102: i2c transfer failed. [ 232.572173][ T5926] dvb-usb: bulk message failed: -19 (1/0) [ 232.577999][ T5926] dw2102: i2c transfer failed. [ 232.583064][ T5940] dvb-usb: bulk message failed: -19 (1/0) [ 232.588827][ T5940] dw2102: i2c transfer failed. [ 232.643767][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 232.702841][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.746168][ T5939] dw2102: i2c transfer failed. [ 232.931773][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 232.960196][ T5939] dw2102: i2c transfer failed. [ 232.980007][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 232.992313][ T10] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 233.041916][ T5939] dw2102: i2c transfer failed. [ 233.168382][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.186599][ T5939] dw2102: i2c transfer failed. [ 233.192004][ T5940] dvb-usb: bulk message failed: -19 (1/0) [ 233.197855][ T5940] dw2102: i2c transfer failed. [ 233.204404][ T5866] dvb-usb: bulk message failed: -19 (1/0) [ 233.269495][ T5866] dw2102: i2c transfer failed. [ 233.441636][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.450969][ T5939] dw2102: i2c transfer failed. [ 233.462910][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.493478][ T10] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 233.503741][ T5939] dw2102: i2c transfer failed. [ 233.530657][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.613199][ T5939] dw2102: i2c transfer failed. [ 233.633478][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.639835][ T5939] dw2102: i2c transfer failed. [ 233.759775][ T10] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 233.780327][ T5939] dvb-usb: bulk message failed: -19 (1/0) [ 233.786625][ T5939] dw2102: i2c transfer failed. [ 233.843571][ T10] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 234.022452][ T10] dvb-usb: TeVii S421 PCI successfully deinitialized and disconnected. [ 234.738259][ T7705] tipc: Enabled bearer , priority 22 [ 235.005087][ T5953] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 235.173449][ T5953] usb 2-1: not running at top speed; connect to a high speed hub [ 235.183226][ T5953] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.197995][ T5953] usb 2-1: config 1 interface 0 has no altsetting 0 [ 235.238926][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.254738][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.272194][ T5953] usb 2-1: Product: syz [ 235.292138][ T5953] usb 2-1: Manufacturer: syz [ 235.301590][ T5953] usb 2-1: SerialNumber: syz [ 235.371422][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 235.540251][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 235.589212][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 235.625824][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.663502][ T10] usb 3-1: config 0 descriptor?? [ 235.738596][ T5953] usb 2-1: USB disconnect, device number 29 [ 235.851603][ T1211] tipc: Node number set to 1708466827 [ 236.208526][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 236.327718][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 236.342999][ T10] asix 3-1:0.0: probe with driver asix failed with error -32 [ 236.517459][ T7716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.939509][ T7740] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 237.116536][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.960420][ T43] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 238.065928][ T5939] usb 3-1: USB disconnect, device number 33 [ 238.126946][ T43] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 238.138185][ T43] usb 5-1: config 0 has no interface number 0 [ 238.152794][ T43] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 238.190227][ T43] usb 5-1: config 0 interface 128 has no altsetting 0 [ 238.225129][ T43] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 238.252060][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.269296][ T43] usb 5-1: Product: syz [ 238.289097][ T43] usb 5-1: Manufacturer: syz [ 238.303472][ T43] usb 5-1: SerialNumber: syz [ 238.322354][ T43] usb 5-1: config 0 descriptor?? [ 238.339233][ T43] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 238.347716][ T43] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 238.358540][ T43] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 238.577455][ T10] usb 5-1: USB disconnect, device number 27 [ 239.024469][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 239.221099][ T7773] program syz.1.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.500263][ T5953] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 239.663157][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 239.769035][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.811533][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.870225][ T5953] usb 2-1: Product: syz [ 239.930254][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 239.970445][ T5953] usb 2-1: Manufacturer: syz [ 239.975412][ T5953] usb 2-1: SerialNumber: syz [ 239.986190][ T5953] usb 2-1: config 0 descriptor?? [ 240.125837][ T10] usb 3-1: config index 0 descriptor too short (expected 256, got 18) [ 240.190284][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.328221][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.373856][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 240.394141][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.404292][ T10] usb 3-1: Product: syz [ 240.408495][ T10] usb 3-1: Manufacturer: syz [ 240.415577][ T10] usb 3-1: SerialNumber: syz [ 240.444665][ T10] usb 3-1: config 0 descriptor?? [ 240.674149][ T5953] usb 3-1: USB disconnect, device number 34 [ 240.699462][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.467'. [ 241.220573][ T5953] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 241.452621][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.470343][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.536465][ T5953] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 241.559573][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.588373][ T5953] usb 3-1: config 0 descriptor?? [ 241.611067][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 242.019523][ T43] usb 2-1: USB disconnect, device number 30 [ 242.085983][ T5953] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 242.229109][ T7821] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 242.804879][ T5953] logitech 0003:046D:C29C.000B: no inputs found [ 242.856110][ T5953] usb 3-1: USB disconnect, device number 35 [ 242.930391][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 243.158063][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.420450][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 243.550276][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.685613][ T10] usb usb5-port1: attempt power cycle [ 244.276032][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 244.335127][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.692898][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 244.898076][ T10] usb 5-1: device descriptor read/8, error -71 [ 245.010990][ T10] usb usb5-port1: unable to enumerate USB device [ 245.778727][ T7871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 246.879299][ T7897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.901577][ T7897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.957502][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.104255][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 252.721926][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 252.736473][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.765462][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 252.870692][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.886174][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.915927][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.939233][ T43] usb 2-1: config 0 descriptor?? [ 252.957272][ T7959] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 252.967519][ T7969] loop2: detected capacity change from 0 to 7 [ 252.967915][ T43] hub 2-1:0.0: USB hub found [ 253.003332][ T7969] Dev loop2: unable to read RDB block 7 [ 253.110314][ T7969] loop2: AHDI p1 p2 p3 [ 253.155324][ T7969] loop2: partition table partially beyond EOD, truncated [ 253.163768][ T7969] loop2: p1 start 1601398130 is beyond EOD, truncated [ 253.167779][ T43] hub 2-1:0.0: 2 ports detected [ 253.304073][ T7969] loop2: p2 start 1702059890 is beyond EOD, truncated [ 254.678632][ T43] usb 2-1: USB disconnect, device number 31 [ 254.803743][ T7963] syz.2.504 (7963) used greatest stack depth: 18232 bytes left [ 255.155253][ T7982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.515'. [ 255.804654][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811677][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.092687][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 256.130281][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 256.280890][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 256.289479][ T43] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.297302][ T8003] loop2: detected capacity change from 0 to 7 [ 256.312631][ T7681] Dev loop2: unable to read RDB block 7 [ 256.318410][ T7681] loop2: AHDI p1 p2 p3 [ 256.319746][ T43] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.327577][ T7681] loop2: partition table partially beyond EOD, truncated [ 256.369511][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.386578][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 256.394377][ T7681] loop2: p1 start 1601398130 is beyond EOD, truncated [ 256.403088][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.417466][ T43] usb 2-1: config 0 descriptor?? [ 256.426423][ T7681] loop2: p2 start 1702059890 is beyond EOD, truncated [ 256.461295][ T8003] Dev loop2: unable to read RDB block 7 [ 256.467640][ T8003] loop2: AHDI p1 p2 p3 [ 256.501448][ T8003] loop2: partition table partially beyond EOD, truncated [ 256.509668][ T8003] loop2: p1 start 1601398130 is beyond EOD, truncated [ 256.519252][ T8003] loop2: p2 start 1702059890 is beyond EOD, truncated [ 256.797140][ T30] audit: type=1326 audit(1758239993.468:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.821281][ T30] audit: type=1326 audit(1758239993.468:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.844129][ T30] audit: type=1326 audit(1758239993.468:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.868957][ T30] audit: type=1326 audit(1758239993.468:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.892706][ T30] audit: type=1326 audit(1758239993.468:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.915462][ T30] audit: type=1326 audit(1758239993.468:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 256.938898][ T30] audit: type=1326 audit(1758239993.468:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5885b8eba9 code=0x7ffc0000 [ 257.110806][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 257.116811][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.126608][ T43] usb 2-1: USB disconnect, device number 32 [ 259.291441][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 259.470451][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 259.484817][ T10] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 259.493617][ T10] usb 2-1: config 0 has no interface number 0 [ 259.552993][ T10] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 259.565242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.619735][ T10] usb 2-1: Product: syz [ 259.659048][ T10] usb 2-1: Manufacturer: syz [ 259.722454][ T10] usb 2-1: SerialNumber: syz [ 259.779864][ T10] usb 2-1: config 0 descriptor?? [ 260.065680][ T1211] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 260.107997][ T8051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.193950][ T30] audit: type=1326 audit(1758239996.868:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f118eba9 code=0x7ffc0000 [ 260.273657][ T30] audit: type=1326 audit(1758239996.868:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f118eba9 code=0x7ffc0000 [ 260.300303][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 260.313466][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.328413][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.419855][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.643612][ T30] audit: type=1326 audit(1758239996.898:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa2f118eba9 code=0x7ffc0000 [ 260.677517][ T1211] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.740895][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.851070][ T1211] usb 3-1: config 0 descriptor?? [ 261.292199][ T1211] microsoft 0003:045E:07DA.000C: item fetching failed at offset 30/34 [ 261.372135][ T1211] microsoft 0003:045E:07DA.000C: parse failed [ 261.388725][ T1211] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 261.492665][ T1211] usb 3-1: USB disconnect, device number 36 [ 261.846522][ T8047] delete_channel: no stack [ 262.005654][ T10] usb 2-1: USB disconnect, device number 33 [ 262.133019][ T8093] random: crng reseeded on system resumption [ 262.238386][ T8094] sctp: [Deprecated]: syz.4.553 (pid 8094) Use of int in maxseg socket option. [ 262.238386][ T8094] Use struct sctp_assoc_value instead [ 262.620300][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 262.796179][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 262.808593][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.839084][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.891023][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.942689][ T10] usb 3-1: config 0 descriptor?? [ 262.954042][ T10] hub 3-1:0.0: USB hub found [ 262.985776][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.030777][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.053693][ T8115] tipc: Enabling of bearer rejected, failed to enable media [ 263.073574][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.084055][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.151297][ T10] hub 3-1:0.0: 1 port detected [ 264.476460][ T10] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 264.487971][ T10] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 264.777938][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 264.797298][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 265.895983][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 265.896003][ T30] audit: type=1326 audit(1758240002.568:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 265.947681][ T1211] usb 3-1: USB disconnect, device number 37 [ 266.011996][ T30] audit: type=1326 audit(1758240002.568:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.115188][ T30] audit: type=1326 audit(1758240002.568:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.195895][ T30] audit: type=1326 audit(1758240002.568:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.273829][ T30] audit: type=1326 audit(1758240002.568:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.328225][ T30] audit: type=1326 audit(1758240002.568:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.425059][ T30] audit: type=1326 audit(1758240002.568:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.549106][ T30] audit: type=1326 audit(1758240002.568:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.624653][ T30] audit: type=1326 audit(1758240002.568:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 266.741154][ T30] audit: type=1326 audit(1758240002.568:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57af8eba9 code=0x7ffc0000 [ 267.481082][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.579'. [ 267.612932][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 267.670545][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 267.710061][ T8172] netlink: 76 bytes leftover after parsing attributes in process `syz.4.579'. [ 267.749088][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 267.772023][ T8175] netlink: 'syz.1.580': attribute type 3 has an invalid length. [ 267.793747][ T8175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.580'. [ 267.837379][ T8175] netlink: 'syz.1.580': attribute type 3 has an invalid length. [ 267.888811][ T8175] netlink: 156 bytes leftover after parsing attributes in process `syz.1.580'. [ 268.210699][ T1211] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 268.241556][ T8184] loop2: detected capacity change from 0 to 7 [ 268.273632][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 268.391757][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 268.405210][ T8184] Dev loop2: unable to read RDB block 7 [ 268.516051][ T8184] loop2: AHDI p1 p2 p3 [ 268.524978][ T8184] loop2: partition table partially beyond EOD, truncated [ 268.534891][ T8184] loop2: p1 start 1601398130 is beyond EOD, truncated [ 268.590755][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 268.677910][ T8184] loop2: p2 start 1702059890 is beyond EOD, truncated [ 268.688000][ T1211] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.781388][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.837525][ T1211] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 268.971119][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 269.010336][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.064217][ T1211] usb 2-1: Product: syz [ 269.068448][ T1211] usb 2-1: Manufacturer: syz [ 269.105296][ T1211] usb 2-1: SerialNumber: syz [ 269.148552][ T1211] usb 2-1: config 0 descriptor?? [ 269.180566][ T1211] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 269.399777][ T1211] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 269.438669][ T1211] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 269.519174][ T1211] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 269.584289][ T8175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.670644][ T8175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.695938][ T1211] usb 2-1: USB disconnect, device number 34 [ 269.722216][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 271.116832][ T8227] loop2: detected capacity change from 0 to 7 [ 271.154977][ T8227] Dev loop2: unable to read RDB block 7 [ 271.206833][ T8227] loop2: AHDI p1 p2 p3 [ 271.257354][ T8227] loop2: partition table partially beyond EOD, truncated [ 271.270471][ T8227] loop2: p1 start 1601398130 is beyond EOD, truncated [ 271.308248][ T8227] loop2: p2 start 1702059890 is beyond EOD, truncated [ 271.768716][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.873960][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.340261][ T1211] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 272.531237][ T1211] usb 3-1: Using ep0 maxpacket: 8 [ 272.544975][ T1211] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 272.558424][ T1211] usb 3-1: config 11 has no interface number 0 [ 272.590240][ T1211] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.640295][ T1211] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.675346][ T1211] usb 3-1: config 11 interface 95 has no altsetting 0 [ 272.715514][ T1211] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 272.760720][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.805790][ T1211] usb 3-1: Product: syz [ 272.822540][ T1211] usb 3-1: Manufacturer: syz [ 272.827195][ T1211] usb 3-1: SerialNumber: syz [ 273.076795][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.163334][ T8244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.599'. [ 273.172490][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 273.203162][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.214062][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.279520][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.301995][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.357995][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.374952][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.390070][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.411388][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.422787][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.482805][ T1211] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 273.503764][ T1211] usb 3-1: USB disconnect, device number 38 [ 273.820527][ T5953] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 273.996126][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.061120][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.089746][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.089792][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 274.127376][ T5953] usb 2-1: Product: syz [ 274.135539][ T5953] usb 2-1: Manufacturer: syz [ 274.141088][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.156816][ T5953] usb 2-1: SerialNumber: syz [ 274.236027][ T5953] usb 2-1: config 0 descriptor?? [ 274.482218][ T5953] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 274.605456][ T5953] usb 2-1: USB disconnect, device number 35 [ 275.120461][ T1211] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 275.150507][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 275.441904][ T8275] bond_slave_0: entered promiscuous mode [ 275.447936][ T8275] bond_slave_1: entered promiscuous mode [ 275.454201][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 275.464568][ T1211] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.474999][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 275.487126][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.518113][ T8275] macsec1: entered promiscuous mode [ 275.531388][ T8275] bond0: entered promiscuous mode [ 275.659305][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.670808][ T8275] bond0: left promiscuous mode [ 275.676791][ T8275] bond_slave_0: left promiscuous mode [ 275.682345][ T8275] bond_slave_1: left promiscuous mode [ 275.735296][ T1211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.767780][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 275.780376][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.788546][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.804110][ T24] usb 5-1: Product: syz [ 275.811919][ T5953] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 275.827634][ T24] usb 5-1: Manufacturer: syz [ 275.887206][ T1211] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.900799][ T24] usb 5-1: SerialNumber: syz [ 275.907207][ T1211] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.937367][ T24] usb 5-1: config 0 descriptor?? [ 275.946983][ T1211] usb 3-1: Manufacturer: syz [ 275.967670][ T1211] usb 3-1: config 0 descriptor?? [ 275.981085][ T5953] usb 2-1: config 0 has no interfaces? [ 275.996340][ T5953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.005929][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.018697][ T5953] usb 2-1: Product: syz [ 276.038020][ T5953] usb 2-1: Manufacturer: syz [ 276.074651][ T5953] usb 2-1: SerialNumber: syz [ 276.146378][ T5953] usb 2-1: config 0 descriptor?? [ 276.235406][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.245155][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.249052][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.280035][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.480757][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.509141][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.710474][ T1211] rc_core: IR keymap rc-hauppauge not found [ 276.721342][ T1211] Registered IR keymap rc-empty [ 276.730919][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.739820][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.761670][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 276.803820][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 276.839342][ T1211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 276.887722][ T1211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 276.916745][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 276.941230][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 276.976740][ T8287] binder: 8286:8287 unknown command 0 [ 276.982972][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 276.992225][ T8287] binder: 8286:8287 ioctl c0306201 200000000080 returned -22 [ 277.011202][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.062741][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.093238][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.132551][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.170330][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.201136][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.242159][ T1211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 277.283267][ T1211] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 277.301229][ T1211] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.330018][ T1211] usb 3-1: USB disconnect, device number 39 [ 277.857614][ T8302] fuse: Bad value for 'fd' [ 278.117666][ T1211] usb 5-1: USB disconnect, device number 33 [ 278.411273][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 278.437636][ T8315] input: syz0 as /devices/virtual/input/input17 [ 278.483416][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 278.483439][ T30] audit: type=1326 audit(1758240015.138:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f141fd8eba9 code=0x0 [ 278.514555][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.544549][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 279.110294][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 279.172120][ T5953] usb 2-1: USB disconnect, device number 36 [ 279.429502][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.449814][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.503125][ T10] usb 5-1: config 0 has no interfaces? [ 279.623399][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.683130][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.750445][ T5953] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 279.778359][ T10] usb 5-1: Product: syz [ 279.799777][ T10] usb 5-1: Manufacturer: syz [ 279.873235][ T10] usb 5-1: SerialNumber: syz [ 279.889713][ T10] usb 5-1: config 0 descriptor?? [ 279.892351][ T5953] usb 2-1: device descriptor read/64, error -71 [ 280.170229][ T5953] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 280.180627][ T5866] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 280.197310][ T8324] pimreg: entered allmulticast mode [ 280.263111][ T8324] pimreg: left allmulticast mode [ 280.330355][ T5953] usb 2-1: device descriptor read/64, error -71 [ 280.351230][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 280.360081][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.370453][ T5866] usb 3-1: config 0 has no interface number 0 [ 280.381146][ T5866] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 280.391227][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.440942][ T5953] usb usb2-port1: attempt power cycle [ 280.458379][ T5866] usb 3-1: Product: syz [ 280.473770][ T5866] usb 3-1: Manufacturer: syz [ 280.490506][ T5866] usb 3-1: SerialNumber: syz [ 280.499965][ T5866] usb 3-1: config 0 descriptor?? [ 280.513462][ T5866] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 280.802132][ T5953] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 280.866845][ T5953] usb 2-1: device descriptor read/8, error -71 [ 281.194289][ T5953] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 281.207532][ T5866] gspca_spca1528: reg_w err -71 [ 281.230367][ T5866] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 281.243792][ T5866] usb 3-1: USB disconnect, device number 40 [ 281.293743][ T5953] usb 2-1: device descriptor read/8, error -71 [ 281.420834][ T5953] usb usb2-port1: unable to enumerate USB device [ 281.947384][ T5953] usb 5-1: USB disconnect, device number 34 [ 282.116402][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 282.126918][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 282.930373][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 282.988820][ T5953] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 283.096270][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.109236][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 283.124329][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.153211][ T5953] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 283.165065][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.187453][ T5953] usb 2-1: Product: syz [ 283.196272][ T5953] usb 2-1: Manufacturer: syz [ 283.202110][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 283.211607][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.219621][ T24] usb 5-1: Product: syz [ 283.234676][ T24] usb 5-1: Manufacturer: syz [ 283.239290][ T24] usb 5-1: SerialNumber: syz [ 283.257159][ T5953] usb 2-1: SerialNumber: syz [ 283.263782][ T24] usb 5-1: config 0 descriptor?? [ 283.266182][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.299810][ T24] usb 5-1: ucan: probing device on interface #0 [ 283.311583][ T24] usb 5-1: ucan: invalid EP count (1) [ 283.317060][ T24] usb 5-1: ucan: probe failed; try to update the device firmware [ 283.351041][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.778694][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 285.435356][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 285.477887][ T5953] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 285.493335][ T5953] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 285.508182][ T5953] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 285.522233][ T5953] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 285.534114][ T5953] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 285.562106][ T5953] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 285.582700][ T5953] usb 2-1: USB disconnect, device number 41 [ 285.600527][ T8390] netlink: 'syz.0.640': attribute type 49 has an invalid length. [ 285.610851][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 285.686092][ T8388] hsr_slave_1 (unregistering): left promiscuous mode [ 285.853065][ T5926] usb 5-1: USB disconnect, device number 35 [ 286.259550][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.269145][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.460361][ T5926] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 286.652740][ T5926] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 286.663534][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.673783][ T5926] usb 5-1: Product: syz [ 286.678155][ T5926] usb 5-1: Manufacturer: syz [ 286.685540][ T5926] usb 5-1: SerialNumber: syz [ 287.052766][ T5926] rtl8150 5-1:1.0: couldn't reset the device [ 287.082541][ T5926] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 287.160745][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 287.189989][ T5926] usb 5-1: USB disconnect, device number 36 [ 287.199562][ T31] Not tainted syzkaller #0 [ 287.213324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.222560][ T31] task:kworker/0:0 state:D stack:21368 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 287.234933][ T31] Workqueue: usb_hub_wq hub_event [ 287.240012][ T31] Call Trace: [ 287.243738][ T31] [ 287.250658][ T31] __schedule+0x1798/0x4cc0 [ 287.255427][ T31] ? __pfx___schedule+0x10/0x10 [ 287.278012][ T31] ? schedule+0x91/0x360 [ 287.287810][ T31] schedule+0x165/0x360 [ 287.296759][ T31] schedule_timeout+0x9a/0x270 [ 287.307442][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.314839][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.342920][ T8417] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 287.366925][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.379362][ T31] ? wait_for_completion+0x267/0x5d0 [ 287.390925][ T31] wait_for_completion+0x2bf/0x5d0 [ 287.396350][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 287.402906][ T31] i2c_del_adapter+0x581/0x6e0 [ 287.408123][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 287.414300][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.419245][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 287.425090][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 287.434609][ T31] dvb_usb_device_exit+0x1be/0x350 [ 287.473094][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 287.493850][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 287.505815][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.515390][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 287.561887][ T31] cxusb_probe+0x603/0x700 [ 287.570936][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 287.594664][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 287.602195][ T31] usb_probe_interface+0x665/0xc30 [ 287.620448][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 287.626183][ T31] really_probe+0x26a/0x9e0 [ 287.630955][ T31] __driver_probe_device+0x18c/0x2f0 [ 287.636331][ T31] driver_probe_device+0x4f/0x430 [ 287.643072][ T31] __device_attach_driver+0x2ce/0x530 [ 287.648623][ T31] bus_for_each_drv+0x251/0x2e0 [ 287.653741][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 287.659937][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 287.665639][ T31] __device_attach+0x2b8/0x400 [ 287.670894][ T31] ? __pfx___device_attach+0x10/0x10 [ 287.676358][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 287.682142][ T31] bus_probe_device+0x185/0x260 [ 287.689391][ T31] device_add+0x7b6/0xb50 [ 287.695759][ T31] usb_set_configuration+0x1a87/0x20e0 [ 287.703777][ T31] usb_generic_driver_probe+0x8d/0x150 [ 287.709501][ T31] usb_probe_device+0x1c4/0x390 [ 287.716399][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 287.725463][ T31] really_probe+0x26a/0x9e0 [ 287.733319][ T31] __driver_probe_device+0x18c/0x2f0 [ 287.739023][ T31] driver_probe_device+0x4f/0x430 [ 287.746398][ T31] __device_attach_driver+0x2ce/0x530 [ 287.753778][ T31] bus_for_each_drv+0x251/0x2e0 [ 287.758937][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 287.766547][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 287.774106][ T31] __device_attach+0x2b8/0x400 [ 287.779228][ T31] ? __pfx___device_attach+0x10/0x10 [ 287.786278][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 287.795206][ T31] bus_probe_device+0x185/0x260 [ 287.803149][ T31] device_add+0x7b6/0xb50 [ 287.807783][ T31] usb_new_device+0xa39/0x16f0 [ 287.815210][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 287.822320][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.827658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.837641][ T31] hub_event+0x2958/0x4a20 [ 287.844279][ T31] ? __pfx_hub_event+0x10/0x10 [ 287.849156][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.857510][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.864327][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.871788][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.877624][ T31] process_scheduled_works+0xae1/0x17b0 [ 287.885356][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.895374][ T31] worker_thread+0x8a0/0xda0 [ 287.901366][ T31] kthread+0x70e/0x8a0 [ 287.905864][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.913148][ T31] ? __pfx_kthread+0x10/0x10 [ 287.918091][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.925693][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.933070][ T31] ? __pfx_kthread+0x10/0x10 [ 287.938005][ T31] ret_from_fork+0x436/0x7d0 [ 287.946398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.955255][ T31] ? __switch_to_asm+0x39/0x70 [ 287.961934][ T31] ? __switch_to_asm+0x33/0x70 [ 287.967793][ T31] ? __pfx_kthread+0x10/0x10 [ 287.973515][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.978441][ T31] [ 287.984260][ T31] [ 287.984260][ T31] Showing all locks held in the system: [ 288.019259][ T8417] pim6reg: entered allmulticast mode [ 288.036279][ T31] 5 locks held by kworker/0:0/9: [ 288.066117][ T31] #0: ffff8880216d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.078112][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.136778][ T31] #2: ffff888027b35198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 288.147207][ T31] #3: ffff8880343da198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 288.167057][ T31] #4: ffff8880343db160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 288.176679][ T31] 1 lock held by khungtaskd/31: [ 288.185698][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 288.203850][ T31] 4 locks held by kworker/u8:3/49: [ 288.211404][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.224977][ T31] #1: ffffc90000b97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.238119][ T31] #2: ffffffff8f52d1d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 288.251893][ T31] #3: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 288.264722][ T31] 2 locks held by getty/5624: [ 288.273803][ T31] #0: ffff888033b200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.286443][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 288.296849][ T31] 4 locks held by udevd/6012: [ 288.305332][ T31] #0: ffff8880212ec668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 288.321093][ T31] #1: ffff8880291a6088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 288.334562][ T31] #2: ffff88805826a698 (kn->active#23){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 288.346318][ T31] #3: ffff8880343da198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 288.358463][ T31] 1 lock held by syz.2.648/8415: [ 288.366470][ T31] [ 288.373998][ T31] ============================================= [ 288.373998][ T31] [ 288.393151][ T31] NMI backtrace for cpu 0 [ 288.393170][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.393191][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.393202][ T31] Call Trace: [ 288.393209][ T31] [ 288.393217][ T31] dump_stack_lvl+0x189/0x250 [ 288.393247][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.393267][ T31] ? __pfx__printk+0x10/0x10 [ 288.393303][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 288.393331][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 288.393357][ T31] ? __pfx__printk+0x10/0x10 [ 288.393384][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.393413][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 288.393440][ T31] watchdog+0xf93/0xfe0 [ 288.393469][ T31] ? watchdog+0x1de/0xfe0 [ 288.393498][ T31] kthread+0x70e/0x8a0 [ 288.393522][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.393544][ T31] ? __pfx_kthread+0x10/0x10 [ 288.393566][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.393601][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.393617][ T31] ? __pfx_kthread+0x10/0x10 [ 288.393638][ T31] ret_from_fork+0x436/0x7d0 [ 288.393657][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.393681][ T31] ? __switch_to_asm+0x39/0x70 [ 288.393701][ T31] ? __switch_to_asm+0x33/0x70 [ 288.393721][ T31] ? __pfx_kthread+0x10/0x10 [ 288.393742][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.393780][ T31] [ 288.393787][ T31] Sending NMI from CPU 0 to CPUs 1: [ 288.545079][ C1] NMI backtrace for cpu 1 [ 288.545097][ C1] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 288.545115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.545124][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 288.545150][ C1] Code: 8b 3d 64 77 fe 0b 48 89 de 5b e9 f3 ab 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 d0 a0 92 65 8b 15 88 12 e1 10 81 e2 00 01 ff 00 [ 288.545163][ C1] RSP: 0018:ffffc90003f5fa58 EFLAGS: 00000a06 [ 288.545177][ C1] RAX: ffffffff8a044519 RBX: ffffc90003f5fba0 RCX: 0000000000000040 [ 288.545189][ C1] RDX: 0000000000000004 RSI: ffffc90003f5fba0 RDI: ffff88807c8d5a00 [ 288.545200][ C1] RBP: ffffc90003f5fb08 R08: ffff888079432640 R09: 0000000000000000 [ 288.545210][ C1] R10: ffffc90003f5fbf8 R11: fffff520007ebf81 R12: ffff88807c8d5a00 [ 288.545221][ C1] R13: 1ffff920007ebf50 R14: 0000000000000040 R15: dffffc0000000000 [ 288.545233][ C1] FS: 0000555568d8e500(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 288.545245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.545256][ C1] CR2: 0000555564e2d5c8 CR3: 000000007bdfe000 CR4: 00000000003526f0 [ 288.545272][ C1] DR0: 0000000000006842 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.545281][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 288.545291][ C1] Call Trace: [ 288.545298][ C1] [ 288.545303][ C1] inet_recvmsg+0x79/0x250 [ 288.545336][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 288.545355][ C1] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.545371][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 288.545386][ C1] ? security_socket_recvmsg+0x7e/0x2e0 [ 288.545405][ C1] sock_recvmsg+0x1a8/0x270 [ 288.545428][ C1] sock_read_iter+0x231/0x2f0 [ 288.545449][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 288.545467][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 288.545493][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 288.545509][ C1] ? security_file_permission+0x75/0x290 [ 288.545532][ C1] vfs_read+0x557/0xa30 [ 288.545554][ C1] ? __pfx_vfs_read+0x10/0x10 [ 288.545575][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 288.545597][ C1] ksys_read+0x145/0x250 [ 288.545616][ C1] ? __pfx_ksys_read+0x10/0x10 [ 288.545636][ C1] ? do_syscall_64+0xbe/0x3b0 [ 288.545653][ C1] do_syscall_64+0xfa/0x3b0 [ 288.545667][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.545681][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.545696][ C1] ? clear_bhb_loop+0x60/0xb0 [ 288.545712][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.545726][ C1] RIP: 0033:0x7f244bf8d57d [ 288.545739][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d e1 af 21 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 288.545751][ C1] RSP: 002b:00007ffe31f5d658 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.545766][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f244bf8d57d [ 288.545776][ C1] RDX: 0000000000000004 RSI: 00007ffe31f5d66c RDI: 0000000000000003 [ 288.545786][ C1] RBP: 0000000000000000 R08: 000000000a371964 R09: 7fffffffffffffff [ 288.545795][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe31f5da80 [ 288.545805][ C1] R13: 0000000000000004 R14: 00007ffe31f5d66c R15: 00007ffe31f5d700 [ 288.545822][ C1] [ 288.546246][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.882026][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.891130][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.901329][ T31] Call Trace: [ 288.904615][ T31] [ 288.907545][ T31] dump_stack_lvl+0x99/0x250 [ 288.912136][ T31] ? __asan_memcpy+0x40/0x70 [ 288.916723][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.922107][ T31] ? __pfx__printk+0x10/0x10 [ 288.926802][ T31] vpanic+0x281/0x750 [ 288.930801][ T31] ? __pfx_vpanic+0x10/0x10 [ 288.937132][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 288.942679][ T31] ? preempt_schedule+0xae/0xc0 [ 288.947527][ T31] ? preempt_schedule_common+0x83/0xd0 [ 288.953250][ T31] panic+0xb9/0xc0 [ 288.956983][ T31] ? __pfx_panic+0x10/0x10 [ 288.961392][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 288.966769][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 288.972937][ T31] watchdog+0xfd2/0xfe0 [ 288.977110][ T31] ? watchdog+0x1de/0xfe0 [ 288.981443][ T31] kthread+0x70e/0x8a0 [ 288.985618][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.990335][ T31] ? __pfx_kthread+0x10/0x10 [ 288.994952][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.000160][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.005390][ T31] ? __pfx_kthread+0x10/0x10 [ 289.010067][ T31] ret_from_fork+0x436/0x7d0 [ 289.014654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 289.019789][ T31] ? __switch_to_asm+0x39/0x70 [ 289.024552][ T31] ? __switch_to_asm+0x33/0x70 [ 289.029352][ T31] ? __pfx_kthread+0x10/0x10 [ 289.033960][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.038723][ T31] [ 289.042215][ T31] Kernel Offset: disabled [ 289.046560][ T31] Rebooting in 86400 seconds..