last executing test programs: 12.150882085s ago: executing program 0 (id=2466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24048014) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)="26c19899ea38a52cc76ff1648ea13c1507601e4e70329c0c45", 0x19}], 0x1}}, {{&(0x7f0000002480)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7ff}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000024c0)="c354cd46de8144f6a0e6ebdeb59965483e55fcd99716b90ee1817f29286a0636b53833bdcf9cd3550c88028cfbc20da89307c0444edebf31c9a4f9f48e27a30fdb4b7afa619da7ffd3", 0x49}, {&(0x7f0000002540)="d76d8507530c6094bd967a3c30f6750af1a585ae061a57afbec595c6fad74cfc622d99245d7d40bd902c744c3dc20337ac2f73a5766a46224c829901e77ca51970b6faed98af22b4f0a12b2abf69d2b9c1e562de34c271f3b460a55a5e143972913b1bcc17b466200cb6ee627cbcb280b37efb2f98a6c52576cd57687e2ce2095fe817131bba45b4052e0b5f11dcde0352963d3bfe225f3b28a5", 0x9a}, {&(0x7f0000002700)="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", 0x310}], 0x3, &(0x7f0000003740)}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)="04bf98b66b3e11bb06465532210c7e70635bd0dad2ca84be7743df71daf3ecc70b8453884bac6600ab3c43e8bd1947db14916f9d8a024df3b131672c323f1337a238251f", 0x44}, {0x0}], 0x2}}], 0x4, 0x48800) shutdown(r0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0xfffffffffffffd56, &(0x7f0000000080)={0x0, 0xb, 0x7, {0x7, 0xa, "5a7da329171a9dc6897b3c141e33752022ca7ab36ff12e530dc2d9ed686f5d888301d5d10b57f44e3aa10ba2c1e6aa1a0cf5402c95f2826165dbadb776395c895ae2782e53b27cf2dff93ece63050993b128d36ee65417dbeb1826a176426c3d49824d29cf0a396c9f3a07e3655c6fa3344bfcae7e7583db029319aa28fa9977d6df831c30a3c9475ca5fe2c35abcdf503088fd4ad4a442037881814b4f2f0a8f216e67e2fde7680e57797651cc321ad6f538368d1d37842278c396f1868249f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.995312946s ago: executing program 0 (id=2472): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x823, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x811, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050f1900020a1003020c000821caa0128003020c0005031d00"], 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9.209645822s ago: executing program 3 (id=2475): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x7, 0x9, 0x0, "60fcc38e3a5817324bcbc4b5c8588d164df57f75157653c30988a48e0a1d00a6", 0x39565559}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000) 8.001503151s ago: executing program 4 (id=2484): unshare(0x66000080) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x14) socket$netlink(0x10, 0x3, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) 7.799710613s ago: executing program 3 (id=2485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x51) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0xe, {0xd, 0x4, 0x80, 0xea5}}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000000)=0x8) unshare(0x6020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x10000, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xfffbffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$apparmor_exec(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147c8a3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0f"], 0x564) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7acc23a6b6e08c6e}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9833}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2bc8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x104}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) 5.741688266s ago: executing program 0 (id=2487): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) 5.416756228s ago: executing program 3 (id=2489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x10) 5.153474647s ago: executing program 3 (id=2490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58500000000092f162aa97cac7cddf2500000000", @ANYRES32, @ANYBLOB="18430100", @ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x5, 0x80000001, 0xffff, {0x7, 0x6}, 0xb0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x50}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 5.071565439s ago: executing program 4 (id=2491): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffc, 0x2, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bond\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2810) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) close(r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, 0x4c}}, 0x48004) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x0, 0x3, 0xd59f80, 0x5, 0x2800, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0x0, 0x0, 0x1, 0x10, {0x401}, 0xce, 0x9}}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x90, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x58, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x4, 0xa8, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@feature_unit={0x9, 0x24, 0x6, 0x3, 0x5, 0x1, [0x4], 0x9a}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x5, "ab"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x3, 0x58, 0x8, "1d0019430c769adf"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x38, 0xa, 0xf8, {0x7, 0x25, 0x1, 0x81, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0xfa, 0x1, {0x7, 0x25, 0x1, 0x0, 0x6, 0xee84}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x2, 0x7, 0x20}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x80, 0x81, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0xfff9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x7, 0xd}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x6, 0xf, 0x7}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x5a, &(0x7f00000003c0)=@string={0x5a, 0x3, "6ae6967beb2f05eaee71a2b373d7278c57a5e47c1cdb1bb9e8fe5f39586c95da42d8e77b9cda4e2f7cde8b25995fce4725af4198fb3f0e5a5ecd5b624dcad5188e16c8a5889fcd1ce03e7c2e29e4991c22b997da287ebdd1"}}]}) 4.935726356s ago: executing program 1 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4.725969774s ago: executing program 1 (id=2493): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0xf1b}, {0x0}], 0x2}}, {{&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="2087c07c0d5600c49f5d8a07d9d0704c358cafe75c4f1cafb87e7d3a1f8f072a5ba838369a1d96f0ccff34ca2f8a582b7b4cb94027031279", 0x38}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000000340)="2d402c84c59bd1505e3cb1358a00ba510d28cde141f882373ad088", 0x1b}], 0x3, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)="1404b50d7be9cb2b3ed9701af463914d5e4354217f2721049167685ba3384e327707c2a1471d27e5e3285055108bb5c4da816fd2d7a618031c104c86f45d363e970cc283f3002613fbb316053d42e2618413140d683f580ce027daae65c4eca1c52a3221676886052b8b33fdd1c1c9491513b968bf6dd85c875f5f44f2490764db8603a187c7dbd47f9177f3387764cc5f5f58316beb778e9452d84d770abe40f04ff660aae126dec0d84be9b0ee4c05fe139afa9ac308b1331d0d84f224117f68853f", 0xc3}, {&(0x7f0000000740)="e7d590794c3793adfd98b7769dbfc21e79bfc53de2c182c2c568ef1bd7ac5b62e3b557c68bad6835909fc512bf6ea195ec08b024e145b3e508d0314ea34f3774b90db0ce59531a8e366b6edaccfe4a29bbb789a529ae0e417a8f780f4bbdf2c726df1d6655604327a3c0dc8a0703ac6866765277cc0009d341036515a62deb0577f8408440d4f3def38d59845138ec2fe36b0dda4bd423b5509ec7ff9f752aea1c2a01924791b060d6d733d1a668dd9047014b30dc4da84d08f0e2acd93ccbe4e9b04f8c8aa07c4aae9bc7", 0xcb}, {&(0x7f0000001840)="cd925e9d3c336edd1fa164787de8b0ec313ec9a077c3fa1762a1d813cf823ffdbcf417f2fd0a88cb7992d8fd4f9b825ba4b30f8bcceb9b0cb3c73278fe64e863f311a19fea8f2394b70cd49b438b4d5d8547f4b589ee32bc1661c0bb1bd36c06d607a6a754c63359d5721530e0551fd4971e53cc34ea887ea0e02d564d15439878b51e276556fce40d6bc5805ea0b641ad9a4c7844d44fadfea74ee37b62734880a2f964fcbedd57bc8e562432fac08cae403274265cc585a00da9605da207920f91cd22b75a22457ef43f37b503afe21b211f9c4ceead9169edebcaff924edef573ed8605762b299c85edd85e12e372517eb1e3", 0xf4}, {&(0x7f0000000840)="c09b127efeb3", 0x6}, {&(0x7f0000001940)="89525ed75f8f718357302cf4e5cce85709dbfb9ef6481495b8ce0729641eaedb1f53a632277cef864a607399dd189753b724b384cb5991e82bbe852105b376095f463bd766a06a2d83a7ffa9ddcac347bc257c8c177924756d0484df5a847c9d53e5f2d6db67af0a080011af0821d180a1d1a26aaf06f9506659643a415fbda51486bf2bb40a7a02cbd773db53e6ccba3637783da0251c39c6cfee8746c790d1185af6ae5bf9", 0xa6}], 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x120}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="50713f3b49c0cb", 0x7}], 0x1}}], 0x5, 0xc864) 4.67099183s ago: executing program 1 (id=2494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r3, @ANYBLOB="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"], 0x8c8}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4c094) ftruncate(0xffffffffffffffff, 0x200004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x8) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r10, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r10, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) execve(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 4.660619947s ago: executing program 3 (id=2495): openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5, r6}, &(0x7f0000000040)=0x20) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x8, 0x7}, {0x14, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) writev(r4, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f00000004c0)="19881bab55adf869ab46d72a8c31fc47c7b4855cc4de6869c46f66cbcaed7c8e0eab69ff229da231c0fddc2ba87042f8f622ac4d3f99b35796a4ebe3c41e69541d6c417d4cc11d4f1956f94cfc044ff5a199", 0x52}], 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 4.319816507s ago: executing program 2 (id=2496): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24048014) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)="26c19899ea38a52cc76ff1648ea13c1507601e4e70329c0c45", 0x19}], 0x1}}, {{&(0x7f0000002480)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7ff}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000024c0)="c354cd46de8144f6a0e6ebdeb59965483e55fcd99716b90ee1817f29286a0636b53833bdcf9cd3550c88028cfbc20da89307c0444edebf31c9a4f9f48e27a30fdb4b7afa619da7ffd3", 0x49}, {&(0x7f0000002540)="d76d8507530c6094bd967a3c30f6750af1a585ae061a57afbec595c6fad74cfc622d99245d7d40bd902c744c3dc20337ac2f73a5766a46224c829901e77ca51970b6faed98af22b4f0a12b2abf69d2b9c1e562de34c271f3b460a55a5e143972913b1bcc17b466200cb6ee627cbcb280b37efb2f98a6c52576cd57687e2ce2095fe817131bba45b4052e0b5f11dcde0352963d3bfe225f3b28a5", 0x9a}, {&(0x7f0000002700)="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", 0x310}], 0x3, &(0x7f0000003740)}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)="04bf98b66b3e11bb06465532210c7e70635bd0dad2ca84be7743df71daf3ecc70b8453884bac6600ab3c43e8bd1947db14916f9d8a024df3b131672c323f1337a238251f", 0x44}, {0x0}], 0x2}}], 0x4, 0x48800) shutdown(r0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0xfffffffffffffd56, &(0x7f0000000080)={0x0, 0xb, 0x7, {0x7, 0xa, "5a7da329171a9dc6897b3c141e33752022ca7ab36ff12e530dc2d9ed686f5d888301d5d10b57f44e3aa10ba2c1e6aa1a0cf5402c95f2826165dbadb776395c895ae2782e53b27cf2dff93ece63050993b128d36ee65417dbeb1826a176426c3d49824d29cf0a396c9f3a07e3655c6fa3344bfcae7e7583db029319aa28fa9977d6df831c30a3c9475ca5fe2c35abcdf503088fd4ad4a442037881814b4f2f0a8f216e67e2fde7680e57797651cc321ad6f538368d1d37842278c396f1868249f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.293840406s ago: executing program 4 (id=2497): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r3, 0x1ff) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000040000000000000100"/24], 0x18, 0x20008011}, 0x40041) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x27, 0x80000, 0x38) connect$inet6(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000180)="a97ae8", 0x3}], 0x2, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x4, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2020) 4.183479017s ago: executing program 4 (id=2498): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) read$FUSE(r1, 0x0, 0x0) (async) dup2(r1, r0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x1010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) rt_sigaction(0x3a, 0x0, 0x0, 0x8, &(0x7f0000000200)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xffff}}}}]}, 0x38}}, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000e48000/0x4000)=nil, 0x4000, 0x5}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602120000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, &(0x7f0000001a40)}) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) (async) mmap$xdp(&(0x7f0000600000/0x4000)=nil, 0x4000, 0xa, 0x8010, r7, 0x100000000) 3.406440919s ago: executing program 4 (id=2499): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x2000400c) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001900), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x400000000000000, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) mkdirat(0xffffffffffffffff, 0x0, 0xc0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000e9ff"]) 3.156195364s ago: executing program 1 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c81, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 2.557113674s ago: executing program 0 (id=2501): unshare(0x66000080) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x14) socket$netlink(0x10, 0x3, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) 2.164266977s ago: executing program 2 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f4", 0x9c, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x22, 0x0, "42c99d16bed82f36a03fdc8c947d5bcec7615222d1fe5a9a59bd90ac5abf8ce35792898dd28a379bb8a7192f4359010907c81ca13a6ef8f266d1228cff930f5506989e524d267b743f686a44296443b2"}, 0xd8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8904"]) r9 = socket$kcm(0x2, 0xa, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40090) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) r10 = accept(r1, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="0fc443ba", 0x4}], 0x1, 0x0, 0x0, 0x8004}, 0x2004c004) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000a43a57d0940464efdc511c333ca3c66c6c03c0c88a52c2587a8eec3b20a286385315a7e8e2bef0c43f13036321ced8aa6284482ccca4ee30f8f58fe3c91e3089260b14cf7f75e66fdd8b49d2fa08c21717b65f858c5238099cc1e326f2c619520a19ee2c48fee37211ac250178b265874005ce14fbec79dbd9579125d17c6fc4f3b0407d", @ANYRES16=r11, @ANYBLOB="01000000000002000040010000002800018014000400ff0200000000000000000000000000010800060011000000060001000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x440a4) 1.305392969s ago: executing program 2 (id=2503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.163249143s ago: executing program 2 (id=2504): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0xf1b}, {0x0}], 0x2}}, {{&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="2087c07c0d5600c49f5d8a07d9d0704c358cafe75c4f1cafb87e7d3a1f8f072a5ba838369a1d96f0ccff34ca2f8a582b7b4cb94027031279", 0x38}, {&(0x7f0000002a40)="c12d1dacadce1a3d8795c329f4d73d48c99035745d03b32ee7edefcc1360d72bdfe4397cb9034e6a35313428615d2925ea105070260cc1b76e6618b66b1a587442e96622c736ad034ada53831880a43144381228e3a6310ba0e8ebed0df56a05eddcec63861e5bf7d06e611573693c1f0195b3b0c399847c0033e724d46460c831e1dc0edd8c595affc5dfa1f20298118f3bbdf38a9876e33e0e8f979cb5623af68d10b8d1707bc53a899bca0aa9a92f6fbf4aa264b6636eb975ab47271261ceaa5b350975142dd87b5032f7101d4170ffa50784bdf27a2b5ad7eaec6fe83625af5e1c58375d62cfdee7a0469c1bd68aa1c9252db6e655f38aee4c2a150ba863c86b424119d280839401a5b6d06aeb8410aee328f02b4c3cec9b78dabc30f995c2a12525836a2b89e3685362ced85e8f8c6f0d28d27210dd28aa26713804dfbda1f55c3f43d6f6e85df12c59cd19d466922e97846fa60d10764e3bebd650949df7cbf8f8da029c1a6e2ee6ebb294c9e4e693d0f9b2ea9977354b4ebb433d5373e4c6613e1c266e75e48738cc40c54f27f6a67af10236ae07ba532cefdfa56a88ec6f07c214e8ca5c4ea351cf4a5ce3f5f2ad95eb102fa9c077e787a4b92d20b8bdb55090f3066263fc819ac12e9fbd147cd46c8c6521d130d46697930c645da75c1f3efbe3cb2d38b2ceb904499d6d6e983bc317b3ab4290f312d1ae8e78531fb8c4960122694aa5fa16f28dd09a3ec6a35c7a9ee893ade5f08fe270ce6c5da27dfb4d1b4878ecc849429b3d7a1abb006f9211715b0f1a12e63285021a4d5599af1b7638837bab46774540173d3738aaec2c4d87bb8f9037106004a6c7d2369593b0da445389e395a539782fc214985e2e2c4055fc8e3184075efbf94c89c0a9c91f1089fc0155cea86a74af196d633e843537884bdddddddbfc3ea3e6983992105dc94128af39f9e20dd7447084d6afc1ff97ea6946f36b443a905fc5b462d0d2df111b0a6c277a2ed9fdfb0ef64d214d7165142978836296e3a56e268f67eef559e24a18bf7cd0f6b3088a95a476ece31a12c99359ae6c46416655baacd864fba9f494882e707c1a8edcdc5738a8c2de0266fab885d8031aa55e1aa03169e821d865f0b2156c29362386f28e0fdc5d4885800a0ec2a3469f342f0b25b0406b5f8beb49cfbddff8fa8679211ef1d7f763d4492d1ed96e3535c4705522e59a01162f6d67593b132438b517d411b356474476d8cb709fc5d0301e143460bcaa5bff5452c3c0271814ec5ac0c9d2ab194d19d647e3fc0dde7d78cfdbacb4f82a0433e0747b5e41c63bcf08550bbdbaffcbc0a7e138e835bfaf471df8ad950522ce7bb9f871ed056062992b2542f48f994963a2d8c306a3e35dc67d944138616931e7aeb0823a97ed67eaceb0e63376b65e956f4be480c7c6362422a3e82f002d625beadc27b15eb5fd0f9711b1b29da1cb12909505c432efe864a233950978f066772e935a011ae8d485b4678db95d46e5bc8d64cb1183464090cdb69357ebb6397c868063d53cfa5614583878a9931ed8a622a39ef4124ed20bcc35079971108fbbf9d66b97687e684c275240f060ab3e5d90cd56fa072104b31a26e5416f56d442919221435c670f13cc5b8e4f1cbc19ee11c6add3da39fe46725ddb162844c9688f0fcb5ea75455c3b8e719e4eda3173080672f0bef78d79cd3af1dddf450927b9aec35c2cbca64e9bf4dbbc12e6451fbbb0ff4ff1e8968c0942572ccb4386268742cd5c45b728cc73a2daeae9ba0ed671e36fb601875c9642872977f6d08c6bb5eb17394bac0a944fb67146c05afee62f3d4456da4c9f937a0f6d765146d74aa23ac9f71ebac1ec1629d418b56993ed7dd43bcd2857d7eb82a238d1c204b3b3f9fd87d8b8e543cf498574c37cdd799538f5014bc84a841987baef22482f81a829bb72bcd658f6961e7a88c404134ee9221f48ef06f6c990eaa41f2725948cd16c381806b663057273a0db4f51ecc9e5ac29ca1e4e7a2074342d7813f8f871ca5da5a966bb2d33385bf937bccee1fa89eb1bd2da5ccdd891a330e09ff7eeeb9469ee7c06b1e13b18db3a8c0d0343b940954655cd4889bfa82fdf4ae776b8a64a54d7ecf1b173276c3815ef71de6025139b05728e2a3d9eb5ca3e6e1a7d9a0d3cedb99953d265344d2b93430527e38c86e9d9799a8536a08c63da9fd1a8fd42aa75a64c24bce0663255ce2eb66ff5dd11783e7b2435549729b56a3d5a3f58881ec885f7e54bfec684d69115704d27fe1ab8a84584552c4795f9881864c6530338330b601727281b7d8aa2c608fc64e0aaa17a07b5dbc4df30b957cb20431a8ab1d267cf5a9d944f14e7637fb4fb83f055b7b8e9303b2a7c024decd64a0ab574925da2672dddf3db7607bbb81155d682e3e48784fa8ba85de00bac72cecdd7ddaa1741d5496243529b16c74ff6aabbd4b4a14f4e2c88c22c7ccb399e92f26097e269b75a9b93c97afc7de8b43ca348578756cfb51aa551679e8205c751f62af6be1487cb5d037f99da443bccace4af0d053350ba484b6feef1781d61224a210b4635ad35a6572b853c714f86b2c7ee0cfe5b74e64e0d437c7f84acfafa09f62c6454358ac0eb6e211acc804527143e3efa02383bf96c9895091c00091c40c993b405dfd181206fb0874c7aced8cfc539226587624a63c6cb857cf819274fd3bf92e56b712670adb0f56a8d608099e6f7f8961e24e7a2658fc1c7103531c9bf47ea433f91a2158ee9b597c2b05317845aad975efe2f68520d5320e6ee0030e77eac9f67346b43723e6c6a846076e20cb10fc95020ec403bd44d4f35fe659b378d30ecb946048f8e34a01d9688e07fcc46341c33d59905b44dbf19f60cad351502a52d00267037e899b397c9c29633e0a4d1d9e762182aec113d0b34cbb49bc03376f3bf677c398678ba3bf42a7475f371a08c8b7a7e2016d3b50bcc26fd6b6e2851d6387697b124bfa485741ec95a2f09b769c6c3a4fe7a13eb493aaab2b1216b1cb3ab9c0e6ea0e5b0ac5f1520ffdd507d8d7f7a56c7c0ec2451ec4c67d6026fbec8b1ac1f3ac9f91153abae791d2ce527c1609fa67b17c7666f97e79fd92205c07e9df370e678ea6652ec808269b7ca008288b3e6ce5d14e34db03786a61abc9db90766154783df97f5f6efda6521922016971d103012a2f7b425b4b3916cce936788babe808f50bba0beeaf9f98b8d34e9d5e9812f0b90828ce3d093a5e46ea3e67361b38ce13a456ad2076283b7f8f72cb1faa21885d895500a98906e119acc23af30d46b8d7728045b2b76607084e4b641dbe03e55f343f3ca972ce50de5eb67e7170e47ab0341adcff8ca35c2f58f219b531bf928b341ba4cc614e450dd2e4f3513d7248854581705e78f61ce36ae7d7df3d76e5da25dde0d815f520b13861ab325c1825d0d6d63e89f0445d300bb23aeffa962a7398dbe4ea5a86f3981496d4c217b049c2293f6b4cf0bce082c0808ba8750197b81f6766bf8d14c0d6bcfd05419e4467ee4615e0c88f74bdf4d22251b51c9dc03095c801f1e3fae14b4779b87bd9dbde1181d8524b64eaa896564a19c606d24005127dbe5f0a4b94175c0748b77ff0008c138553d36f817f091f5f2d492ca159a345b2c48d2484a0254985e512d3e1456f23319c0818aad2f21641c448b81003fcab65df2c0c6adfda1719e0c466b7e72f610da8cab06e92b41f21f3d702cc2855a1d37aa7d2def3868228f480b9b0482dc4b0b7ce2fa059932a715a15d4eb335c56f8ce2ba835fa5452a5dd4ea2d5de707de520881f752c3aba001853145d8660219298ad60a727e24d6f3aa46b0de124bbef1dd17ffd778f0fb0030f12ff528876bde9177702d2924dfa394c8f600ff3c2e558b8cf8aeac7af94f5abad1b532a3464daa745f09ab8e05d3c12a8c93d5245d083e982b5c934c75e82b3e38a5855777b56cb48f60a059e3f2a51d56d60e76b4146c686a5c8341f8593862465c24ec0ee88cb3ed12d48e4b0d68f9ea4de5223a420c234769dc227b3f7b715d50c75eb668de8412e77bb298ecd7031c0060fb7b7538fcba422b229b57778d65671ef58304bb1040fb57cf286570e10d0dfccac4ef4f0cf0e5e82f84e489ea2420dd182c55941d411ba05556565675b8cc3a6dc9bab8592af3d489fb6c39c52883512b0ba8e925670538bf0387289388f0dba7afd922551bcd67fd467256b64fd99164060bb7f20c50a4973020240815b849709e71b620d94e53d7925da76c3743b35d0a3bd6eadf03c22295bc651c3d2eb2a0072eecbeca321a66b1b4c37a8d23dd52d2abade70764dddcb9c209a632d4d8194e2c746882978cb852ae89f526c25804ed100d3db467c843225c631cb8c530864a1b71840fbc5006b3565f32c5fd5741b259603bd16c2e53ce02ed092f4e68d4d3db1f1d2eac5cd064355d34271c6198d75165dda60bc7fba716df769d7e38574ac04bb328419d5dc20d084af6974257f70dc19756f34a708de601b80e8b230031fce71eba603d0471aae1d785f886e0bbcc7b7ef718a5561807a2a5439b8972058853f01e82472ade410745561e4af8ef5a46504454258a8c9e7de1cac2a5ec6f82eeb1f795835bbcd17d62cb5b7da90d813c49707e837e357747c4ca2e5b91af02bdde4da2af72342afdbaf49330dbc991f4e7213866e15a5c0b8458af7f8c54bfb39dbe7055c8eceab339ab6b5c33e7ef93f485abbc6c5be767700625fe866a789d05ec50e2b1927d1744d1eb6886d3e48fd09dab4a65da7480dbc6ab11b449e0e18b9864a8a43bf93125bea495e08a309f9e8ddef640c30942b40a359315ad33c9d03a294dc044df8915c2b26a373fd78428c60cdfe85b2af6f298ebb97caa033109013325b5aff9576f18d5d9d96900710a062622c5f148adfdd7f6e40265f4b935c1124b30ad9f85180c52810c76b0a894fb66516f904f22144342e90fe83e6747362c83ba6f0688920297dad23203903fdd97fad9a20357363ef5b93763c5da573d54f88eea6f3c60582b49573a982814d37651b3096cbe76abc04ae0a4fbf710b48925bd63b1124b5dea1385981ca1cfee531785e910f2d8e1f4dbfaa5ae007d32e9834eca0353aec3b97308b241637c09be83887e07995473948b7fa5c0934a02a8120c1aadff1e0f940df45fe7c7e8e066415266459f73fa86cde41d0ea912361a8748ef4d0e6976624a8025ba718e38027c701cb7ec31db0348a442b15b83e51603834eaa5dccefe02d6bc60a4f02652f86e3c89d0286ad81aaadb4782d9fa662f696fb5e7cc51a498fcb53dbd26f31890de2577d06128634a9dbdcc273d0e688b4237c989a28ab85aad01da9c5be4a70ad01a070ce872d25980ccf29224aa00aac6c7483daed2ec5e66503ef34c17fd2ab10869d047ffbd19d5eef8e8846a71aa12ff400a21484f6c93a3afb4c3b64da13a24bd192dd0e03c6730886de995561bec4576683be345fade97bd1e780ebb657b8b601c81dcd1f4b120b701fa12eb920b7b36bc28df7a4605511aaa7b47269997c68262247bd7f2052a413758659363f2e4d298f4adf46cab5c3a0f33ecdf286d33056cd148f64e8a4f8c2b06ddf2ab41eed33fcce2d438a1c88c291e93f3f8bee07cf7624780194675ca795d7671dc3c2dcf9b2b13b336234ee5416ab6eaca3c9a04e02870aad5f2cff2dac0c988f4952c1d082d8c4e07be9a350eb39ddb6610f4e739b3304650244d34ea2c6f170365d0af7dfd75cf70ef11d30232870d2d09da", 0x1000}, {&(0x7f0000000340)="2d402c84c59bd1505e3cb1358a00ba510d28cde141f882373ad088", 0x1b}], 0x3, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)="1404b50d7be9cb2b3ed9701af463914d5e4354217f2721049167685ba3384e327707c2a1471d27e5e3285055108bb5c4da816fd2d7a618031c104c86f45d363e970cc283f3002613fbb316053d42e2618413140d683f580ce027daae65c4eca1c52a3221676886052b8b33fdd1c1c9491513b968bf6dd85c875f5f44f2490764db8603a187c7dbd47f9177f3387764cc5f5f58316beb778e9452d84d770abe40f04ff660aae126dec0d84be9b0ee4c05fe139afa9ac308b1331d0d84f224117f68853f", 0xc3}, {&(0x7f0000000740)="e7d590794c3793adfd98b7769dbfc21e79bfc53de2c182c2c568ef1bd7ac5b62e3b557c68bad6835909fc512bf6ea195ec08b024e145b3e508d0314ea34f3774b90db0ce59531a8e366b6edaccfe4a29bbb789a529ae0e417a8f780f4bbdf2c726df1d6655604327a3c0dc8a0703ac6866765277cc0009d341036515a62deb0577f8408440d4f3def38d59845138ec2fe36b0dda4bd423b5509ec7ff9f752aea1c2a01924791b060d6d733d1a668dd9047014b30dc4da84d08f0e2acd93ccbe4e9b04f8c8aa07c4aae9bc7", 0xcb}, {&(0x7f0000001840)="cd925e9d3c336edd1fa164787de8b0ec313ec9a077c3fa1762a1d813cf823ffdbcf417f2fd0a88cb7992d8fd4f9b825ba4b30f8bcceb9b0cb3c73278fe64e863f311a19fea8f2394b70cd49b438b4d5d8547f4b589ee32bc1661c0bb1bd36c06d607a6a754c63359d5721530e0551fd4971e53cc34ea887ea0e02d564d15439878b51e276556fce40d6bc5805ea0b641ad9a4c7844d44fadfea74ee37b62734880a2f964fcbedd57bc8e562432fac08cae403274265cc585a00da9605da207920f91cd22b75a22457ef43f37b503afe21b211f9c4ceead9169edebcaff924edef573ed8605762b299c85edd85e12e372517eb1e3", 0xf4}, {&(0x7f0000000840)="c09b127efeb3", 0x6}, {&(0x7f0000001940)="89525ed75f8f718357302cf4e5cce85709dbfb9ef6481495b8ce0729641eaedb1f53a632277cef864a607399dd189753b724b384cb5991e82bbe852105b376095f463bd766a06a2d83a7ffa9ddcac347bc257c8c177924756d0484df5a847c9d53e5f2d6db67af0a080011af0821d180a1d1a26aaf06f9506659643a415fbda51486bf2bb40a7a02cbd773db53e6ccba3637783da0251c39c6cfee8746c790d1185af6ae5bf9", 0xa6}], 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x120}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="50713f3b49c0cb", 0x7}], 0x1}}], 0x5, 0xc864) 818.798468ms ago: executing program 3 (id=2505): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220500e4ff1a835ae5da31ccf8faaad5c476bae9ec452b7372bf172a18a9ca884064c1354e2629485a7b04c8ea72c737357a2df4c915698a27e4310a1e4ac92f8b0ce3e78f369f4435250ecd5db91eb36624e3e78e189ba3f5c37274b4015807fffe1d82235be4ed5ac01bcbc3330c4344840c9078ab07cf8894ecb0c5303a473313ff6ded7fa79f85e1b183a04c99cfffcaadf6f1bc209ce5006a5e3f7e2c00bc62da4ba426e457f426e3e49231cd20821b134b2e853924eee80102973b42da90ab6fa14ddd56c831c6f4"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) (async) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 669.666792ms ago: executing program 2 (id=2506): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000440)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x2, "e51e00cd273067f058783600000000000000001b0000e18bab080fde250800"}) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}, 0x40000000) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89000) recvmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/147, 0x93}], 0x1}, 0x2020) 455.958196ms ago: executing program 2 (id=2507): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4d, 0xcf, 0xf4, 0x8, 0x572, 0xd811, 0x94e2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x0, 0xb3, 0x5b, 0x1e}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x5244534b, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 454.598297ms ago: executing program 1 (id=2508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000400)={0x9, @capture={0x0, 0x1, {0xafc, 0x80}, 0x5, 0xfffffdff}}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 226.175069ms ago: executing program 1 (id=2509): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) close_range(r1, r2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) r6 = socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) poll(&(0x7f0000000000)=[{r6, 0x2002}, {r6, 0x2020}, {r6}], 0x3, 0xa) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000240), 0x4) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015f34245cc3a9481cf6f35580edb0f4dc00000b529708410e42416ed40102010109022400010000004b8100090400020221f7680000080007"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 161.862078ms ago: executing program 4 (id=2510): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x498) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x1c8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xb96}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0xfffffff9, 0x8, 0x3ff, 0x8, 0x148, 0x62b, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x5, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffd, 0x40, 0x5, 0x8, 0x5, 0x1003, 0x7, 0x2, 0x3d, 0xc88a, 0x21, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x1c8}}, 0x0) write$tun(r4, 0x0, 0x10da) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000600)={0x2020}, 0x2020) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x284000, @empty, 0x3}, 0x1c) creat(&(0x7f0000004780)='./file0\x00', 0x200) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) 125.010176ms ago: executing program 0 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 0s ago: executing program 0 (id=2512): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24048014) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)="26c19899ea38a52cc76ff1648ea13c1507601e4e70329c0c45", 0x19}], 0x1}}, {{&(0x7f0000002480)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7ff}, 0x1c, &(0x7f0000003700)=[{&(0x7f00000024c0)="c354cd46de8144f6a0e6ebdeb59965483e55fcd99716b90ee1817f29286a0636b53833bdcf9cd3550c88028cfbc20da89307c0444edebf31c9a4f9f48e27a30fdb4b7afa619da7ffd3", 0x49}, {&(0x7f0000002540)="d76d8507530c6094bd967a3c30f6750af1a585ae061a57afbec595c6fad74cfc622d99245d7d40bd902c744c3dc20337ac2f73a5766a46224c829901e77ca51970b6faed98af22b4f0a12b2abf69d2b9c1e562de34c271f3b460a55a5e143972913b1bcc17b466200cb6ee627cbcb280b37efb2f98a6c52576cd57687e2ce2095fe817131bba45b4052e0b5f11dcde0352963d3bfe225f3b28a5", 0x9a}, {&(0x7f0000002700)="e3e88c9bf22624cf9cfac18fced0e0a40fb6f2717f5888b7acde8a565cffe56af7f308f1c4f7c1173bfb297fd9576e0c6b57b7aee5167cec56f61dd6473ab91f962314b0bc16c6917e1b837fd774a934721ee0e589d20654267fd7395ea9ef0e487325d8556a29dbe96990c557a7aa741fdebddf4dc3311f9bc36020c42f9af121dc05ae01f0ebd9d758a026e6a4888997bb9dadd300be97ba9b879d66921afff14cfc721084919d69eb9392285c0053bd22eafc3584e14395b1663333bd4310e5782192404e06a5e51a3c185f044646b95fa21bded130a8d9885a9569593960e70eeebbe95f23703fe2ada4d66fc241ad5b7057fb8b43f87e5b9228ad0cd4b2e589845b228887f98bb50fa795656a097f1a8a4f7360ac2b23a85b564d654a1cd5062bfc6324dd37bec7353a152194ab64cf400453f191e674b93be61005cbbb492e5aef5b148a2262c13c4023c9d3ba0713c92e217211b4292d3d387078a0d3f4dcf09aa66f35e588e9f0caedbe4e496c5cad98699186f6f39ed0b0d10e960cf0db913d93ccbf60b841898597928702704dbf0e0de907fff4929d552b14afe89b749aa1ff6a3efa96ddfbc2c60ce73462a54b0dc291869a016e2939878f637c6be16c45c3719ca825c4fd31340f4dea71b1b6f1f3ae93ac2891d8245846e891103de615b37f3fcd439871fcf5d872b97c8924c4418702bf6548d01978f3d285c5d5f46f4341a3efc98998e99a70a08880aa83f4e08377014fb8365f5476d78b569e20c368622c530538e88c24a716a3d25d32ba83010eb35c5f11a93b4a275c14fc857d698c3e23d4a472b9931fdb79f42a5681d8aca06cbeb70c1fb569b4b6a394aebb544642adaeebbc0c08511db08ae74e70f22f27e2c313404dc9d229463d744d718f2ba8c2f11c1da907401a0164a88a765310b91556d517d1bf50b21d2684fe7b25d47a851a781174cad44922077b59247306be64796d16596bb51a30a8877ea178eb6c6f03923380e03203825a28c1ba09f490386c85e5c160cf016ec67760b7e2df876b04c9b8bfc9e1d0804dadeab9157117fa68ca36d78e10d7640679fb3449d2256caaf9daf87579478f", 0x310}], 0x3, &(0x7f0000003740)}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003840)="04bf98b66b3e11bb06465532210c7e70635bd0dad2ca84be7743df71daf3ecc70b8453884bac6600ab3c43e8bd1947db14916f9d8a024df3b131672c323f1337a238251fbbe42c643503cb61e7cc0caf871c498ab659b01064d4e0cef3d94890d85e62dfacb7", 0x66}, {0x0}], 0x2}}], 0x4, 0x48800) shutdown(r0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0xfffffffffffffd56, &(0x7f0000000080)={0x0, 0xb, 0x7, {0x7, 0xa, "5a7da329171a9dc6897b3c141e33752022ca7ab36ff12e530dc2d9ed686f5d888301d5d10b57f44e3aa10ba2c1e6aa1a0cf5402c95f2826165dbadb776395c895ae2782e53b27cf2dff93ece63050993b128d36ee65417dbeb1826a176426c3d49824d29cf0a396c9f3a07e3655c6fa3344bfcae7e7583db029319aa28fa9977d6df831c30a3c9475ca5fe2c35abcdf503088fd4ad4a442037881814b4f2f0a8f216e67e2fde7680e57797651cc321ad6f538368d1d37842278c396f1868249f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 1: config 4 has an invalid interface number: 51 but max is 0 [ 729.426220][ T982] usb 3-1: config 4 has no interface number 0 [ 729.432591][ T982] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 729.443570][ T121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 729.456559][ T982] usb 3-1: config 4 interface 51 altsetting 2 endpoint 0x82 has invalid maxpacket 12352, setting to 1024 [ 729.468371][ T121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 729.478247][T13523] usb 5-1: Using ep0 maxpacket: 16 [ 729.483555][ T982] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 729.499153][ T121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 729.514096][ T982] usb 3-1: config 4 interface 51 has no altsetting 0 [ 729.521181][ T121] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 729.532849][ T121] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 729.543512][ T982] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 729.559848][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.568930][ T982] usb 3-1: Product: syz [ 729.573251][ T982] usb 3-1: Manufacturer: syz [ 729.578724][ T982] usb 3-1: SerialNumber: syz [ 729.589496][T13942] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 729.600335][T13942] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 729.834381][ T982] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 729.896654][ T982] usb 3-1: USB disconnect, device number 101 [ 730.175572][T13524] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 730.355522][T13524] usb 2-1: Using ep0 maxpacket: 32 [ 730.363245][T13524] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.374327][T13524] usb 2-1: config 3 has an invalid descriptor of length 238, skipping remainder of the config [ 730.385607][T13524] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 730.399223][T13524] usb 2-1: config 3 has an invalid descriptor of length 238, skipping remainder of the config [ 730.409940][T13524] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 730.421574][T13524] usb 2-1: config 3 has an invalid descriptor of length 238, skipping remainder of the config [ 730.433805][T13524] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 730.498097][T13524] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice=6b.91 [ 730.512003][T13524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.530525][T13524] usb 2-1: Product: syz [ 730.543167][T13524] usb 2-1: Manufacturer: syz [ 730.555557][T13524] usb 2-1: SerialNumber: syz [ 730.633270][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 730.702808][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 730.760020][ T982] usb 4-1: USB disconnect, device number 21 [ 730.811734][T13524] usb 2-1: USB disconnect, device number 6 [ 731.120897][T13979] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 731.120922][T13979] syzkaller1: persist disabled [ 731.939940][ T982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 731.988689][T13998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2052'. [ 732.124386][T14001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.159788][T14001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.200728][T13523] usb 5-1: unable to get BOS descriptor or descriptor too short [ 732.253835][T13523] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 732.266223][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.513412][T13523] usb 5-1: can't read configurations, error -71 [ 732.534052][ T982] usb 1-1: config 0 interface 0 has no altsetting 1 [ 732.615202][ T982] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 732.635409][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 732.648518][ T982] usb 1-1: Product: syz [ 732.656166][ T982] usb 1-1: Manufacturer: syz [ 732.682407][ T982] usb 1-1: SerialNumber: syz [ 732.700901][ T982] usb 1-1: config 0 descriptor?? [ 734.659988][ T982] usb 1-1: USB disconnect, device number 8 [ 734.841167][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.611865][T14047] tipc: Enabled bearer , priority 0 [ 735.620848][T14047] syzkaller0: entered promiscuous mode [ 735.627094][T14047] syzkaller0: entered allmulticast mode [ 735.847725][T14054] fuse: Bad value for 'group_id' [ 735.852952][T14054] fuse: Bad value for 'group_id' [ 735.877293][ T982] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 735.877293][T13523] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 736.055463][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 736.065126][ T982] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 736.067439][T13523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.095419][T13524] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 736.114852][T13523] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 736.121721][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.133309][T13523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.145640][ T982] usb 2-1: Product: syz [ 736.149958][ T982] usb 2-1: Manufacturer: syz [ 736.156932][ T982] usb 2-1: SerialNumber: syz [ 736.171580][ T982] usb 2-1: config 0 descriptor?? [ 736.239609][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.257670][T13523] usb 4-1: config 0 descriptor?? [ 736.302942][T13523] pwc: Askey VC010 type 2 USB webcam detected. [ 736.325664][T13524] usb 3-1: device descriptor read/64, error -71 [ 736.352144][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2074'. [ 736.430744][T14047] tipc: Resetting bearer [ 736.575712][T13524] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 736.725460][ T982] tipc: Node number set to 3376011188 [ 737.117319][T13523] pwc: recv_control_msg error -32 req 02 val 2b00 [ 737.156641][T13523] pwc: recv_control_msg error -32 req 02 val 2700 [ 737.164933][T13523] pwc: recv_control_msg error -32 req 02 val 2c00 [ 737.172512][T13523] pwc: recv_control_msg error -32 req 04 val 1000 [ 737.179183][T13524] usb 3-1: device descriptor read/64, error -71 [ 737.201439][T13523] pwc: recv_control_msg error -32 req 04 val 1300 [ 737.210728][T13523] pwc: recv_control_msg error -32 req 04 val 1400 [ 737.223703][T13523] pwc: recv_control_msg error -32 req 02 val 2000 [ 737.254002][T13523] pwc: recv_control_msg error -32 req 02 val 2100 [ 737.276054][T13523] pwc: recv_control_msg error -32 req 04 val 1500 [ 737.303701][T13523] pwc: recv_control_msg error -32 req 02 val 2500 [ 737.313414][T13524] usb usb3-port1: attempt power cycle [ 737.339308][T13523] pwc: recv_control_msg error -32 req 02 val 2400 [ 737.361658][T13523] pwc: recv_control_msg error -32 req 02 val 2600 [ 737.426537][T13523] pwc: recv_control_msg error -32 req 02 val 2900 [ 737.465606][T13523] pwc: recv_control_msg error -32 req 02 val 2800 [ 737.685888][T13523] pwc: recv_control_msg error -71 req 04 val 1200 [ 737.695245][T13523] pwc: Registered as video103. [ 737.700261][T13524] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 737.729537][T13523] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 737.740213][T13524] usb 3-1: device descriptor read/8, error -71 [ 737.781153][T13523] usb 4-1: USB disconnect, device number 22 [ 737.872993][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 737.913128][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 737.995835][T13524] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 738.041227][T13524] usb 3-1: device descriptor read/8, error -71 [ 738.175447][T13524] usb usb3-port1: unable to enumerate USB device [ 738.434017][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.452231][T14082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.543757][ T982] usb 2-1: USB disconnect, device number 7 [ 738.565676][T14042] tipc: Resetting bearer [ 738.606453][T14042] tipc: Disabling bearer [ 738.655587][T13524] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 738.850847][T13524] usb 4-1: Using ep0 maxpacket: 8 [ 738.907633][T13524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.936262][T13524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.970670][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'. [ 738.975372][T13524] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 738.996762][T13524] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 739.007695][T13524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.103259][T13524] usb 4-1: config 0 descriptor?? [ 739.554263][T13524] logitech 0003:046D:C293.0027: unknown main item tag 0x0 [ 739.555722][ T982] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 739.621719][T13524] logitech 0003:046D:C293.0027: unknown main item tag 0x0 [ 739.638249][T13524] logitech 0003:046D:C293.0027: unknown main item tag 0x0 [ 739.680470][T13524] logitech 0003:046D:C293.0027: unknown main item tag 0x0 [ 739.727415][T13524] logitech 0003:046D:C293.0027: hidraw1: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 739.748157][ T982] usb 1-1: config 0 has no interfaces? [ 739.764278][ T982] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 739.781700][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.820872][ T982] usb 1-1: Product: syz [ 739.834353][ T982] usb 1-1: Manufacturer: syz [ 739.841509][T13524] logitech 0003:046D:C293.0027: no inputs found [ 739.853931][ T982] usb 1-1: SerialNumber: syz [ 739.887678][ T982] usb 1-1: config 0 descriptor?? [ 739.942539][T13524] usb 4-1: USB disconnect, device number 23 [ 741.653098][T14134] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 741.737619][T14134] wg1: entered promiscuous mode [ 741.742891][T14134] wg1: entered allmulticast mode [ 742.076792][T14139] input: syz0 as /devices/virtual/input/input46 [ 742.193059][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 742.457136][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 742.601494][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 742.668725][T14146] netlink: 'syz.4.2100': attribute type 11 has an invalid length. [ 742.683090][T14146] netlink: 'syz.4.2100': attribute type 4 has an invalid length. [ 742.753513][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 742.983877][ T982] usb 1-1: USB disconnect, device number 9 [ 743.525460][T13524] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 743.665590][T13524] usb 5-1: device descriptor read/64, error -71 [ 743.767634][T14163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.818982][T14163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.862642][T14163] netlink: 'syz.0.2106': attribute type 21 has an invalid length. [ 743.915598][T14163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2106'. [ 743.915620][T13524] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 743.996093][T13523] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 744.076621][ T982] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 744.085499][T13524] usb 5-1: device descriptor read/64, error -71 [ 744.445712][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 744.455269][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 744.464538][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.478862][ T982] usb 4-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 744.496083][T13524] usb usb5-port1: attempt power cycle [ 744.518843][ T982] usb 4-1: config 1 interface 0 has no altsetting 0 [ 744.531542][ T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 744.552781][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.562799][ T982] usb 4-1: Product: syz [ 744.572763][ T982] usb 4-1: Manufacturer: syz [ 744.582939][ T982] usb 4-1: SerialNumber: syz [ 744.829398][ T982] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 744.835477][T13524] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 744.896183][ T982] usb 4-1: USB disconnect, device number 24 [ 744.911085][T13524] usb 5-1: device descriptor read/8, error -71 [ 745.206242][T13524] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 745.260500][T13524] usb 5-1: device descriptor read/8, error -71 [ 745.305909][ T121] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 745.392191][T13524] usb usb5-port1: unable to enumerate USB device [ 745.406043][T13497] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 745.445636][ T121] usb 3-1: device descriptor read/64, error -71 [ 745.495564][ T982] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 745.685429][ T121] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 745.734281][T13497] usb 2-1: config 0 has no interfaces? [ 745.740015][T14197] gre5: entered promiscuous mode [ 745.740042][T14197] gre5: entered allmulticast mode [ 745.824253][ T121] usb 3-1: device descriptor read/64, error -71 [ 745.956058][T13497] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 745.956337][ T121] usb usb3-port1: attempt power cycle [ 745.970985][T13497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.982464][T13497] usb 2-1: Product: syz [ 745.995428][T13497] usb 2-1: Manufacturer: syz [ 746.004467][T13497] usb 2-1: SerialNumber: syz [ 746.044334][T13497] usb 2-1: config 0 descriptor?? [ 746.301060][T14192] openvswitch: netlink: IPv6 tunnel dst address is zero [ 746.377160][ T121] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 746.423007][ T121] usb 3-1: device descriptor read/8, error -71 [ 746.677313][ T121] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 746.708626][ T121] usb 3-1: device descriptor read/8, error -71 [ 746.716634][T14213] FAULT_INJECTION: forcing a failure. [ 746.716634][T14213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.778773][T14213] CPU: 1 UID: 0 PID: 14213 Comm: syz.4.2121 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 746.778804][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 746.778817][T14213] Call Trace: [ 746.778826][T14213] [ 746.778835][T14213] dump_stack_lvl+0x189/0x250 [ 746.778865][T14213] ? __pfx____ratelimit+0x10/0x10 [ 746.778891][T14213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.778915][T14213] ? __pfx__printk+0x10/0x10 [ 746.778958][T14213] should_fail_ex+0x414/0x560 [ 746.778987][T14213] _copy_to_user+0x31/0xb0 [ 746.779010][T14213] video_usercopy+0xeb2/0x14f0 [ 746.779050][T14213] ? __pfx___video_do_ioctl+0x10/0x10 [ 746.779078][T14213] ? __pfx_video_usercopy+0x10/0x10 [ 746.779119][T14213] ? __fget_files+0x2a/0x420 [ 746.779153][T14213] ? __fget_files+0x2a/0x420 [ 746.779180][T14213] ? __fget_files+0x3a0/0x420 [ 746.779213][T14213] v4l2_ioctl+0x18d/0x1e0 [ 746.779240][T14213] ? __pfx_v4l2_ioctl+0x10/0x10 [ 746.779267][T14213] __se_sys_ioctl+0xfc/0x170 [ 746.779295][T14213] do_syscall_64+0xfa/0x3b0 [ 746.779319][T14213] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.779359][T14213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.779379][T14213] ? clear_bhb_loop+0x60/0xb0 [ 746.779404][T14213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.779424][T14213] RIP: 0033:0x7ff03618ebe9 [ 746.779442][T14213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.779461][T14213] RSP: 002b:00007ff036f3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.779496][T14213] RAX: ffffffffffffffda RBX: 00007ff0363b5fa0 RCX: 00007ff03618ebe9 [ 746.779511][T14213] RDX: 00002000000002c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 746.779525][T14213] RBP: 00007ff036f3d090 R08: 0000000000000000 R09: 0000000000000000 [ 746.779538][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.779551][T14213] R13: 00007ff0363b6038 R14: 00007ff0363b5fa0 R15: 00007ff0364dfa28 [ 746.779584][T14213] [ 747.005614][T13524] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 747.005691][ T121] usb usb3-port1: unable to enumerate USB device [ 747.247560][T13524] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.258177][T13524] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.303694][T13524] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 747.315858][T13524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 747.319177][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 747.350724][T13524] usb 4-1: SerialNumber: syz [ 747.373511][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 747.470737][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.478439][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.690009][T13524] usb 4-1: 0:2 : does not exist [ 747.690400][ T982] hid-generic 0000:0D17:0000.0028: item fetching failed at offset 0/2 [ 748.264984][ T982] hid-generic 0000:0D17:0000.0028: probe with driver hid-generic failed with error -22 [ 748.403381][T13524] usb 4-1: USB disconnect, device number 25 [ 748.625618][T13497] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 748.643134][T13523] usb 2-1: USB disconnect, device number 8 [ 748.673944][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.798015][T13497] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 748.859651][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 748.873393][T13497] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.986317][T14238] netlink: 'syz.2.2127': attribute type 5 has an invalid length. [ 749.029810][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.056426][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.085487][ T982] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 749.098868][T13497] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 749.135442][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.167991][T13497] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.210998][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.250298][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.287049][T13497] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 749.294690][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.296058][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.332843][T13497] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.366439][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 749.486216][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.505574][T13497] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.532537][T13497] usb 1-1: string descriptor 0 read error: -22 [ 749.544439][T13497] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 749.545832][ T982] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 749.554009][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.591128][T13497] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 749.686530][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.740716][ T982] usb 4-1: config 0 descriptor?? [ 749.773165][T14233] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 749.775483][ T121] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 749.985466][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 749.992984][ T121] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 750.005110][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.118393][ T121] usb 5-1: config 0 descriptor?? [ 750.133001][ T121] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 750.420355][ T982] usbhid 4-1:0.0: can't add hid device: -71 [ 750.426795][ T982] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 750.466227][ T982] usb 4-1: USB disconnect, device number 26 [ 751.915393][T13497] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 752.185098][T14261] FAULT_INJECTION: forcing a failure. [ 752.185098][T14261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.229803][T14261] CPU: 0 UID: 0 PID: 14261 Comm: syz.3.2132 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 752.229836][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.229848][T14261] Call Trace: [ 752.229857][T14261] [ 752.229866][T14261] dump_stack_lvl+0x189/0x250 [ 752.229898][T14261] ? __pfx____ratelimit+0x10/0x10 [ 752.229924][T14261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.229948][T14261] ? __pfx__printk+0x10/0x10 [ 752.229989][T14261] should_fail_ex+0x414/0x560 [ 752.230020][T14261] _copy_to_user+0x31/0xb0 [ 752.230044][T14261] simple_read_from_buffer+0xe1/0x170 [ 752.230078][T14261] proc_fail_nth_read+0x1b3/0x220 [ 752.230104][T14261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.230131][T14261] ? rw_verify_area+0x2a6/0x4d0 [ 752.230157][T14261] ? __lock_acquire+0xab9/0xd20 [ 752.230184][T14261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.230210][T14261] vfs_read+0x200/0x980 [ 752.230234][T14261] ? fdget_pos+0x247/0x320 [ 752.230257][T14261] ? __pfx___mutex_lock+0x10/0x10 [ 752.230283][T14261] ? __pfx_vfs_read+0x10/0x10 [ 752.230311][T14261] ? __fget_files+0x2a/0x420 [ 752.230345][T14261] ? __fget_files+0x3a0/0x420 [ 752.230373][T14261] ? __fget_files+0x2a/0x420 [ 752.230411][T14261] ksys_read+0x145/0x250 [ 752.230436][T14261] ? __fget_files+0x3a0/0x420 [ 752.230466][T14261] ? __pfx_ksys_read+0x10/0x10 [ 752.230499][T14261] ? do_syscall_64+0xbe/0x3b0 [ 752.230528][T14261] do_syscall_64+0xfa/0x3b0 [ 752.230554][T14261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.230573][T14261] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 752.230592][T14261] ? clear_bhb_loop+0x60/0xb0 [ 752.230618][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.230637][T14261] RIP: 0033:0x7f8804f8d5fc [ 752.230657][T14261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 752.230683][T14261] RSP: 002b:00007f8805de7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.230706][T14261] RAX: ffffffffffffffda RBX: 00007f88051b5fa0 RCX: 00007f8804f8d5fc [ 752.230722][T14261] RDX: 000000000000000f RSI: 00007f8805de70a0 RDI: 0000000000000004 [ 752.230736][T14261] RBP: 00007f8805de7090 R08: 0000000000000000 R09: 0000000000000000 [ 752.230749][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.230762][T14261] R13: 00007f88051b6038 R14: 00007f88051b5fa0 R15: 00007f88052dfa28 [ 752.230796][T14261] [ 752.589114][T14267] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 752.826028][T14271] bridge3: entered promiscuous mode [ 752.920830][ T121] gspca_sonixj: reg_w1 err -71 [ 752.925905][ T121] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 752.958582][ T121] usb 5-1: USB disconnect, device number 7 [ 752.995913][ T982] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 753.081116][ T5950] usb 1-1: USB disconnect, device number 12 [ 753.193818][ T982] usb 3-1: config 0 has no interfaces? [ 753.251296][ T982] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 753.299048][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.325440][ T982] usb 3-1: Product: syz [ 753.331225][ T982] usb 3-1: Manufacturer: syz [ 753.344106][ T982] usb 3-1: SerialNumber: syz [ 753.356732][ T982] usb 3-1: config 0 descriptor?? [ 753.406051][T13523] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 753.414090][T13497] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 753.588821][T13497] usb 4-1: device descriptor read/64, error -71 [ 753.614804][T13523] usb 2-1: Using ep0 maxpacket: 32 [ 753.622938][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 753.635557][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 753.675908][T13523] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 753.688899][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 753.721124][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 753.780245][T13524] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 753.816270][T13523] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 753.827107][T13523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.837208][T13523] usb 2-1: Product: syz [ 753.844090][T13523] usb 2-1: Manufacturer: syz [ 753.849024][T13497] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 753.861724][T13523] usb 2-1: SerialNumber: syz [ 753.884822][T13523] usb 2-1: config 0 descriptor?? [ 753.903393][T13523] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 753.950727][T13524] usb 1-1: config 0 has no interfaces? [ 753.964816][T13524] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 753.975102][T13524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.975106][ T982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 753.975133][T13524] usb 1-1: Product: syz [ 753.995967][T13497] usb 4-1: device descriptor read/64, error -71 [ 754.006321][T13524] usb 1-1: Manufacturer: syz [ 754.014442][T13524] usb 1-1: SerialNumber: syz [ 754.053285][T13524] usb 1-1: config 0 descriptor?? [ 754.110031][T13497] usb usb4-port1: attempt power cycle [ 754.117397][T14280] kvm: kvm [14279]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 754.135627][ T982] usb 5-1: Using ep0 maxpacket: 32 [ 754.146768][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 754.158318][ T982] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 754.193318][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.204789][T13524] usb 2-1: USB disconnect, device number 9 [ 754.252919][ T982] usb 5-1: Product: syz [ 754.270666][ T982] usb 5-1: Manufacturer: syz [ 754.284980][ T982] usb 5-1: SerialNumber: syz [ 754.303323][ T982] usb 5-1: config 0 descriptor?? [ 754.401118][T14284] openvswitch: netlink: IPv6 tunnel dst address is zero [ 754.478697][T13497] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 754.521117][T13497] usb 4-1: device descriptor read/8, error -71 [ 754.891948][T13497] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 754.916452][ T982] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 754.938291][T13497] usb 4-1: device descriptor read/8, error -71 [ 755.066742][T13497] usb usb4-port1: unable to enumerate USB device [ 755.415406][T13497] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 755.498856][T14286] netlink: 'syz.4.2139': attribute type 30 has an invalid length. [ 755.587614][T13497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 755.619843][T13497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 755.652031][ T982] usb 3-1: USB disconnect, device number 110 [ 755.662978][T13497] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 755.682993][T13497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.731778][T13497] usb 2-1: config 0 descriptor?? [ 755.757104][T14290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.908623][T13524] usb 5-1: USB disconnect, device number 8 [ 756.180728][T13497] usbhid 2-1:0.0: can't add hid device: -71 [ 756.217949][T13497] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 756.219292][ T982] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 756.259170][T13497] usb 2-1: USB disconnect, device number 10 [ 756.416066][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 756.434238][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.447509][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.459758][ T982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 756.497051][ T982] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 756.515975][T13524] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 756.531710][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.582852][ T982] usb 3-1: config 0 descriptor?? [ 756.724320][T13524] usb 5-1: Using ep0 maxpacket: 16 [ 756.764698][T13524] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.804622][T13524] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.848412][T13524] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.864389][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.867038][ T5950] usb 1-1: USB disconnect, device number 13 [ 756.885623][T13524] usb 5-1: Product: syz [ 756.899445][T13524] usb 5-1: Manufacturer: syz [ 756.917594][T13524] usb 5-1: SerialNumber: syz [ 757.074021][ T982] usbhid 3-1:0.0: can't add hid device: -71 [ 757.188406][ T982] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 757.210132][T13524] usb 5-1: 0:2 : does not exist [ 757.241697][ T982] usb 3-1: USB disconnect, device number 111 [ 757.268374][T13524] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 757.415775][T13524] usb 5-1: USB disconnect, device number 9 [ 757.707291][T14326] netlink: 'syz.3.2144': attribute type 5 has an invalid length. [ 757.863042][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.885447][ T982] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 758.045458][ T121] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 758.115459][T13497] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 758.155553][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 758.162317][ T982] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 758.171418][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.192176][ T982] usb 3-1: config 0 has no interface number 0 [ 758.204063][ T121] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 758.212537][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 758.263680][ T982] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.276614][ T121] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.335916][ T982] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 758.348376][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 758.380993][ T982] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 758.393931][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 758.426322][ T982] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.448909][ T121] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 758.456836][T13497] usb 1-1: Using ep0 maxpacket: 8 [ 758.465755][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 758.490469][ T982] usb 3-1: config 0 interface 52 has no altsetting 0 [ 758.497981][T13497] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 758.505394][ T121] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.517836][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.527474][ T982] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 758.527508][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.531071][ T982] usb 3-1: config 0 descriptor?? [ 758.572796][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 758.621630][T13497] usb 1-1: Product: syz [ 758.623257][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 758.660507][ T121] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 758.670777][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 758.694754][T13497] usb 1-1: Manufacturer: syz [ 758.699832][ T121] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 758.699902][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 758.699931][ T121] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 758.704443][ T121] usb 2-1: string descriptor 0 read error: -22 [ 758.789534][ T121] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 758.812700][ T982] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input48 [ 758.830236][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.964453][ T121] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 758.964596][T13497] usb 1-1: SerialNumber: syz [ 759.034723][ T982] usb 3-1: USB disconnect, device number 112 [ 759.076151][T13497] usb 1-1: config 0 descriptor?? [ 759.283862][T13497] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 759.303771][T14343] Invalid logical block size (-1) [ 759.723352][T13497] pwc: send_video_command error -71 [ 759.729593][T13497] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 759.958058][T13497] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 760.031131][T13497] usb 1-1: USB disconnect, device number 14 [ 761.115801][ T982] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 761.277437][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 761.302460][ T982] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 761.335162][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.362298][ T982] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 761.372697][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.395595][ T982] usb 1-1: Product: syz [ 761.403844][ T982] usb 1-1: Manufacturer: syz [ 761.409506][ T982] usb 1-1: SerialNumber: syz [ 761.421598][ T982] usb 1-1: config 0 descriptor?? [ 761.557519][ T982] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 761.575492][T13497] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 761.588260][ T982] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 761.665627][T13524] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 761.706074][ T982] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 761.712789][ T982] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 761.720282][ T982] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 761.727873][ T982] em28xx 1-1:0.0: No AC97 audio processor [ 761.740480][ T982] usb 1-1: USB disconnect, device number 15 [ 761.751710][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 761.751933][ T982] em28xx 1-1:0.0: Disconnecting em28xx [ 761.810719][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 761.811516][ T982] em28xx 1-1:0.0: Freeing device [ 761.843002][T13524] usb 5-1: device descriptor read/64, error -71 [ 761.882715][ T121] usb 2-1: USB disconnect, device number 11 [ 761.905647][T13497] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 761.921884][T13497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.053002][T13497] usb 4-1: config 0 descriptor?? [ 762.083131][T14380] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 762.142286][T13524] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 762.275856][ T982] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 762.326067][T13524] usb 5-1: device descriptor read/64, error -71 [ 762.404204][T14400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.426338][ T982] usb 1-1: device descriptor read/64, error -71 [ 762.447029][T13524] usb usb5-port1: attempt power cycle [ 762.526448][T13497] usbhid 4-1:0.0: can't add hid device: -71 [ 762.546674][T13497] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 762.636401][T13497] usb 4-1: USB disconnect, device number 32 [ 762.675873][T13523] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 762.688965][ T982] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 762.816915][T13524] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 762.835879][ T982] usb 1-1: device descriptor read/64, error -71 [ 762.851516][T13524] usb 5-1: device descriptor read/8, error -71 [ 762.862438][T13523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 762.879843][T13523] usb 2-1: not running at top speed; connect to a high speed hub [ 762.890529][T13523] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 762.903581][T13523] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 762.912175][T13523] usb 2-1: can't read configurations, error -61 [ 762.965842][ T982] usb usb1-port1: attempt power cycle [ 763.005814][T13497] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 763.045542][T13523] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 763.095697][T13524] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 763.146636][T13524] usb 5-1: device descriptor read/8, error -71 [ 763.168115][T13497] usb 3-1: Using ep0 maxpacket: 16 [ 763.176792][T13497] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.213955][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.228588][T13523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.237573][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 763.248575][T13523] usb 2-1: not running at top speed; connect to a high speed hub [ 763.256480][T13523] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 763.267060][T13524] usb usb5-port1: unable to enumerate USB device [ 763.273690][T13497] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 763.285536][T13497] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.301791][T13523] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 763.310880][T13523] usb 2-1: can't read configurations, error -61 [ 763.320239][T13497] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.330889][T13523] usb usb2-port1: attempt power cycle [ 763.335703][ T982] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 763.336421][T13497] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 763.353887][T13497] usb 3-1: Manufacturer: syz [ 763.365483][T13497] usb 3-1: config 0 descriptor?? [ 763.371420][ T982] usb 1-1: device descriptor read/8, error -71 [ 763.577543][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.587491][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.598519][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.612281][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.621952][ T982] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 763.657014][ T982] usb 1-1: device descriptor read/8, error -71 [ 763.685622][T13523] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 763.724305][T13523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.737585][T13523] usb 2-1: not running at top speed; connect to a high speed hub [ 763.748445][T13523] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 763.762636][T13523] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 763.773247][T13523] usb 2-1: can't read configurations, error -61 [ 763.787539][ T982] usb usb1-port1: unable to enumerate USB device [ 763.915528][T13523] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 763.939123][T13523] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.948677][T13523] usb 2-1: not running at top speed; connect to a high speed hub [ 763.956634][T13523] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 763.966854][T13523] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 763.976005][T13523] usb 2-1: can't read configurations, error -61 [ 763.985467][T13523] usb usb2-port1: unable to enumerate USB device [ 764.814881][T14429] tipc: Failed to remove unknown binding: 66,1,1/72:71197926/71197928 [ 764.823731][T14429] tipc: Failed to remove unknown binding: 66,1,1/72:71197926/71197928 [ 765.089271][T14433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2168'. [ 766.018377][T13497] rc_core: IR keymap rc-hauppauge not found [ 766.114109][T13497] Registered IR keymap rc-empty [ 766.141921][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.175595][T13523] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 766.185515][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.363747][T13497] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 766.388030][T13497] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 766.398940][T14443] netlink: 'syz.2.2172': attribute type 5 has an invalid length. [ 766.476491][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.579614][T13523] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.589786][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.608613][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.645650][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.690860][T13523] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.714590][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.734323][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 766.760013][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.797918][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 766.809795][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.840728][T13523] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 766.849528][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.857277][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 766.885697][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 766.947011][T13523] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 766.985590][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 767.007041][T14457] syzkaller0: entered promiscuous mode [ 767.012792][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 767.013500][T14457] syzkaller0: entered allmulticast mode [ 767.030561][T13497] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 767.049302][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 767.095567][T13497] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 767.120616][T13497] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 767.137751][T13523] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 767.156310][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 767.188635][T13497] usb 3-1: USB disconnect, device number 113 [ 767.201163][T13523] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.291513][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 767.413180][T13523] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 767.480327][T13523] usb 2-1: string descriptor 0 read error: -22 [ 767.487313][T13523] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 767.502158][T13523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.633856][T13523] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 767.634244][T14469] ======================================================= [ 767.634244][T14469] WARNING: The mand mount option has been deprecated and [ 767.634244][T14469] and is ignored by this kernel. Remove the mand [ 767.634244][T14469] option from the mount to silence this warning. [ 767.634244][T14469] ======================================================= [ 767.678973][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 767.678995][ T30] audit: type=1400 audit(1754607056.497:2594): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14468 comm="syz.4.2177" [ 768.838791][ T982] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 769.057559][T14482] fuse: Bad value for 'group_id' [ 769.063058][T14482] fuse: Bad value for 'group_id' [ 769.485701][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 769.495782][ T982] usb 3-1: config 1 has no interface number 0 [ 769.520846][ T982] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.561969][ T982] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 769.574280][ T982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.590772][ T982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.600516][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.609343][ T982] usb 3-1: Product: syz [ 769.613644][ T982] usb 3-1: Manufacturer: syz [ 769.624639][ T982] usb 3-1: SerialNumber: syz [ 769.775419][ T121] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 769.935408][ T121] usb 1-1: Using ep0 maxpacket: 16 [ 769.959825][ T121] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 769.970997][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.986350][ T121] usb 1-1: Product: syz [ 769.996182][ T121] usb 1-1: Manufacturer: syz [ 770.000976][ T121] usb 1-1: SerialNumber: syz [ 770.010449][ T121] usb 1-1: config 0 descriptor?? [ 770.044072][ T121] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 770.140233][ T121] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 770.278340][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.461478][ T982] cdc_ncm 3-1:1.1: bind() failure [ 770.686235][T13523] usb 2-1: USB disconnect, device number 16 [ 770.698696][ T982] usb 3-1: USB disconnect, device number 114 [ 770.740199][T14498] netlink: 'syz.3.2185': attribute type 5 has an invalid length. [ 770.767202][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2183'. [ 771.132254][T14509] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 771.142556][ T30] audit: type=1326 audit(1754607060.007:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.1.2187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f559bf8ebe9 code=0x0 [ 771.213976][T14509] bridge0: port 3(team0) entered disabled state [ 771.221120][T14509] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.228537][T14509] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.265703][T13497] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 771.411734][T14512] fuse: Unknown parameter '[¦U01777777777777777777777 [ 771.411734][T14512] ' [ 771.450275][T13497] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 771.460154][T13497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.468970][T13497] usb 5-1: Product: syz [ 771.474253][T13497] usb 5-1: Manufacturer: syz [ 771.479772][T13497] usb 5-1: SerialNumber: syz [ 771.507620][T13497] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 771.653214][T13523] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 772.149574][ T982] usb 5-1: USB disconnect, device number 14 [ 772.305601][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 772.735776][ T121] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 772.806175][T14548] netlink: 'syz.1.2198': attribute type 5 has an invalid length. [ 772.851005][T13523] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 772.862398][T13523] ath9k_htc: Failed to initialize the device [ 772.873103][ T982] usb 5-1: ath9k_htc: USB layer deinitialized [ 772.912607][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 772.966130][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 773.015389][ T121] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 773.052178][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.096675][ T121] usb 3-1: config 0 descriptor?? [ 773.106006][T14535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 773.257844][ T982] usb 1-1: USB disconnect, device number 20 [ 773.541893][ T121] usbhid 3-1:0.0: can't add hid device: -71 [ 773.555140][ T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 773.599826][ T121] usb 3-1: USB disconnect, device number 115 [ 776.060416][T14600] netlink: 'syz.4.2213': attribute type 5 has an invalid length. [ 776.485584][ T121] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 776.719485][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.774320][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 776.840172][T14627] bridge4: entered promiscuous mode [ 776.857041][ T121] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 776.883365][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.935962][ T121] usb 1-1: config 0 descriptor?? [ 776.941961][T14616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 777.423308][ T121] usbhid 1-1:0.0: can't add hid device: -71 [ 777.429811][ T121] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 777.533769][ T121] usb 1-1: USB disconnect, device number 21 [ 778.757883][T14655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.395615][T13523] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 780.565483][T13523] usb 5-1: Using ep0 maxpacket: 32 [ 780.596479][T13523] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 780.622497][T13523] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.674214][T13523] usb 5-1: config 0 has no interface number 0 [ 780.700708][T13523] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.718964][T13523] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 780.750448][T13523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.793989][T13523] usb 5-1: Product: syz [ 780.815412][T13523] usb 5-1: Manufacturer: syz [ 780.837112][T14678] netlink: 'syz.1.2234': attribute type 5 has an invalid length. [ 780.848519][T13523] usb 5-1: SerialNumber: syz [ 780.883537][T13523] usb 5-1: config 0 descriptor?? [ 780.928377][T13523] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 780.961730][T13523] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 781.128282][T13523] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 781.357952][T13523] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 781.457870][T13523] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 781.526007][T13523] usb 5-1: USB disconnect, device number 15 [ 781.587608][T13523] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 782.374660][T14689] binfmt_misc: register: failed to install interpreter file ./file0 [ 782.375539][ T982] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 782.547519][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.583853][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.600176][ T982] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 782.628005][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.742230][ T982] usb 4-1: config 0 descriptor?? [ 782.969473][ T982] usbhid 4-1:0.0: can't add hid device: -71 [ 782.995621][ T982] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 783.025400][T14701] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 783.112232][ T982] usb 4-1: USB disconnect, device number 33 [ 783.615055][ T982] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 783.818184][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.874691][T14711] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 783.913090][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.040577][ T982] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 784.063892][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.256578][ T982] usb 4-1: config 0 descriptor?? [ 784.365444][T13523] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 784.616274][T13523] usb 3-1: config 0 has no interfaces? [ 784.636415][T13523] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 784.646413][T13523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.654928][T13523] usb 3-1: Product: syz [ 784.671312][T13523] usb 3-1: Manufacturer: syz [ 784.681185][T13523] usb 3-1: SerialNumber: syz [ 784.712315][T13523] usb 3-1: config 0 descriptor?? [ 784.796409][ T982] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 784.934357][ T982] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0029/input/input50 [ 785.495636][ T982] keytouch 0003:0926:3333.0029: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 785.614713][ T982] usb 4-1: USB disconnect, device number 34 [ 786.154162][T14721] fido_id[14721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 786.375780][T13497] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 786.526397][T13497] usb 2-1: device descriptor read/64, error -71 [ 786.845545][T13497] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 786.964497][T13523] usb 3-1: USB disconnect, device number 116 [ 786.995587][T13497] usb 2-1: device descriptor read/64, error -71 [ 787.147752][T13497] usb usb2-port1: attempt power cycle [ 787.391557][ T30] audit: type=1326 audit(1754607076.217:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.445043][ T30] audit: type=1326 audit(1754607076.217:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.585681][ T30] audit: type=1326 audit(1754607076.217:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.585916][T13497] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 787.676797][ T30] audit: type=1326 audit(1754607076.217:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.704736][ T30] audit: type=1326 audit(1754607076.217:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.785497][ T982] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 787.836068][T13523] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 787.847588][T13497] usb 2-1: device descriptor read/8, error -71 [ 787.895832][ T30] audit: type=1326 audit(1754607076.217:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.925620][ T30] audit: type=1326 audit(1754607076.217:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 787.959775][ T30] audit: type=1326 audit(1754607076.217:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 788.006298][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 788.015548][ T982] usb 4-1: config 25 has an invalid interface number: 105 but max is 0 [ 788.026699][T13523] usb 3-1: Using ep0 maxpacket: 16 [ 788.032297][ T982] usb 4-1: config 25 has no interface number 0 [ 788.040230][ T982] usb 4-1: config 25 interface 105 has no altsetting 0 [ 788.050120][ T30] audit: type=1326 audit(1754607076.217:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 788.076097][ T30] audit: type=1326 audit(1754607076.217:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 788.099323][ T982] usb 4-1: New USB device found, idVendor=1f4d, idProduct=a115, bcdDevice=c5.ca [ 788.105594][T13497] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 788.117029][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.173382][ T982] usb 4-1: Product: syz [ 788.182247][ T982] usb 4-1: Manufacturer: syz [ 788.205990][ T982] usb 4-1: SerialNumber: syz [ 788.215465][T13497] usb 2-1: device descriptor read/8, error -71 [ 788.247610][T13523] usb 3-1: config 0 has no interfaces? [ 788.301947][T13523] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 788.316591][T13523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.330077][T13523] usb 3-1: Product: syz [ 788.334566][T13523] usb 3-1: Manufacturer: syz [ 788.348420][T13523] usb 3-1: SerialNumber: syz [ 788.407342][T13497] usb usb2-port1: unable to enumerate USB device [ 788.473283][T13523] usb 3-1: config 0 descriptor?? [ 788.473302][ T982] usb 4-1: USB disconnect, device number 35 [ 789.440383][T14771] tipc: Started in network mode [ 789.446264][T14771] tipc: Node identity e6bd6bb170d5, cluster identity 4711 [ 789.476286][T14771] tipc: Enabled bearer , priority 0 [ 789.652194][T14771] syzkaller0: entered promiscuous mode [ 789.661887][T14771] syzkaller0: entered allmulticast mode [ 789.765678][T14772] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 789.779098][T14771] tipc: Resetting bearer [ 789.956410][T14775] tipc: Resetting bearer [ 789.988986][T14775] tipc: Disabling bearer [ 790.045439][T13523] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 790.226827][T13523] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.237778][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.258480][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.306338][T13523] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 790.328007][ T982] usb 3-1: USB disconnect, device number 117 [ 790.335412][T13523] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 790.344870][T13523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.420291][T13523] usb 2-1: config 0 descriptor?? [ 790.738317][T13523] usbhid 2-1:0.0: can't add hid device: -71 [ 790.744754][T13523] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 790.818675][T13523] usb 2-1: USB disconnect, device number 21 [ 791.367313][T14809] fuse: Bad value for 'group_id' [ 791.373062][T14809] fuse: Bad value for 'group_id' [ 791.465793][T13523] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 791.553224][T14814] fuse: Unknown parameter 'mGN‡8o«ad' [ 791.648953][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.781665][T13523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.797470][T13523] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 791.833458][T13523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.862325][T13523] usb 2-1: config 0 descriptor?? [ 792.095250][T14820] fuse: Unknown parameter 'mGN‡8o«ad' [ 793.427842][T13523] hid-led 0003:0FC5:B080.002A: probe with driver hid-led failed with error -71 [ 793.440951][T13523] usb 2-1: USB disconnect, device number 22 [ 793.867061][T13497] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 794.038959][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 794.078533][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 794.134500][T13497] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 794.154492][T13497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.181885][T13497] usb 4-1: config 0 descriptor?? [ 794.195559][T14826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 794.348506][T14850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2281'. [ 794.616231][T13497] usbhid 4-1:0.0: can't add hid device: -71 [ 794.622344][T13497] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 794.639126][ T982] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 794.669123][T13497] usb 4-1: USB disconnect, device number 36 [ 794.676317][ T982] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 794.688040][ T982] hid-generic 0000:0003:0001.002B: hidraw1: HID v0.03 Device [syz0] on syz1 [ 794.844134][T14872] fuse: Bad value for 'group_id' [ 794.850008][T14872] fuse: Bad value for 'group_id' [ 795.280118][T14870] fido_id[14870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 795.937591][T13524] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 796.117429][T13524] usb 4-1: config 4 has an invalid interface number: 39 but max is 1 [ 796.130763][T13524] usb 4-1: config 4 has an invalid interface number: 49 but max is 1 [ 796.159774][T13524] usb 4-1: config 4 has no interface number 0 [ 796.209168][T13524] usb 4-1: config 4 has no interface number 1 [ 796.245999][T13524] usb 4-1: config 4 interface 39 has no altsetting 0 [ 796.273373][T13524] usb 4-1: config 4 interface 49 has no altsetting 0 [ 796.292194][T13524] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 796.325447][T13524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.350222][T13524] usb 4-1: Product: syz [ 796.354548][T13524] usb 4-1: Manufacturer: syz [ 796.391700][T13524] usb 4-1: SerialNumber: syz [ 796.478500][T14900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2294'. [ 796.587350][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 796.587372][ T30] audit: type=1326 audit(1754607085.467:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 796.686720][T13524] usb 4-1: USB disconnect, device number 37 [ 796.725014][ T30] audit: type=1326 audit(1754607085.467:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 796.764766][ T30] audit: type=1326 audit(1754607085.467:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.166656][ T30] audit: type=1326 audit(1754607085.497:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.258479][ T30] audit: type=1326 audit(1754607085.497:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.285790][ T30] audit: type=1326 audit(1754607085.497:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2119d8d550 code=0x7ffc0000 [ 797.345502][ T30] audit: type=1326 audit(1754607085.497:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.445510][T13497] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 797.456055][ T30] audit: type=1326 audit(1754607085.507:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.512477][ T30] audit: type=1326 audit(1754607085.507:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.556492][ T30] audit: type=1326 audit(1754607085.507:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14898 comm="syz.0.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2119d8ebe9 code=0x7ffc0000 [ 797.656151][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 797.688637][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 797.794442][T13497] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 797.824648][T13497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.856707][T13497] usb 3-1: config 0 descriptor?? [ 797.870278][T14910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 798.296683][T14935] netlink: 'syz.3.2299': attribute type 27 has an invalid length. [ 798.367207][T13497] usbhid 3-1:0.0: can't add hid device: -71 [ 798.472995][T13497] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 798.575872][T14935] wg1: left promiscuous mode [ 798.580837][T14935] wg1: left allmulticast mode [ 798.593067][T14935] gre5: left promiscuous mode [ 798.598164][T14935] gre5: left allmulticast mode [ 798.610167][T14935] bridge3: left promiscuous mode [ 798.625692][T14935] bridge4: left promiscuous mode [ 798.668804][T13497] usb 3-1: USB disconnect, device number 118 [ 799.648797][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2307'. [ 799.687452][T14958] fuse: Bad value for 'group_id' [ 799.692677][T14958] fuse: Bad value for 'group_id' [ 799.723845][T14955] veth6: entered promiscuous mode [ 799.734820][T14955] veth6: entered allmulticast mode [ 800.530201][T14968] tipc: Enabled bearer , priority 0 [ 800.562896][T14968] syzkaller0: entered promiscuous mode [ 800.578335][T14968] syzkaller0: entered allmulticast mode [ 800.690542][T14968] tipc: Resetting bearer [ 801.011662][T14965] tipc: Resetting bearer [ 801.114193][T14965] tipc: Disabling bearer [ 801.835658][T13497] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 801.997542][T13497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 802.016520][T13497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 802.040711][T13497] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 802.064797][T13497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.093769][T13497] usb 5-1: config 0 descriptor?? [ 802.105919][T14986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.255404][ T982] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 802.455438][ T121] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 802.485517][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 802.511474][ T982] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 802.539875][T13497] usbhid 5-1:0.0: can't add hid device: -71 [ 802.546171][T13497] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 802.590284][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 802.593557][T13497] usb 5-1: USB disconnect, device number 16 [ 802.615803][ T121] usb 1-1: Using ep0 maxpacket: 8 [ 802.634225][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.666863][ T121] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 802.679984][ T982] usb 3-1: Product: syz [ 802.684673][ T121] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 802.755608][ T982] usb 3-1: Manufacturer: syz [ 802.760742][ T982] usb 3-1: SerialNumber: syz [ 802.766460][ T121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 802.780267][ T982] usb 3-1: config 0 descriptor?? [ 802.787614][ T121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 802.790439][ T982] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 802.808534][ T121] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.825813][ T121] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 802.837756][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.990999][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.016854][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.044456][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.087640][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.102270][ T121] usb 1-1: GET_CAPABILITIES returned 0 [ 803.108368][ T121] usbtmc 1-1:16.0: can't read capabilities [ 803.134006][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.225638][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.288656][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.345695][ T982] gspca_vc032x: reg_r err -110 [ 803.351240][ T982] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 803.380663][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.436508][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.466199][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.488257][ T982] usb 1-1: USB disconnect, device number 22 [ 803.494529][T15011] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 803.559183][T15018] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 803.600564][T13497] usb 3-1: USB disconnect, device number 119 [ 803.787716][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 803.823993][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'. [ 803.922769][ T121] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 804.108582][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.153792][ T121] usb 2-1: Using ep0 maxpacket: 16 [ 804.160675][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.162315][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 804.176583][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.187485][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17825, setting to 1024 [ 804.192155][T15033] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 804.294062][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.382143][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.390252][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.391556][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 804.414178][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.423496][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.442449][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.453803][T13497] hid-generic 009C:0008:0003.002C: unknown main item tag 0x0 [ 804.482093][ T121] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 804.555502][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.581085][ T121] usb 2-1: config 0 descriptor?? [ 804.618825][T15023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.691071][T15043] fuse: Bad value for 'group_id' [ 804.697026][T15043] fuse: Bad value for 'group_id' [ 804.836371][T13497] hid-generic 009C:0008:0003.002C: hidraw1: HID v0.05 Device [syz1] on syz0 [ 805.111576][T15046] fido_id[15046]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 805.208166][ T121] usbhid 2-1:0.0: can't add hid device: -71 [ 805.225574][T13497] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 805.251239][ T121] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 805.417816][T13497] usb 4-1: Using ep0 maxpacket: 8 [ 805.425214][T13497] usb 4-1: config 6 has an invalid interface number: 51 but max is 1 [ 805.447495][T13497] usb 4-1: config 6 has no interface number 1 [ 805.475890][ T121] usb 2-1: USB disconnect, device number 23 [ 805.481438][T13497] usb 4-1: config 6 interface 0 has no altsetting 0 [ 805.519247][T13497] usb 4-1: config 6 interface 51 has no altsetting 0 [ 805.560432][T13497] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 805.592716][T13497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.641115][T13497] usb 4-1: Product: syz [ 805.673920][T13497] usb 4-1: Manufacturer: syz [ 805.775374][T13497] usb 4-1: SerialNumber: syz [ 806.003674][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.013994][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.108961][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.169716][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.242127][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 806.269249][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 806.366057][T13497] xr_serial 4-1:6.51: xr_serial converter detected [ 806.399224][T13497] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 806.415572][T13497] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 806.461630][T13497] usb 4-1: USB disconnect, device number 38 [ 806.476386][T13497] xr_serial 4-1:6.0: device disconnected [ 806.485484][T13524] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 806.559833][ T121] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 806.647315][T13524] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 806.655987][T13524] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 806.664477][T13524] usb 2-1: config 0 has no interface number 0 [ 806.687441][T13524] usb 2-1: config 0 has no interface number 1 [ 806.694568][T13524] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 806.716396][T13524] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 806.731905][T13524] usb 2-1: config 0 interface 255 has no altsetting 0 [ 806.747583][T13524] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 806.748173][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 806.761372][T13524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.785935][T13524] usb 2-1: Product: syz [ 806.790196][T13524] usb 2-1: Manufacturer: syz [ 806.794880][T13524] usb 2-1: SerialNumber: syz [ 806.815320][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 806.823285][T13524] usb 2-1: config 0 descriptor?? [ 806.850241][ T121] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 806.861395][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.865005][T13524] usb 2-1: selecting invalid altsetting 0 [ 806.880302][T13524] usb 2-1: Could not set interface, error -22 [ 806.881162][ T121] usb 5-1: config 0 descriptor?? [ 806.931057][T15060] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 807.094509][T13524] usb 2-1: USB disconnect, device number 24 [ 807.168418][T15072] fuse: Unknown parameter 'mGN‡8o«ad' [ 807.392555][ T121] usbhid 5-1:0.0: can't add hid device: -71 [ 807.422703][ T121] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 807.461504][ T121] usb 5-1: USB disconnect, device number 17 [ 807.967640][T15085] fuse: Unknown parameter 'B³:' [ 808.020198][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 808.032005][T15088] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 808.101009][T15088] bond1: (slave geneve2): making interface the new active one [ 808.132051][T15088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 808.188841][T10726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 808.219386][T10726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 808.411358][T15088] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 808.421052][T10726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 808.430467][T10726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 808.794932][T15104] IPVS: length: 129 != 8 [ 808.878433][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'. [ 808.944140][T15108] netlink: 'syz.2.2348': attribute type 15 has an invalid length. [ 808.944709][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.960643][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.041426][T15111] fuse: Bad value for 'group_id' [ 809.047672][T15111] fuse: Bad value for 'group_id' [ 809.105989][T15108] netlink: 'syz.2.2348': attribute type 18 has an invalid length. [ 809.194219][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2349'. [ 811.005507][ T121] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 811.182231][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 811.234040][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 811.256200][ T121] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 811.266823][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.296469][ T121] usb 3-1: config 0 descriptor?? [ 811.302754][T15146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 811.325823][ T982] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 811.485463][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 811.498341][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.517540][ T982] usb 2-1: config 0 has no interfaces? [ 811.556444][ T982] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 811.601951][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.608183][T15168] fuse: Unknown parameter 'mGN‡8o«ad' [ 811.624820][ T982] usb 2-1: config 0 descriptor?? [ 811.730888][ T121] usbhid 3-1:0.0: can't add hid device: -71 [ 811.751830][ T121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 811.845661][ T121] usb 3-1: USB disconnect, device number 120 [ 811.964348][ T982] usb 2-1: USB disconnect, device number 25 [ 813.005629][T13497] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 813.146248][T13497] usb 2-1: device descriptor read/64, error -71 [ 813.379663][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 813.379687][ T30] audit: type=1326 audit(1754607102.257:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.386554][T13497] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 813.453514][ T30] audit: type=1326 audit(1754607102.297:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.519267][ T30] audit: type=1326 audit(1754607102.297:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.608288][T13497] usb 2-1: device descriptor read/64, error -71 [ 813.614594][ T30] audit: type=1326 audit(1754607102.297:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.655561][ T30] audit: type=1326 audit(1754607102.297:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.730754][T13497] usb usb2-port1: attempt power cycle [ 813.764030][ T30] audit: type=1326 audit(1754607102.297:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.820552][T15208] fuse: Bad value for 'group_id' [ 813.825942][T15208] fuse: Bad value for 'group_id' [ 813.870520][ T30] audit: type=1326 audit(1754607102.297:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 813.939042][ T30] audit: type=1326 audit(1754607102.297:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 814.135356][ T30] audit: type=1326 audit(1754607102.377:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14c172add9 code=0x7ffc0000 [ 814.541887][T13497] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 814.585542][ T30] audit: type=1326 audit(1754607102.377:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x7ffc0000 [ 814.666273][T13497] usb 2-1: device descriptor read/8, error -71 [ 814.921822][T15215] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 814.995693][T13497] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 815.055960][T13497] usb 2-1: device descriptor read/8, error -71 [ 815.215380][ T121] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 815.215840][T13497] usb usb2-port1: unable to enumerate USB device [ 815.400133][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 815.412288][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 815.458093][ T121] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 815.482033][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.517980][T15215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.523613][ T121] usb 1-1: config 0 descriptor?? [ 815.540709][T15223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 815.550002][T15215] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 815.600796][T15226] netlink: 'syz.3.2375': attribute type 21 has an invalid length. [ 815.619575][T15226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2375'. [ 815.630719][T15226] netlink: 'syz.3.2375': attribute type 4 has an invalid length. [ 815.641146][T15226] netlink: 'syz.3.2375': attribute type 5 has an invalid length. [ 815.661471][T15226] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2375'. [ 815.692310][T15215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.703137][T15215] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 815.729134][T15215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 815.738621][T15215] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 815.792709][T15215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.801559][T15215] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 815.859146][T15215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.867945][T15215] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 815.970225][ T121] usbhid 1-1:0.0: can't add hid device: -71 [ 815.980908][ T121] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 816.005629][ T982] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 816.057385][ T121] usb 1-1: USB disconnect, device number 23 [ 816.193321][ T982] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.211037][ T982] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 816.265643][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.297747][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 816.319504][ T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 816.338795][ T982] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.368036][ T982] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.400214][T15244] fuse: Unknown parameter 'mGN‡8o«ad' [ 816.455649][ T982] usb 4-1: Product: syz [ 816.515748][ T982] usb 4-1: Manufacturer: syz [ 816.540825][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 816.575498][ T982] cdc_wdm 4-1:1.0: skipping garbage [ 816.584483][ T982] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 816.665049][ T982] cdc_wdm 4-1:1.0: Unknown control protocol [ 817.296031][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 817.316438][ T982] usb 4-1: USB disconnect, device number 39 [ 817.374135][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 817.677777][T15275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.815638][ T121] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 817.989275][ T121] usb 1-1: Using ep0 maxpacket: 32 [ 818.004528][ T121] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 818.016490][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.024743][ T121] usb 1-1: Product: syz [ 818.075455][ T121] usb 1-1: Manufacturer: syz [ 818.086244][ T121] usb 1-1: SerialNumber: syz [ 818.103569][ T121] usb 1-1: config 0 descriptor?? [ 818.142103][ T121] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 818.175500][T13497] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 818.354538][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.387627][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 818.410388][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'. [ 818.420379][T15298] tipc: Enabled bearer , priority 0 [ 818.427548][T13497] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 818.441340][T15298] ip6_vti0: mtu less than device minimum [ 818.451932][T13497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.478288][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 818.507076][T13497] usb 4-1: config 0 descriptor?? [ 818.513597][T15286] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 818.666347][ T121] gspca_ov534_9: reg_w failed -110 [ 818.715720][T13524] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 818.875674][T13524] usb 2-1: Using ep0 maxpacket: 8 [ 818.894181][T13524] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 818.933936][T13524] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 818.943509][T13524] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 818.966335][T13497] usbhid 4-1:0.0: can't add hid device: -71 [ 818.972755][T13497] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 818.985721][T13524] usb 2-1: Product: syz [ 818.990053][T13524] usb 2-1: Manufacturer: syz [ 819.005352][T13524] usb 2-1: SerialNumber: syz [ 819.016920][T13497] usb 4-1: USB disconnect, device number 40 [ 819.028410][T13524] usb 2-1: config 0 descriptor?? [ 819.075751][ T121] gspca_ov534_9: Unknown sensor 0000 [ 819.075874][ T121] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 819.237308][T15312] fuse: Unknown parameter 'mGN‡8o«ad' [ 819.255089][T13524] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 819.667160][T13524] gspca_sunplus: reg_w_riv err -71 [ 819.674077][T15294] tipc: Disabling bearer [ 819.674732][T13524] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 819.744830][T13524] usb 2-1: USB disconnect, device number 30 [ 819.751626][T13497] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 819.953255][T13497] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 819.962974][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.019970][T13497] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 820.030805][T13497] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 820.049893][T13497] usb 3-1: Manufacturer: syz [ 820.073328][T13497] usb 3-1: config 0 descriptor?? [ 820.145415][ T121] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 820.259761][T13497] rc_core: IR keymap rc-hauppauge not found [ 820.275602][T13497] Registered IR keymap rc-empty [ 820.292321][T13497] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 820.372860][ T121] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 820.412046][T13497] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51 [ 820.414087][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 820.436945][ T982] usb 1-1: USB disconnect, device number 24 [ 820.483196][ T121] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.529010][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 820.658962][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 820.676179][T15323] rc rc0: two consecutive events of type space [ 820.741087][ T121] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 820.774404][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 820.836406][ T121] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.945626][ T982] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 820.959121][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 821.012189][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 821.084770][ T121] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 821.093537][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 821.105483][ T121] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 821.118885][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 821.131440][ T121] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 821.192470][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 821.225139][T15337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 821.347230][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.360701][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.484970][ T982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.505734][ T121] usb 4-1: string descriptor 0 read error: -22 [ 821.519310][ T121] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 821.533899][ T982] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 821.552069][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.561080][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.612424][ T121] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 821.623159][ T982] usb 1-1: config 0 descriptor?? [ 821.623594][T15345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2408'. [ 822.212732][ T982] HID 045e:07da: Invalid code 65791 type 1 [ 822.395928][ T982] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002D/input/input52 [ 822.500651][ T982] microsoft 0003:045E:07DA.002D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 822.620576][T13524] usb 3-1: USB disconnect, device number 121 [ 822.689713][ T982] usb 1-1: USB disconnect, device number 25 [ 822.802909][T15353] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 822.812475][T15353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2409'. [ 823.236633][T15351] fido_id[15351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 823.700020][T15360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2411'. [ 823.942678][ T982] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 823.957522][T15361] wireguard0: entered promiscuous mode [ 824.000927][T15361] wireguard0: entered allmulticast mode [ 824.107719][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.131263][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 824.165151][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 824.165171][ T30] audit: type=1326 audit(1754607113.027:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15363 comm="syz.2.2413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14c178ebe9 code=0x0 [ 824.166508][ T982] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 824.242991][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.262148][ T982] usb 1-1: config 0 descriptor?? [ 824.294568][T15359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 824.376766][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.394183][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.550145][ T5950] usb 4-1: USB disconnect, device number 41 [ 824.595643][T13524] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 824.623612][T15373] fuse: Unknown parameter 'mGN‡8o«ad' [ 824.755469][T13524] usb 5-1: Using ep0 maxpacket: 8 [ 824.764159][T13524] usb 5-1: config 2 has an invalid interface number: 241 but max is 0 [ 824.783670][ T982] usbhid 1-1:0.0: can't add hid device: -71 [ 824.805920][ T982] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 824.808061][T13524] usb 5-1: config 2 has no interface number 0 [ 824.869888][ T982] usb 1-1: USB disconnect, device number 26 [ 825.039979][T13524] usb 5-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.073413][T13524] usb 5-1: config 2 interface 241 has no altsetting 0 [ 825.095210][T13524] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 825.111491][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.138773][T13524] usb 5-1: Product: syz [ 825.146050][T13524] usb 5-1: Manufacturer: syz [ 825.156050][T13524] usb 5-1: SerialNumber: syz [ 825.230571][T13524] ti_usb_3410_5052 5-1:2.241: TI USB 3410 1 port adapter converter detected [ 825.242900][T13524] ti_usb_3410_5052 5-1:2.241: missing endpoints [ 825.419159][T13522] usb 5-1: USB disconnect, device number 18 [ 825.853503][T15385] netlink: 'syz.3.2418': attribute type 5 has an invalid length. [ 826.465946][T13524] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 826.635419][T13524] usb 5-1: Using ep0 maxpacket: 32 [ 826.727326][T13524] usb 5-1: unable to get BOS descriptor or descriptor too short [ 826.756992][T13524] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 826.766122][T13524] usb 5-1: config 0 has no interface number 0 [ 826.789083][T13524] usb 5-1: config 0 interface 63 has no altsetting 0 [ 826.809764][T13524] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 826.821418][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.844100][T13524] usb 5-1: Product: syz [ 826.856192][T13524] usb 5-1: Manufacturer: syz [ 826.868262][T13524] usb 5-1: SerialNumber: syz [ 826.892037][T13524] usb 5-1: config 0 descriptor?? [ 827.122129][T15410] bond2: entered allmulticast mode [ 827.139821][T15410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 827.149108][T15410] bridge0: port 3(bond2) entered blocking state [ 827.157351][T15410] bridge0: port 3(bond2) entered disabled state [ 827.197836][T15410] bond2: entered promiscuous mode [ 827.358400][T13524] kvaser_usb 5-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 827.445535][T13497] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 827.678853][T13524] usb 5-1: USB disconnect, device number 19 [ 827.708942][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 827.752145][T13497] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 827.772940][T13497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 512, setting to 64 [ 827.836863][T13497] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 828.091218][T13497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.132387][T13497] usb 4-1: config 0 descriptor?? [ 828.183495][T13497] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 828.460992][T13497] usb 4-1: USB disconnect, device number 42 [ 829.485412][ T982] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 829.565752][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 829.575051][T15453] netlink: 'syz.1.2433': attribute type 7 has an invalid length. [ 829.705419][T15453] netlink: 'syz.1.2433': attribute type 8 has an invalid length. [ 829.715489][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 829.887404][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 829.977180][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 829.990374][ T982] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 830.001321][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.374312][ T982] usb 5-1: config 0 descriptor?? [ 830.400685][T15435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 830.825689][ T5950] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 830.880069][ T982] usbhid 5-1:0.0: can't add hid device: -71 [ 830.889558][ T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 831.040576][ T5950] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 831.068893][ T982] usb 5-1: USB disconnect, device number 20 [ 831.139835][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 831.234579][ T5950] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.360413][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 831.594383][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.613219][ T5950] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 831.622513][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 831.636406][ T5950] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.653983][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 831.680138][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.705989][ T5950] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 831.716935][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 831.734284][ T5950] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.802031][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 831.853721][ T5950] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 831.996423][ T5950] usb 3-1: string descriptor 0 read error: -22 [ 832.006514][ T5950] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 832.099577][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.141596][ T5950] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 832.665927][ T5950] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 832.825953][T15490] syzkaller0: entered promiscuous mode [ 832.832031][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 832.845588][T15490] syzkaller0: entered allmulticast mode [ 832.873371][ T5950] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 832.893361][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.914875][ T5950] usb 1-1: Product: syz [ 832.933358][ T5950] usb 1-1: Manufacturer: syz [ 832.943748][ T5950] usb 1-1: SerialNumber: syz [ 832.961731][ T5950] usb 1-1: config 0 descriptor?? [ 832.987459][ T5950] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 833.731663][ T5950] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 833.826868][ T5950] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 833.841981][ T5950] usb 1-1: USB disconnect, device number 27 [ 833.859993][T15498] netlink: 'syz.1.2448': attribute type 13 has an invalid length. [ 833.957040][T15498] bridge0: port 3(team0) entered blocking state [ 833.964275][T15498] bridge0: port 3(team0) entered forwarding state [ 833.971359][T15498] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.979212][T15498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.986893][T15498] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.994652][T15498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.355655][ T5950] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 834.438114][T15498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.547972][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.610093][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 834.662586][ T5950] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 834.696916][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.717890][ T5950] usb 4-1: config 0 descriptor?? [ 834.724069][T15500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 835.143199][ T5950] usbhid 4-1:0.0: can't add hid device: -71 [ 835.157916][ T5950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 835.185535][ T5950] usb 4-1: USB disconnect, device number 43 [ 835.825815][ T5950] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 835.888702][ T121] usb 3-1: USB disconnect, device number 122 [ 835.957405][ T982] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 836.029424][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.049861][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.071968][ T5950] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 836.099532][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.117578][T13524] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 836.123332][ T5950] usb 5-1: config 0 descriptor?? [ 836.135468][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 836.149084][ T982] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 836.175747][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 836.202832][ T982] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 836.224964][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.246197][ T982] usb 2-1: Product: syz [ 836.251653][ T982] usb 2-1: Manufacturer: syz [ 836.266330][ T982] usb 2-1: SerialNumber: syz [ 836.292839][ T982] usb 2-1: config 0 descriptor?? [ 836.305409][T13524] usb 4-1: Using ep0 maxpacket: 32 [ 836.317854][ T982] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 836.324687][T13524] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 836.332552][ T982] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 836.337055][T13524] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 836.403472][T13524] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 836.440605][T13524] usb 4-1: config 1 has no interface number 0 [ 836.454824][T13524] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 836.491342][T13524] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 836.547901][T13524] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 836.595420][T13524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.669302][T13524] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 836.915434][ T982] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 836.943485][ T982] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 837.239500][T13524] snd_usb_pod 4-1:1.1: set_interface failed [ 837.325534][T13524] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 837.370248][T13524] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 837.426114][T13524] usb 4-1: USB disconnect, device number 44 [ 837.505810][T13497] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 837.578470][ T982] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 837.601477][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 837.616308][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 837.650586][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 837.666091][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 837.674156][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 837.713878][T13497] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 837.728294][T13497] usb 1-1: config 0 has no interface number 0 [ 837.738993][T13497] usb 1-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 837.758505][T15531] syzkaller0: entered promiscuous mode [ 837.765180][T15531] syzkaller0: entered allmulticast mode [ 837.800475][T13497] usb 1-1: config 0 interface 81 has no altsetting 0 [ 837.844950][T13497] usb 1-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 837.862095][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.884062][T13497] usb 1-1: Product: syz [ 837.933156][T13497] usb 1-1: Manufacturer: syz [ 837.965458][T13497] usb 1-1: SerialNumber: syz [ 838.014067][T13497] usb 1-1: config 0 descriptor?? [ 838.042207][T15525] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 838.114995][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 838.130114][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 838.137808][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 838.156191][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 838.213484][ T982] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 838.273391][T13497] HFC-S_USB 1-1:0.81: probe with driver HFC-S_USB failed with error -5 [ 838.317983][ T982] usb 2-1: USB disconnect, device number 31 [ 838.322690][T13497] usb 1-1: USB disconnect, device number 28 [ 839.946103][ T5950] usbhid 5-1:0.0: can't add hid device: -71 [ 839.952382][ T5950] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 840.025787][ T5950] usb 5-1: USB disconnect, device number 21 [ 840.166010][T13497] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 840.330430][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 840.350879][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 840.363608][T13497] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 840.398576][T13497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.429513][T13497] usb 1-1: config 0 descriptor?? [ 840.454684][T15554] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 840.878599][T13497] usbhid 1-1:0.0: can't add hid device: -71 [ 840.884841][T13497] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 841.076706][T13497] usb 1-1: USB disconnect, device number 29 [ 841.433849][T15569] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 841.441601][T15569] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 842.628784][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 842.641101][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 842.695879][T15596] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 842.955452][ T5950] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 843.115905][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 843.123236][T15604] syzkaller0: entered promiscuous mode [ 843.138542][ T5950] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 843.166435][ T5950] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.180585][T15604] syzkaller0: entered allmulticast mode [ 843.212927][ T5950] usb 2-1: config 1 interface 0 has no altsetting 0 [ 843.240980][ T5950] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 843.283484][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.313556][ T5950] usb 2-1: Product: syz [ 843.324721][ T5950] usb 2-1: Manufacturer: syz [ 843.333718][ T5950] usb 2-1: SerialNumber: syz [ 843.515798][T13497] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 843.690745][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 843.720218][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 843.764308][T13497] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 843.907542][T13497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.931892][T13497] usb 3-1: config 0 descriptor?? [ 843.979048][T15607] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 845.019604][T13497] usbhid 3-1:0.0: can't add hid device: -71 [ 845.057753][T13497] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 845.084621][T13497] usb 3-1: USB disconnect, device number 123 [ 845.736634][T15626] dlm: non-version read from control device 121 [ 845.947565][ T5950] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input53 [ 845.950318][ T5218] bcm5974 2-1:1.0: could not read from device [ 846.003480][ T5218] bcm5974 2-1:1.0: could not read from device [ 846.009177][ T5218] bcm5974 2-1:1.0: could not read from device [ 846.010273][ T5218] bcm5974 2-1:1.0: could not read from device [ 846.017719][ T5950] usb 2-1: USB disconnect, device number 32 [ 846.045446][T13497] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 846.195982][T13497] usb 3-1: Using ep0 maxpacket: 32 [ 846.199255][T13497] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 846.199287][T13497] usb 3-1: config 0 has no interface number 0 [ 846.199335][T13497] usb 3-1: config 0 interface 2 has no altsetting 0 [ 846.202428][T13497] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 846.202472][T13497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.202495][T13497] usb 3-1: Product: syz [ 846.202512][T13497] usb 3-1: Manufacturer: syz [ 846.202529][T13497] usb 3-1: SerialNumber: syz [ 846.212159][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 846.232936][T13497] usb 3-1: config 0 descriptor?? [ 846.233721][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 846.235535][T13524] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 846.397587][T13524] usb 1-1: device descriptor read/64, error -71 [ 846.457992][T13497] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 846.503662][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 846.512302][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 846.554791][T13497] usb 3-1: USB disconnect, device number 124 [ 846.637402][T13524] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 846.662214][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.773431][T13524] usb 1-1: device descriptor read/64, error -71 [ 846.875679][T13524] usb usb1-port1: attempt power cycle [ 847.225786][T13524] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 847.266489][T13524] usb 1-1: device descriptor read/8, error -71 [ 847.619986][ T5950] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 847.675567][ T982] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 848.004240][T13524] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 848.020459][ T5950] usb 4-1: config 0 has no interfaces? [ 848.053295][T13524] usb 1-1: device descriptor read/8, error -71 [ 848.096187][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.111692][ T5950] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 848.155614][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 848.166201][T13524] usb usb1-port1: unable to enumerate USB device [ 848.181609][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.236702][ T982] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 848.246532][ T5950] usb 4-1: Product: syz [ 848.283888][ T5950] usb 4-1: Manufacturer: syz [ 848.290373][ T5950] usb 4-1: SerialNumber: syz [ 848.321984][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.366737][ T5950] usb 4-1: config 0 descriptor?? [ 848.376882][ T982] usb 3-1: config 0 descriptor?? [ 848.386220][T15654] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 848.545452][T13524] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 848.723363][T13524] usb 5-1: config 0 has no interfaces? [ 848.733034][T13524] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 848.745475][T13524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.767449][T13524] usb 5-1: Product: syz [ 848.771681][T13524] usb 5-1: Manufacturer: syz [ 848.787152][T15651] openvswitch: netlink: IPv6 tunnel dst address is zero [ 848.802580][T13524] usb 5-1: SerialNumber: syz [ 848.809994][ T982] usbhid 3-1:0.0: can't add hid device: -71 [ 848.818155][ T982] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 848.822479][T13524] usb 5-1: config 0 descriptor?? [ 849.171841][ T982] usb 3-1: USB disconnect, device number 125 [ 850.678550][ T982] usb 4-1: USB disconnect, device number 45 [ 851.105540][ T982] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 851.116878][T13497] usb 5-1: USB disconnect, device number 22 [ 851.277669][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.289676][ T982] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 851.315382][ T5950] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 851.343930][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.374740][ T982] usb 4-1: config 0 descriptor?? [ 851.462041][T15703] unknown channel width for channel at 909000KHz? [ 851.546371][ T5950] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 851.563187][ T5950] usb 3-1: config 0 has no interface number 0 [ 851.580485][ T5950] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 851.595144][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.615179][ T5950] usb 3-1: config 0 descriptor?? [ 851.733000][ T30] audit: type=1800 audit(1754607140.517:2716): pid=15708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2510" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 851.734737][ T5950] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 851.768355][ T5950] usb 3-1: setting power ON [ 851.780089][ T5950] dvb-usb: bulk message failed: -22 (2/0) [ 851.786884][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 851.856244][T13497] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 851.938008][ T43] usb 2-1: device descriptor read/64, error -71 [ 851.956012][ T5950] dvb-usb: bulk message failed: -22 (1/0) [ 852.040046][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 852.056546][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 852.068069][T13497] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 852.079070][T13497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.079977][ T5950] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 852.088235][ T68] ------------[ cut here ]------------ [ 852.104557][ T68] WARNING: CPU: 0 PID: 68 at io_uring/io_uring.c:2981 io_ring_exit_work+0x4ed/0x930 [ 852.114199][ T68] Modules linked in: [ 852.118591][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 852.130490][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 852.140664][ T68] Workqueue: iou_exit io_ring_exit_work [ 852.146403][ T68] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 852.152348][ T68] Code: c6 05 88 ac 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 8e 1d 72 00 e9 7b fe ff ff e8 34 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 852.172724][ T68] RSP: 0018:ffffc9000210f8e0 EFLAGS: 00010293 [ 852.178995][ T68] RAX: ffffffff812b687c RBX: 000000010000d6de RCX: ffff88801c3d8000 [ 852.187297][ T68] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 852.195593][ T68] RBP: ffffc9000210fa70 R08: ffffc9000210f867 R09: 1ffff92000421f0c [ 852.204111][ T68] R10: dffffc0000000000 R11: fffff52000421f0d R12: 000000010000d6da [ 852.212275][ T68] R13: ffff888022688310 R14: ffff888022688480 R15: dffffc0000000000 [ 852.220456][ T68] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 852.229655][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.236348][ T68] CR2: 00002000000e9030 CR3: 00000000302b2000 CR4: 00000000003526f0 [ 852.244738][ T68] Call Trace: [ 852.248244][ T68] [ 852.251298][ T68] ? __pfx_io_ring_exit_work+0x10/0x10 [ 852.256990][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.262418][ T68] ? process_scheduled_works+0x9ef/0x17b0 [ 852.268575][ T68] ? process_scheduled_works+0x9ef/0x17b0 [ 852.271942][ T5950] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 852.274435][ T68] process_scheduled_works+0xade/0x17b0 [ 852.274504][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.285309][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 852.288415][ T68] worker_thread+0x8a0/0xda0 [ 852.302586][ T5950] dvb_usb_cxusb 3-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 852.307512][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 852.307559][ T68] ? __kthread_parkme+0x7b/0x200 [ 852.307595][ T68] kthread+0x70e/0x8a0 [ 852.307625][ T68] ? __pfx_worker_thread+0x10/0x10 [ 852.307648][ T68] ? __pfx_kthread+0x10/0x10 [ 852.342368][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.347852][ T68] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.353096][ T68] ? __pfx_kthread+0x10/0x10 [ 852.357846][ T68] ret_from_fork+0x3fc/0x770 [ 852.362565][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 852.367746][ T68] ? __switch_to_asm+0x39/0x70 [ 852.372983][ T68] ? __switch_to_asm+0x33/0x70 [ 852.378042][ T68] ? __pfx_kthread+0x10/0x10 [ 852.383119][ T68] ret_from_fork_asm+0x1a/0x30 [ 852.388068][ T68] [ 852.391135][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 852.398618][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 852.410452][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 852.420789][ T68] Workqueue: iou_exit io_ring_exit_work [ 852.426422][ T68] Call Trace: [ 852.429818][ T68] [ 852.432852][ T68] dump_stack_lvl+0x99/0x250 [ 852.437499][ T68] ? __asan_memcpy+0x40/0x70 [ 852.442200][ T68] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.447417][ T68] ? __pfx__printk+0x10/0x10 [ 852.452093][ T68] vpanic+0x281/0x750 [ 852.456088][ T68] ? __pfx__printk+0x10/0x10 [ 852.460694][ T68] ? __pfx_vpanic+0x10/0x10 [ 852.465378][ T68] ? is_bpf_text_address+0x26/0x2b0 [ 852.470697][ T68] panic+0xb9/0xc0 [ 852.474524][ T68] ? __pfx_panic+0x10/0x10 [ 852.479054][ T68] __warn+0x31b/0x4b0 [ 852.483088][ T68] ? io_ring_exit_work+0x4ed/0x930 [ 852.488226][ T68] ? io_ring_exit_work+0x4ed/0x930 [ 852.493433][ T68] report_bug+0x2be/0x4f0 [ 852.497958][ T68] ? io_ring_exit_work+0x4ed/0x930 [ 852.503080][ T68] ? io_ring_exit_work+0x4ed/0x930 [ 852.508214][ T68] ? io_ring_exit_work+0x4ef/0x930 [ 852.513338][ T68] handle_bug+0x84/0x160 [ 852.517772][ T68] exc_invalid_op+0x1a/0x50 [ 852.522377][ T68] asm_exc_invalid_op+0x1a/0x20 [ 852.527614][ T68] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 852.533383][ T68] Code: c6 05 88 ac 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 8e 1d 72 00 e9 7b fe ff ff e8 34 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 852.553370][ T68] RSP: 0018:ffffc9000210f8e0 EFLAGS: 00010293 [ 852.559672][ T68] RAX: ffffffff812b687c RBX: 000000010000d6de RCX: ffff88801c3d8000 [ 852.567761][ T68] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 852.576007][ T68] RBP: ffffc9000210fa70 R08: ffffc9000210f867 R09: 1ffff92000421f0c [ 852.584071][ T68] R10: dffffc0000000000 R11: fffff52000421f0d R12: 000000010000d6da [ 852.592053][ T68] R13: ffff888022688310 R14: ffff888022688480 R15: dffffc0000000000 [ 852.600169][ T68] ? io_ring_exit_work+0x4ec/0x930 [ 852.605334][ T68] ? __pfx_io_ring_exit_work+0x10/0x10 [ 852.610844][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.616157][ T68] ? process_scheduled_works+0x9ef/0x17b0 [ 852.621979][ T68] ? process_scheduled_works+0x9ef/0x17b0 [ 852.627704][ T68] process_scheduled_works+0xade/0x17b0 [ 852.633385][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.639493][ T68] worker_thread+0x8a0/0xda0 [ 852.644402][ T68] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 852.650954][ T68] ? __kthread_parkme+0x7b/0x200 [ 852.655916][ T68] kthread+0x70e/0x8a0 [ 852.660097][ T68] ? __pfx_worker_thread+0x10/0x10 [ 852.665241][ T68] ? __pfx_kthread+0x10/0x10 [ 852.669874][ T68] ? _raw_spin_unlock_irq+0x23/0x50 [ 852.675262][ T68] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.680583][ T68] ? __pfx_kthread+0x10/0x10 [ 852.685190][ T68] ret_from_fork+0x3fc/0x770 [ 852.689799][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 852.694928][ T68] ? __switch_to_asm+0x39/0x70 [ 852.699816][ T68] ? __switch_to_asm+0x33/0x70 [ 852.704615][ T68] ? __pfx_kthread+0x10/0x10 [ 852.709331][ T68] ret_from_fork_asm+0x1a/0x30 [ 852.714215][ T68] [ 852.717624][ T68] Kernel Offset: disabled [ 852.721965][ T68] Rebooting in 86400 seconds..