last executing test programs: 14.346489852s ago: executing program 1 (id=2062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x8040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x15c, 0x29, 0x400, 0x70bd27, 0x25dfdbfd, {0x1c}, [@nested={0x54, 0x11d, 0x0, 0x1, [@generic="0071a7face9632f601d4ca52eb49f75d5abace52b3cfb0ce8dc458056890cfca65a6b4886e3729df454d7268abb2b988c027d8781b7a99612d2013556d75821cd13bcda9b66c472edd23d70da42910f3"]}, @generic="7e53cec439bd10693f9ffda87c9443a1d0e53fef414b4b7c57e2f80a39cce35d5d4dd304518b69de763f01a912aa199cb20e9ed9d37ae040d22108d671587be7a8c946eae38ccba588e08b5d3b0f7ab0f637fdfb0f08ac04e33099eeca387276bb6a9a2052f069acbfa816dba56f83e1bca7f017911f55c599d2bafd7b", @nested={0x54, 0x13b, 0x0, 0x1, [@typed={0xc, 0xe5, 0x0, 0x0, @u64=0x9}, @generic="cd14e32ce88359b414c40d2f277d6872194d116f547019e6d26907615e60cea2e041776008a5a0b4e486540a90c75453ad6192cfa8b4201c8f4f9c32e90e11d9fcd65920"]}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x9}]}, 0x15c}, 0x1, 0x0, 0x0, 0x110}, 0x20000040) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010070000904ff132f7ff1000000013c7706223fbe56431906dd20e4a9350100000a2401d21eb2905335c5746809b6043714d9626d4cde810f1ee8ad8731f1ead959481d1f638d0a918e2cf53039d2d1620cbbc122cbf084ced32c447488487475f33cf398eed1f6ba815d39419ad52238aa6092f2b9a4e4fa5bc7034c5e2be3b83695a0df38e4a8bf402f012bb3e82b90363445f2f6d0199319e3238a076b48ec655a536e05f5384983d9fd496c78b7b7718aaf6c4e597d798d9aef5d1c8340fc147874cd44717edf44a39f2b23a64bd32c1b3c62d377ee3fb8"], 0x0) syz_usb_connect(0x1, 0x207, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xc7, 0x70, 0x64, 0x8, 0x421, 0x1d4, 0x9ffe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f5, 0x1, 0x98, 0x8, 0x90, 0xe, [{{0x9, 0x4, 0xa1, 0x3, 0x2, 0x2, 0x2, 0xff, 0x42, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x80, 0x8, 0x81}, [@mdlm={0x15, 0x24, 0x12, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x1, 0x7, 0x7, 0x1, 0xff}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "d2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9f, 0x7, 0xb}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x71d3, 0xf, 0xe3, 0x1000, 0xb}, @mdlm_detail={0x45, 0x24, 0x13, 0x4, "fe4492f8b16bc39379ab9ebe6f4a2b3bc0912e7388e9d6311378542bd130423aed87e72aa6d8ba9d054d8dbed795e89c49ec17e686d9fb54c5e55dae4c0d1fae6a"}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0xa3, 0x24, 0x13, 0x56, "42f7bfc12129edf33c7cb3b4eb8b8e612881477e1c5583efce3a8d3e98d60a40076b60653c12a5b56bd17f8a3301b7365df9cd404f4140dbec9e340b8ce95e8658a2f50268e6f95b30c89a231920f92f8d17a52a03225d87abcae66451c386eeab6e7342016db9878d9255fbb696494c266450904ed2d6dd6753425e7af8b4a2d94c6385a7df4192a9f066938347000bd783238ccb77da922db0090958c844"}, @mdlm_detail={0x78, 0x24, 0x13, 0x8c, "adb21743fcc9cac36aaf794a1f21f111e5ae3a0db5e0522e34a08f670128896096596a22fffe6d1b2f568cc6088ba87367168ff79dfbd1b2945ed00c616030b7155c8cf6c083360395e93767b35fb9c085f6f4b78b289186d8fe0c18b31b65411398eb4b19110687ea70c8a8e8a7438b0984f7f7"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x7f, 0xb, [@generic={0x8, 0xb, "d70a12345a08"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x7f, 0x4, 0x9a, [@generic={0x8, 0xb, "8d77ecad1235"}]}}]}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x5f, 0x0, 0x5d}) 11.923861109s ago: executing program 1 (id=2067): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote, 'bond_slave_1\x00'}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="9b729c42e4f9ee0e0e6fa8f400000000000000000000000500004eee71a61bd3aca5bbb849552905e774546badb713a860835a09682b3386e7cecb1ee30a4e4a12e18f589569ed535d6e3c126a565edcf634ffbb2f2671a1c7e1724f7ac0c756eaf6b44951f01401e0ce8f", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000030000000100"/28], 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xd, r0, 'id1\x00'}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) writev(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)='g', 0x1}], 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000340)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x80, 0x3c, 0x3d, 0x8, 0xe96, 0xc001, 0x623f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x0, 0x35, 0xbb, 0xe2}}, {{0x9, 0x4, 0x59, 0x0, 0x0, 0xd5, 0x6e, 0xb7}}]}}]}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(r10, &(0x7f0000000380)={[0x10]}, 0x8) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000840)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265006c7f306003d8a0f4bd0000000000e8ff00", [0x0, 0x2000000000001]}}) 10.668022751s ago: executing program 4 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000000, 0x33d, 0x8}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x824c}}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3, 0x19ef, 0x3, 0x7, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) 10.563843041s ago: executing program 4 (id=2073): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0xf, 0xf, {0xf, 0x1c, "78a0186e187e7931903a1be65e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.13202297s ago: executing program 1 (id=2074): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x2500}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffff5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x3c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r7) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x28) r9 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4620, @empty}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) eventfd(0xff7ffff7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 10.112677205s ago: executing program 2 (id=2075): syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x0, [{@remote, 0x4e210000}]}, @generic={0x44, 0xe, "22f57e87b826edbb3b136d3b"}]}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xfffffffe, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x0, [{@remote, 0x4e210000}]}, @generic={0x44, 0xe, "22f57e87b826edbb3b136d3b"}]}}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) 9.988022078s ago: executing program 2 (id=2076): keyctl$assume_authority(0x10, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002060500000000000000000000000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000050005000200000086c6ced6773998dba46fab09478c43144cf0b36fb48eecaba9ab7e82e0cc62426d502eed06b3696fb17b41f6000000000000f0274876b3acc71a91aec189b293"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x48080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000000800000095000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setrlimit(0x9, &(0x7f0000000080)={0x10000, 0x3025}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) 9.406408744s ago: executing program 1 (id=2079): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x10800) readahead(r0, 0x1800000000, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0xff, 0x4, 0x8, 0x0, "f568ef94abbbb9723dfdc1c8a4f107062aa46e69e7398cda159ac832cad6eaa4789f77abb82890b6f9e3d917d27078c87638b0c637a1f7241d18e056dd6f8ef9", "ad1e76b16c4740b3be036bc62cd5c2c41ff451e64b9f91135c0ba46828ef6a90", [0x2, 0xffffffff]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) io_uring_enter(0xffffffffffffffff, 0x5f7, 0x5253, 0x0, &(0x7f0000000180)={[0x5]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@host, 0x2}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d4, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xddab}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="34e1bfe9cc7c1d1343c6ee0b2bd88e7684a053c042652fda69f6d0fb8e197b07"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="76c3a32b840f7c4c62ab2310c889dac3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1713e3bd60934fda6e46573ba32f0ed9320e72de52c1bc48"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "17c48973438d5347"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f7cce9e4060850d313050e777a3c969e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="adc4b7e3bcf17e8934e87fbe2b1b8aa140d45d254f16e14d7393f2a125348b23"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a763aeeaebda9e5411079b51ce4e012c8f21b3c4dcbc56c580a900dd9c5ae8fd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="af880e0e9ba57e1693cf907e8a02e1be8beaf9c9e545a56c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x52}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8f12e064d4645b3074ae1f76c16d19694d7aca170a59b25f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="73a328071c1e600d8a527eb58122838e"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eacfdb1adac601c2c56bc12bd98fb89927c5da3aa727b9bc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dd122fd646596d7d552c46bc0fd77fcb3b4d3c00b593505c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9a}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41fb5d52b980a9ce00ea0fb483740e98"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93e6f1cc2a337af6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4804e831ea84fa16"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004801}, 0x40000) r4 = syz_clone3(&(0x7f00000009c0)={0x80000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x35}, &(0x7f0000000780)=""/237, 0xed, &(0x7f0000000880)=""/254, &(0x7f0000000980)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58) r6 = syz_open_procfs(r5, &(0x7f0000000a40)='mounts\x00') r7 = syz_open_pts(r6, 0x28000) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000a80)={@hyper}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000ac0)={0x1, 0x0, [{0x80000000, 0x1ff, 0xa, 0x7500, 0x4}]}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000b00)='syz1\x00', 0x1ff) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000b40)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000b80)=0x6, 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000bc0), 0x10, 0x20040) ioctl$USBDEVFS_DISCARDURB(r9, 0x550b, &(0x7f0000000c00)=0x8000000000000000) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000c40)={r4}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000d00)={&(0x7f0000000c80)=""/81, 0x304000, 0x800}, 0x20) sendto$packet(r6, &(0x7f0000000d40)="30b478d906d4edf9bc8b5c649701c2412c713b0f19d5c5d42ac622f29ba8079f360a155b443051bcba71952b71e1cd0f3b6fb779459edcfb5da9a44ce5e1648dfb18d7cdfc6d5617bc90eb88130a95582f8c099aa6961759487d1d4134838e397ff6c5a2a1fae1bde2b95515e77d6cf76c25a63cca08f4a2a6161371f110feaa7d6235e2aa258be6e2c654847b3fc413dc511f9357f9f5e452318dd3546114fa4310cbcba06ecede9fd29f35692b933d5eb31a81f0739d92d579f53322d4e0ff356e751e8d7868858d380fd9e74bd618021db15896feb1e77a2125dc", 0xdc, 0x4000084, &(0x7f0000000f00)={0x11, 0x5, 0x0, 0x1, 0x81}, 0x14) 8.475927297s ago: executing program 4 (id=2080): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x1c) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000000c0)=""/106) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x16c9a57107008633, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x5}, @ptr={0x9}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000440)=""/113, 0x44, 0x71, 0x0, 0x3ff}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x16, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xcc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x10000, 0xfb, &(0x7f0000000280)=""/251, 0x41000, 0x4, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xc, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x5, 0x8, 0x7}, {0x0, 0x2, 0xd, 0x4}], 0x10, 0xcfb}, 0x94) syz_open_dev$dmmidi(&(0x7f00000006c0), 0xffffffffffffff01, 0x24f00) (async) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000700)={{0x2, 0x4e20, @loopback}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x50, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 'veth0_to_batadv\x00'}) (async) getsockname$l2tp(r2, &(0x7f0000000780)={0x2, 0x0, @initdev}, &(0x7f00000007c0)=0x10) (async) sendmsg$nl_route(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000900)) (async, rerun: 64) syz_io_uring_setup(0x3797, &(0x7f0000000940)={0x0, 0xef93, 0x2, 0x0, 0x131, 0x0, r2}, &(0x7f00000009c0), &(0x7f0000000a00)=0x0) (async, rerun: 64) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000b00)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r2, &(0x7f0000000a40)=0x80, &(0x7f0000000a80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x0, 0x400, 0x0, {0x0, r7}}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x1}}, 0x0, 0x7, 0x9, 0xe, 0x1}, &(0x7f0000000c00)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000c40)={r8, 0x3}, 0x8) (async) close_range(r1, r1, 0x0) (async) shutdown(r2, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000c80)={'tunl0\x00', r3, 0x7800, 0x40, 0x7, 0x2, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0xf, 0x2d, 0x0, @multicast2, @private=0xa010100, {[@lsrr={0x83, 0x17, 0x1c, [@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0xb, [0xec]}, @timestamp_addr={0x44, 0x1c, 0x6a, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, {@empty, 0x2}, {@local, 0xfffffff8}]}, @rr={0x7, 0x23, 0x78, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @remote, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000d80)={0x80, 0x9, 0x0, 'queue0\x00', 0xffff8001}) r9 = syz_open_dev$vcsa(&(0x7f0000000e40), 0x0, 0x280) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ec0), 0x4) (async, rerun: 32) r11 = syz_open_dev$mouse(&(0x7f0000000f00), 0x5, 0x246100) (async, rerun: 32) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000f40)={0x0, @local, @remote}, &(0x7f0000000f80)=0xc) sendmsg$nl_route(r9, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)=@dellinkprop={0xe8, 0x6d, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4f604, 0x1}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6erspan0\x00'}, @IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x648ed}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48004}, 0x600c890) (async, rerun: 64) connect$inet6(r11, &(0x7f0000001140)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xaf}, 0x1c) (async, rerun: 64) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 8.28795732s ago: executing program 1 (id=2081): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500000000000000003f000000", @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 8.211139496s ago: executing program 4 (id=2082): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010700000000fedbdf2567000000060003"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000003480)=""/188, 0xbc}], 0x1, 0x33, 0x0) 7.923940608s ago: executing program 4 (id=2083): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa94d, 0x1, 0xfffffffd, 0x179}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1ec1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = dup(r3) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x6) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x1006, 0x9}, 0xc) close(r1) pselect6(0x40, &(0x7f0000000100)={0x6, 0x5, 0x2, 0x7, 0xfffffffffffffff9, 0x1, 0x7, 0x800000}, &(0x7f0000000140)={0x7, 0x7, 0x1, 0x9e7, 0x1, 0xb7, 0x6, 0x10}, &(0x7f00000001c0)={0x23, 0xd, 0x809, 0x5, 0x2, 0x5fcc, 0xf, 0x7ff}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) sendmmsg(0xffffffffffffffff, &(0x7f000000bdc0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)="85f3bc68fa613f656ef3eee8087bf8d63c27d9b644e9d196852e6646126e9d067e2520af99c1ec0f61e3a2508689c169b34a3facfee353b020ca01326b2406f6c930f759a6d53457abadf0b153e8d02a45a67acbc0beae9bd2a97dd234d2f249ef56fa3e4c5bbac622309f01", 0x6c}], 0x1}}], 0x1, 0x10) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003020000000203f02fadd5b6a2181089973458a56d4c7913cf79b1889b308d6a531dda65cbef3e21b13ae2585945a6ecf04f4585da2a17dd74b52b99606adc37e82c65889c5a144f3c5b38f16c6fc32b8a23ef6f85c4b1c5bca50d21f4152c0b0ce0ad309345d2c767350e"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000000000)=ANY=[]) syz_io_uring_setup(0x75cd, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x824c}}) 7.171280391s ago: executing program 2 (id=2084): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012002a00ff150048035c3b61c1d67f0094007134cf6efb8007a007a290457f01a7ceeda5e4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daff260d128397237839d7964769b8a6fa5ffc7916ffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b727603000000efab70cdb67e8d1cc5c7b06b1eab31f7b0", 0xd8}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x7fffffff, 0x4000000000800002, 0xffffffffffff7ffc, 0x7, 0x3e, 0x6, 0x2, 0x40000, 0x5, 0xfda, 0x10000000009, 0x1, 0x2, 0x1002], 0x1, 0xc0111}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mremap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000010000/0x3000)=nil) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) r9 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000013000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$watch_queue(&(0x7f0000000180), 0x80) 6.84281251s ago: executing program 3 (id=2085): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000b000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.932690571s ago: executing program 4 (id=2087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x40082) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) renameat(r2, &(0x7f0000000240)='./file0/file0\x00', r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0x10000, 0x294, 0x40, 0x3, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x4a91c921, 0x4}], "", ['\x00']}, 0x178) close(r4) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x161, 0x40000867, r6, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 4.567878561s ago: executing program 2 (id=2088): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x8, @vbi={0xd, 0xf, 0x8e2, 0x31363553, [0x80000001, 0x6], [0x8, 0x1], 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) 4.216400593s ago: executing program 1 (id=2089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000480) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) listen(0xffffffffffffffff, 0x5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_destroy_chunk\x00', r6, 0x0, 0xb}, 0x18) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5, 0x0, 0x400000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0x2, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004c9, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect(0x0, 0x286, 0x0, 0x0) 4.21595749s ago: executing program 2 (id=2090): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000982000/0x4000)=nil, 0x4000, 0x2000005, 0x10, 0xffffffffffffffff, 0xbfd77000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33a000, 0x1000}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r5, 0x0, r6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$tipc(r2, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) mbind(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000140)={0x5, 0x47314356, 0xad4, 0xb, 0x1, @stepwise={{0x4da, 0x6}, {0xc, 0x9}, {0xfffffff8, 0x3}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.211450499s ago: executing program 0 (id=2091): r0 = socket$inet6(0xa, 0x3, 0x8001) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x3b, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x11, 0x1a, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7ff}, @pad1, @generic={0x40, 0xbc, "054bfff571eec4c190eca5f427137408f56c194173361b7668e5a6a87b6f694e1a486e8335730e526c16562d02257b5f218a6a45a02b12e39c3bb9ebe9c7709938761511e16fe3b3753696b0b19974388c31274dd6509675f2eba8eb1ab6fca055128c290fc2c5ebb99182bdb04ec7d9098a88be40660949f7930850cb4e7a44ce79829f40a6351aa7f1669afcc066f5f9f8c506f9b7e887459ec1b625bd165b77ad26c16fcfad497bf8c1283661ef9ede148a2deb2d14e148c2cc91"}, @padn={0x1, 0x1, [0x0]}, @pad1]}, 0xd8) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = signalfd(r1, &(0x7f0000000180)={[0x200]}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000200)=0x6) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'bridge_slave_1\x00', 0x2000}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000280), 0x10) sendfile(r0, r2, &(0x7f00000002c0)=0x6, 0x8) r3 = socket$inet6(0xa, 0x3, 0x59b) r4 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x5, 0x101080) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) select(0x40, &(0x7f0000000340)={0x9, 0x7, 0x8, 0x5, 0x100000000, 0x100000001, 0x0, 0x3ff}, &(0x7f0000000380)={0x800, 0x10000, 0x2, 0xef9, 0x10, 0x7, 0x3, 0xffffffff}, &(0x7f00000003c0)={0x824f, 0x6000000000000000, 0xffff, 0x4, 0xfff, 0x7fffffff, 0x80000001, 0x6}, &(0x7f0000000400)={0x77359400}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000440)) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000500)=0xfa) syz_open_dev$vim2m(&(0x7f0000000540), 0xfffffffffffffff7, 0x2) fsopen(&(0x7f0000000580)='ext4\x00', 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000005c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x7, 0x0, [{0x804, 0x0, 0x7}, {0x368, 0x0, 0x8000}, {0x805, 0x0, 0x5}, {0x34b, 0x0, 0x100000000}, {0x944, 0x0, 0xe7}, {0x9af, 0x0, 0x7878}, {0xb1b, 0x0, 0x9}]}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000006c0)={0x7, 0x20, '\x00', 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x1d9041) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001940)={0x1000, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/207, 0xcf}, {&(0x7f0000001840)=""/86, 0x56}], &(0x7f0000001900)=[0x0, 0x6, 0x101, 0x2], 0x3}, 0x20) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000001980), &(0x7f00000019c0)=0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000001a80)={&(0x7f0000001a00)=""/86, 0x56}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001bc0)={'virt_wifi0\x00', &(0x7f0000001ac0)=@ethtool_perm_addr={0x20, 0xc9, "aeb35ebb4b8705d8815fa9c21041fef4b3f1978b1b4df719e6b1339a5cb1251f18b014c310d74338ab8c18ab1e9bc9e5c817d6565bca5fe86da15d294cdf9f92c109bcc9db1732c1c7d64f30834e7e7bcdfbc23f3d978df59fd1212764171f6248b6d276f0d8a94edc3acd5938c7b6df21a37ef768bdfaed2241cf537de1a314eb471bf3faaa66dcd99f3a44b613a88ea93cba629f3f7e71fb8089e105ef17ae7fb8006e15c5db3bad0cd826c68e3fb25c9761c9f4231ce4aa9d008aa64dbddb455bc3d060987e80bd"}}) 3.895929275s ago: executing program 3 (id=2092): timer_create(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x40040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c00110019010100000000000000000000000000200100000000fffffffffffffffd0001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 3.497236138s ago: executing program 0 (id=2093): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x301000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003480)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000400)="f4", 0x1}], 0x1}}], 0x1, 0x24040800) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3ff, 0x6, 0x2, 0x0, 0x2}, &(0x7f0000000040)=0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/146, 0x92}], 0x1) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000180)={{@my=0x1, 0x9}, 0x6, 0x1}) 3.455076977s ago: executing program 3 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200110e0000000000000000cb000000975b3419c0"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x28, 0x8, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x80}, {0x6, 0x0, 0x0, 0x100b100}]}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) 3.184162161s ago: executing program 0 (id=2095): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffff800, 0x12b000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000280)=""/108) syz_usb_connect(0x7, 0x48, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES8=r0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1555576a}) 3.0221116s ago: executing program 3 (id=2096): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905827931"], 0x0) 2.470875896s ago: executing program 0 (id=2097): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000189c8920950b3b2fe5600102030109021600010000000009449a00005dac530094a1e146432e"], 0x0) timerfd_create(0x0, 0x80000) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000e00)={0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "060c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "999c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) userfaultfd(0x801) (async) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r6 = pidfd_getfd(r4, r5, 0x0) readlinkat(r6, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) (async) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x3, [@enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x2}, {0x7}, {0xe, 0x45}, {0xe, 0x80000000}]}, @struct={0x1, 0x6, 0x0, 0x4, 0x0, 0x6d, [{0x5, 0x2, 0x6}, {0x7, 0x1, 0x4}, {0x5, 0x4, 0x7f}, {0x2, 0x3, 0xc1}, {0x4, 0x2, 0x4}, {0xc, 0x4}]}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0xe, 0xc}, {0xb, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0xc}, {0x4, 0x800}, {0x6, 0xa}, {0x2, 0x8}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x7a, 0x7}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/255, 0x103, 0xff, 0x0, 0x2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x1, 0x2, 0x8, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xf3, &(0x7f0000000140)=""/243, 0x41000, 0x42, '\x00', r8, 0x25, r10, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x9, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async, rerun: 32) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffee6, 0x1, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) syz_clone3(&(0x7f0000000980)={0x20002400, &(0x7f0000000000), &(0x7f00000006c0), &(0x7f0000000700), {0x37}, &(0x7f0000000740)=""/35, 0x23, &(0x7f0000000800)=""/128, &(0x7f0000000880), 0x0, {r6}}, 0x58) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.171546768s ago: executing program 3 (id=2098): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$kcm(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0xffffffff, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x40, 0x64, 0xb}, [@NDA_LLADDR={0xa, 0x2, @random="8b552216a70f"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffff1ab, 0x105242) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(tnepres-generic)\x00'}, 0x58) connect$qrtr(r7, 0x0, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 841.977008ms ago: executing program 0 (id=2099): memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000']) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="cec48d4c37ef574f38d15e0faef69db1b953a8b2b062f82e8f2cdea600dc85c646e0f41bcec1cb1b89e1d6788ab660dccd953ef9ab668ca64ae1a7b1b6b36f5c28f81966875f1b53c0b6980032d9279e71fd4901e1b0433ea1d254fb41", 0x5d}], 0x1, 0x0, 0x0, 0x40000}, 0x1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000fc0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90bef903057465406c7f306003d8080000000000000000c200", [0x5]}}) 442.190733ms ago: executing program 3 (id=2100): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @loopback}, &(0x7f00000001c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x7, 0x9, 0x8, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905849d"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r1}, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0xc, 0x3, 0x0, 0x0, 0xfffffffd, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000380)={r9, 0x40000, 0x1ff, 0x7fff, 0x0, [0x0], [0x9, 0x402, 0xffffffff, 0x8], [0x3, 0x20000003, 0x103, 0xd], [0x1000010000000, 0x1, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x13, r11, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) socket(0x1d, 0x1, 0x7) socket$inet6(0xa, 0x2, 0x88) r12 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, 0x54593, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 197.37045ms ago: executing program 2 (id=2101): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) (async) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@local, @remote}, &(0x7f00000000c0)=0xc) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000200)={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, "58c947", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000280)={0x10000, 0x108000}) 0s ago: executing program 0 (id=2102): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000001280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000001300)="d55e25b033e964e250d25a3a06041bca3f65d734d25e9906785ecd4929932d5a5890b8842bfdb673d3478f11489bf2b0407c24cdd8e65f84d50cd76daf5863c7fe9d4f7e56218d775056426a01a88ce13903d7e9393508d1a778868924469439845b62f6be86ebd43d88f675cf4c83780c8db7a002c3c32945d4afe14c4594127f2491fd5dff216c823ce75b00c679e6c3a6a84f8bf293f82f5a5b647b0503334e75c9d72ab1c37bd5e7fb3c8c7935bb856eaf099e1b8a4b258af97f94008e87fa9b3bf2eede7b68314900", 0xcb}, {&(0x7f0000001400)="0d9309f97a68fb56f7a4cec92e9c18a540b395c8507fba3003ccef75ba19fc7149785af32aace50185d74f8d63e24c7dc338dbcd73cdd673f410f23f7c31594f68cd86b0877935f87a9de8b674fc73cc817baf58edb39232eb9884027cce25fc1da1ae05caf5184ab4e9fc5d6972519a585d8f0bc32483076f763f3b0398554062e21812ff9703af07c400b7ded020abe750beb7845ea1854ba5346cca160d2ceab0a971aa381ce58c5bde55480fbca6c41f8dc9b280c3aa9dd5e64699ff7842685bd704cd40f564f7e394b4962c0c66dd192ea7e43ea91c288f68270db007ef5278ea4417898301088afbf1896e42914e206f5bac9853", 0xf7}, {&(0x7f0000001640)="0330b927c55dd2ad79e3a6c9a8b2fb4d6decc0ca161d412805f73f6243d8b05c9b243b694ae81ec1c529ba383a971e4f99f0c5196fc61b4eff66eb56f339996d32701bd043b3c426ea3db435dccd76fa93b37d42a11eea42f7e9f4f0437fda77287ee7fcf0cc3ea58e7146633413d37c97743243cebb09b4a326ec73b8253b07f6256ff9f39fba9b1cf72dd2af0ef8d40b02ce32ff660b37413dc23280679158965af1e4d43b7627b696ec56bd3a8bc30301b5f4a93a87424062f5d635d3595fa36d6690abae56059bb2968a66222f73e2beb44858dc0967f82782246182db4839d71f98d59847161c06", 0xea}, {&(0x7f00000041c0)="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", 0x1000}], 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='@\x00\x00\x00'], 0x68, 0xc044}}], 0x1, 0x4008808) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000000)=0x7, 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x17dd03, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendto$packet(r4, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x20000080) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0xfffffffffffffffe, 0x0, &(0x7f0000000200)="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", &(0x7f0000001580)=""/140) syz_usb_connect(0x0, 0x81, 0x0, 0x0) io_uring_setup(0x4007fdb, &(0x7f0000001200)={0x0, 0xf7e4, 0x200, 0xfffffff7, 0x2f8}) r6 = fanotify_init(0x200, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) fanotify_mark(r6, 0x101, 0x48001051, r7, 0x0) fanotify_init(0x200, 0x40000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 503.035518][ T978] usb 2-1: 0:2 : does not exist [ 503.040708][ T978] usb 2-1: unit 255 not found! [ 503.106557][ T978] usb 2-1: 5:0: cannot get min/max values for control 1 (id 5) [ 503.138234][ T978] usb 2-1: USB disconnect, device number 90 [ 503.220231][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.266573][ T5893] usb 1-1: device descriptor read/64, error -71 [ 503.305914][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 503.417331][ T5893] usb usb1-port1: attempt power cycle [ 503.568697][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 503.847307][ T5893] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 503.867347][ T5893] usb 1-1: device descriptor read/8, error -71 [ 504.182465][ T5893] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 504.232486][ T5893] usb 1-1: device descriptor read/8, error -71 [ 504.347177][ T5893] usb usb1-port1: unable to enumerate USB device [ 505.519399][T11755] delete_channel: no stack [ 505.526561][ T5893] usb 3-1: USB disconnect, device number 89 [ 506.126427][ T5893] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 506.294992][ T5893] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 506.337545][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.427373][ T5893] usb 2-1: config 0 descriptor?? [ 506.462981][ T5893] gspca_main: spca508-2.14.0 probing 8086:0110 [ 506.596506][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 506.638726][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 506.651615][ T24] usb 4-1: can't read configurations, error -71 [ 506.908168][ T5917] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 506.913189][ T5893] gspca_spca508: reg_read err -32 [ 507.105844][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 507.114754][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.128483][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.140946][ T5893] gspca_spca508: reg_read err -71 [ 507.157814][ T5893] gspca_spca508: reg_read err -71 [ 507.158405][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 507.163460][ T5893] gspca_spca508: reg_read err -71 [ 507.177899][T11844] netlink: 'syz.2.1727': attribute type 4 has an invalid length. [ 507.244500][ T5893] gspca_spca508: reg write: error -71 [ 507.444791][ T5893] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 507.453338][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 507.465304][ T5893] usb 2-1: USB disconnect, device number 91 [ 507.587336][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 507.642002][ T5917] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 507.676461][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.697216][ T5917] hub 1-1:1.0: bad descriptor, ignoring hub [ 507.703364][ T5917] hub 1-1:1.0: probe with driver hub failed with error -5 [ 507.712025][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 507.721034][ T5917] cdc_wdm 1-1:1.0: skipping garbage [ 507.727777][ T5917] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 507.795189][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 507.952799][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.972296][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 507.995699][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.761352][ T5893] usb 1-1: USB disconnect, device number 78 [ 508.876103][ T5917] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 508.977836][T11861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 509.075097][ T5917] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.086632][ T5961] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 509.124135][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 509.166746][ T5917] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 509.176214][ T24] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 509.202312][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.220091][ T5917] usb 3-1: config 0 descriptor?? [ 509.236784][ T5961] usb 1-1: Invalid ep0 maxpacket: 32 [ 509.358733][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 509.377806][ T5961] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 509.391211][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 509.417234][ T24] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 509.444194][ T24] usb 4-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.480128][ T24] usb 4-1: config 253 interface 0 has no altsetting 0 [ 509.505895][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.535599][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.544099][ T24] usb 4-1: Product: syz [ 509.548796][ T24] usb 4-1: Manufacturer: syz [ 509.553494][ T24] usb 4-1: SerialNumber: syz [ 509.554160][ T5961] usb 1-1: Invalid ep0 maxpacket: 32 [ 509.575364][ T5961] usb usb1-port1: attempt power cycle [ 509.645668][ T5917] hid-generic 0003:0463:1215.001B: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.2-1/input0 [ 509.892213][ T24] cdc_ether 4-1:253.0: skipping garbage [ 509.906867][ T24] cdc_ether 4-1:253.0: skipping garbage [ 509.917001][ T24] usb 4-1: bad CDC descriptors [ 509.946922][ T5961] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 509.975080][ T24] usb 4-1: USB disconnect, device number 80 [ 509.996840][ T5961] usb 1-1: Invalid ep0 maxpacket: 32 [ 510.105351][ T5893] usb 3-1: USB disconnect, device number 90 [ 510.115461][T11881] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 510.131080][T11881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.157120][ T5961] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 510.207913][ T5961] usb 1-1: Invalid ep0 maxpacket: 32 [ 510.215321][ T5961] usb usb1-port1: unable to enumerate USB device [ 510.297476][T11885] binder: 11884:11885 ioctl c0306201 200000000640 returned -22 [ 510.594489][T11890] netlink: 'syz.1.1739': attribute type 4 has an invalid length. [ 510.664569][T11890] syzkaller1: entered promiscuous mode [ 510.681384][T11890] syzkaller1: entered allmulticast mode [ 510.897960][ T5917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 511.083813][ T5917] usb 4-1: config 0 has no interfaces? [ 511.112047][ T5917] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 511.160697][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.188417][ T5917] usb 4-1: Product: syz [ 511.195272][ T5917] usb 4-1: Manufacturer: syz [ 511.222934][ T5917] usb 4-1: SerialNumber: syz [ 511.288317][ T5917] usb 4-1: config 0 descriptor?? [ 511.324151][ T5893] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 511.388901][ T5961] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 511.523342][T11892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.533462][T11892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.566487][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 511.571634][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 511.590013][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 511.607936][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.635460][ T5893] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 511.659056][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.683040][ T5893] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 511.726583][ T5961] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 511.750679][ T5893] usb 2-1: config 1 interface 0 has no altsetting 0 [ 511.771865][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.788827][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 511.814506][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.845058][ T5961] usb 5-1: config 0 descriptor?? [ 511.877824][ T5961] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 511.895071][ T5893] usb 2-1: Product: syz [ 511.907224][ T5893] usb 2-1: Manufacturer: syz [ 511.922692][ T5893] usb 2-1: SerialNumber: syz [ 512.005369][T11901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 512.149470][ T5917] usb 5-1: USB disconnect, device number 80 [ 512.155467][ C1] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 512.749802][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 512.860846][ T5185] bcm5974 2-1:1.0: could not read from device [ 512.936317][ T5185] bcm5974 2-1:1.0: could not read from device [ 512.944295][ T5893] usb 2-1: USB disconnect, device number 92 [ 512.969855][ T5185] bcm5974 2-1:1.0: could not read from device [ 513.582703][T11928] tipc: Started in network mode [ 513.592123][T11928] tipc: Node identity 4, cluster identity 4711 [ 513.613992][T11928] tipc: Node number set to 4 [ 513.677369][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 514.012697][T11943] netlink: 'syz.4.1753': attribute type 4 has an invalid length. [ 514.024060][T11943] syzkaller1: entered promiscuous mode [ 514.029801][T11943] syzkaller1: entered allmulticast mode [ 514.041293][ T5893] usb 4-1: USB disconnect, device number 81 [ 514.714293][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 514.786579][ T5900] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 514.969388][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 514.993227][ T5900] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.035850][ T5900] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.096577][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.117698][ T5900] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 515.171365][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.210078][ T30] audit: type=1326 audit(1751119439.695:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.247372][ T5900] usb 5-1: config 0 descriptor?? [ 515.305472][ T30] audit: type=1326 audit(1751119439.695:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.380138][ T30] audit: type=1326 audit(1751119439.745:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.440244][ T30] audit: type=1326 audit(1751119439.745:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.478824][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.487719][ T30] audit: type=1326 audit(1751119439.745:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.513184][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.585926][ T30] audit: type=1326 audit(1751119439.745:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.613944][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 515.650308][ T30] audit: type=1326 audit(1751119439.775:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.674086][ T30] audit: type=1326 audit(1751119439.775:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.700343][ T30] audit: type=1326 audit(1751119439.775:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.751037][ T30] audit: type=1326 audit(1751119439.775:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.1.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0d3f8e929 code=0x7ffc0000 [ 515.751498][ T5900] hid (null): global environment stack underflow [ 515.815661][ T24] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 515.855931][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 515.865016][ T24] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 515.900587][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.940245][ T24] usb 4-1: config 0 descriptor?? [ 516.126767][T11979] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1764'. [ 516.174385][ T5900] hid (null): usage index exceeded [ 516.194367][ T5900] hid (null): report_id 0 is invalid [ 516.201689][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 516.206620][ T5900] hid (null): global environment stack underflow [ 516.226506][ T5900] hid (null): unknown global tag 0x10 [ 516.264198][ T5900] usb 5-1: USB disconnect, device number 81 [ 516.279481][ T24] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 516.301708][ T5893] usb 4-1: USB disconnect, device number 82 [ 516.417719][ T5961] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 516.485985][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 516.504134][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.524316][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.553824][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.564556][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.587480][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 516.596192][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.604419][ T5961] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 516.625807][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.636572][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.644748][ T5961] usb 3-1: Product: syz [ 516.687074][ T5961] usb 3-1: Manufacturer: syz [ 516.691771][ T5961] usb 3-1: SerialNumber: syz [ 516.723058][ T5961] usb 3-1: config 0 descriptor?? [ 516.738679][T11985] xt_hashlimit: size too large, truncated to 1048576 [ 516.760118][ T5961] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 516.867630][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1765'. [ 516.886823][T11981] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 516.927330][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 516.944359][ T24] usbtmc 1-1:16.0: can't read capabilities [ 517.130094][ T5961] pwc: Failed to set LED on/off time (-71) [ 517.476396][ T5961] pwc: send_video_command error -71 [ 517.476412][ T5961] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 517.476509][ T5961] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 517.478450][ T5961] usb 3-1: USB disconnect, device number 91 [ 518.731221][ T5961] usb 1-1: USB disconnect, device number 83 [ 519.246667][ T5961] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 519.342243][T12016] kernel profiling enabled (shift: 17) [ 519.354557][T12016] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 519.362567][T12016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1771'. [ 519.372827][T12016] dummy0: left allmulticast mode [ 519.387431][T12016] batman_adv: batadv0: Interface activated: dummy0 [ 519.395958][T12016] batman_adv: batadv0: Interface deactivated: dummy0 [ 519.402797][T12016] batman_adv: batadv0: Removing interface: dummy0 [ 519.452152][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 519.459948][T12016] bridge0: port 3(dummy0) entered blocking state [ 519.468087][T12016] bridge0: port 3(dummy0) entered disabled state [ 519.481506][T12016] dummy0: entered allmulticast mode [ 519.509449][ T5961] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 519.519527][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.536397][ T5961] usb 1-1: Product: syz [ 519.543030][ T5961] usb 1-1: Manufacturer: syz [ 519.558792][T12016] dummy0: entered promiscuous mode [ 519.571139][ T5961] usb 1-1: SerialNumber: syz [ 519.594131][ T5961] usb 1-1: config 0 descriptor?? [ 519.630220][ T5961] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 520.654903][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.664725][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.953626][ T5961] gspca_sonixj: reg_w1 err -110 [ 520.999881][ T5961] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 521.450364][ T5900] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 521.616970][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 521.638430][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 521.711679][ T5900] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 521.777221][ T5900] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 521.825299][ T5900] usb 5-1: Product: syz [ 521.853631][ T5900] usb 5-1: Manufacturer: syz [ 521.872681][ T5900] usb 5-1: SerialNumber: syz [ 522.111583][ T5900] usb 5-1: Invalid connection information received from device [ 522.355243][T12027] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1778'. [ 522.576582][ T5917] usb 5-1: USB disconnect, device number 82 [ 523.062759][T12033] ALSA: mixer_oss: invalid OSS volume '' [ 523.134270][ T5900] usb 1-1: USB disconnect, device number 84 [ 523.754796][T12059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 524.015918][ T5917] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 524.175995][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 524.183808][ T5917] usb 1-1: device descriptor read/64, error -71 [ 524.339542][ T24] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 524.357697][ T24] usb 3-1: config 127 has no interface number 0 [ 524.374921][ T24] usb 3-1: config 127 interface 238 has no altsetting 0 [ 524.395928][ T24] usb 3-1: New USB device found, idVendor=413c, idProduct=8193, bcdDevice=fb.23 [ 524.419905][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.428819][ T5917] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 524.441562][ T24] usb 3-1: Product: syz [ 524.452883][ T24] usb 3-1: Manufacturer: syz [ 524.464304][ T24] usb 3-1: SerialNumber: syz [ 524.469267][ T978] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 524.575975][ T5917] usb 1-1: device descriptor read/64, error -71 [ 524.655807][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 524.664788][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.679215][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.707328][ T5917] usb usb1-port1: attempt power cycle [ 524.729802][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.742906][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.752082][ T978] usb 4-1: Product: syz [ 524.756951][ T978] usb 4-1: Manufacturer: syz [ 524.762514][ T978] usb 4-1: SerialNumber: syz [ 524.978249][ T10] kworker/0:1 (10) used greatest stack depth: 20008 bytes left [ 525.086008][ T5917] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 525.166970][ T5917] usb 1-1: device descriptor read/8, error -71 [ 525.415887][ T5917] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 525.447409][ T5917] usb 1-1: device descriptor read/8, error -71 [ 525.586989][ T5917] usb usb1-port1: unable to enumerate USB device [ 526.926890][ T24] usb 3-1: USB disconnect, device number 92 [ 527.208099][ T5900] IPVS: starting estimator thread 0... [ 527.281896][ T978] usb 4-1: 0:2 : does not exist [ 527.297059][T12100] IPVS: using max 31 ests per chain, 74400 per kthread [ 527.335339][ T978] usb 4-1: USB disconnect, device number 83 [ 527.480320][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.356081][ T978] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 528.384589][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 528.518847][ T978] usb 3-1: device descriptor read/64, error -71 [ 528.713230][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 528.729547][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 528.775871][ T978] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 528.783617][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 528.926033][ T5917] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 528.934220][ T978] usb 3-1: device descriptor read/64, error -71 [ 528.955806][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 528.962668][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 528.973792][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.983626][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.993867][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.003934][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.018147][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.029973][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.050896][ T978] usb usb3-port1: attempt power cycle [ 529.109876][ T5917] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 529.118408][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.130220][ T5917] usb 1-1: config 0 has no interface number 0 [ 529.136738][ T5917] usb 1-1: too many endpoints for config 0 interface 114 altsetting 104: 188, using maximum allowed: 30 [ 529.148722][ T5917] usb 1-1: config 0 interface 114 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 529.162473][ T5917] usb 1-1: config 0 interface 114 has no altsetting 0 [ 529.169647][ T5917] usb 1-1: New USB device found, idVendor=0471, idProduct=0006, bcdDevice= 0.00 [ 529.189275][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.211716][ T5917] usb 1-1: config 0 descriptor?? [ 529.255507][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 529.263911][ T24] usbtmc 2-1:16.0: can't read capabilities [ 529.460596][ T978] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 529.502026][ T978] usb 3-1: device descriptor read/8, error -71 [ 529.524945][ T5917] usb 1-1: string descriptor 0 read error: -71 [ 529.560929][ T5917] usb 1-1: USB disconnect, device number 89 [ 529.600463][T12135] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 529.607515][ T24] usb 2-1: USB disconnect, device number 93 [ 529.673534][T12160] macsec0: entered promiscuous mode [ 529.682604][T12160] macsec0: left allmulticast mode [ 529.689882][T12160] macsec0: left promiscuous mode [ 529.789846][ T978] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 529.828938][ T978] usb 3-1: device descriptor read/8, error -71 [ 529.936201][ T978] usb usb3-port1: unable to enumerate USB device [ 531.119434][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 531.130433][T12187] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 531.202033][T12187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.203532][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 532.062380][T12201] FAULT_INJECTION: forcing a failure. [ 532.062380][T12201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.075614][T12201] CPU: 1 UID: 0 PID: 12201 Comm: syz.3.1826 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 532.075637][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.075647][T12201] Call Trace: [ 532.075654][T12201] [ 532.075661][T12201] dump_stack_lvl+0x189/0x250 [ 532.075701][T12201] ? __pfx____ratelimit+0x10/0x10 [ 532.075733][T12201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.075767][T12201] ? __pfx__printk+0x10/0x10 [ 532.075792][T12201] ? __might_fault+0xb0/0x130 [ 532.075827][T12201] should_fail_ex+0x414/0x560 [ 532.075859][T12201] _copy_from_user+0x2d/0xb0 [ 532.075880][T12201] kstrtouint_from_user+0xc4/0x170 [ 532.075912][T12201] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 532.075960][T12201] proc_fail_nth_write+0x88/0x240 [ 532.075987][T12201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 532.076019][T12201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 532.076046][T12201] vfs_write+0x27e/0xa90 [ 532.076090][T12201] ? __pfx_vfs_write+0x10/0x10 [ 532.076124][T12201] ? __fget_files+0x2a/0x420 [ 532.076153][T12201] ? __fget_files+0x3a0/0x420 [ 532.076176][T12201] ? __fget_files+0x2a/0x420 [ 532.076209][T12201] ksys_write+0x145/0x250 [ 532.076232][T12201] ? __pfx_ksys_write+0x10/0x10 [ 532.076249][T12201] ? rcu_is_watching+0x15/0xb0 [ 532.076288][T12201] ? do_syscall_64+0xbe/0x3b0 [ 532.076325][T12201] do_syscall_64+0xfa/0x3b0 [ 532.076356][T12201] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.076385][T12201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.076407][T12201] ? clear_bhb_loop+0x60/0xb0 [ 532.076434][T12201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.076453][T12201] RIP: 0033:0x7fdea238d3df [ 532.076469][T12201] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 532.076483][T12201] RSP: 002b:00007fdea3270030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 532.076500][T12201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdea238d3df [ 532.076511][T12201] RDX: 0000000000000001 RSI: 00007fdea32700a0 RDI: 0000000000000003 [ 532.076521][T12201] RBP: 00007fdea3270090 R08: 0000000000000000 R09: 0000000000000000 [ 532.076530][T12201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 532.076540][T12201] R13: 0000000000000000 R14: 00007fdea25b6080 R15: 00007fdea26dfa28 [ 532.076569][T12201] [ 532.576870][ T5900] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 532.769866][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 532.790577][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 532.807677][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.821576][ T5900] usb 5-1: config 0 has no interfaces? [ 532.915598][ T5900] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 532.972048][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.003826][ T5900] usb 5-1: Product: syz [ 533.021645][ T5900] usb 5-1: Manufacturer: syz [ 533.036109][ T5900] usb 5-1: SerialNumber: syz [ 533.063441][ T5900] usb 5-1: config 0 descriptor?? [ 533.226462][ T5961] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 533.319259][ T5917] IPVS: starting estimator thread 0... [ 533.376617][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 533.404474][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.414541][ T5961] usb 4-1: config 120 has an invalid interface number: 86 but max is 0 [ 533.426054][T12213] IPVS: using max 23 ests per chain, 55200 per kthread [ 533.517109][ T5961] usb 4-1: config 120 has no interface number 0 [ 533.534894][ T5961] usb 4-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 533.556457][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.570083][ T5961] usb 4-1: Product: syz [ 533.578525][ T5961] usb 4-1: Manufacturer: syz [ 533.583287][ T5961] usb 4-1: SerialNumber: syz [ 533.707221][T12223] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 533.828991][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.916212][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.017463][T12210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 534.024140][T12210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 534.146855][T12210] vhci_hcd vhci_hcd.0: Device attached [ 534.244796][T12229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.321273][T12229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.349686][ T5917] vhci_hcd: vhci_device speed not set [ 534.383768][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.401126][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.422676][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.440681][ T5917] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 534.452971][T12234] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 534.466056][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.506462][T12227] vhci_hcd: connection reset by peer [ 534.512376][ T1103] vhci_hcd: stop threads [ 534.540966][ T5961] huawei_cdc_ncm 4-1:120.86: More than one union descriptor, skipping ... [ 534.541771][ T1103] vhci_hcd: release socket [ 534.552339][ T5961] huawei_cdc_ncm 4-1:120.86: CDC Union missing and no IAD found [ 534.579167][ T5961] huawei_cdc_ncm 4-1:120.86: bind() failure [ 534.606875][ T1103] vhci_hcd: disconnect device [ 534.622431][ T5961] usb 4-1: USB disconnect, device number 84 [ 534.731187][T12241] ALSA: mixer_oss: invalid OSS volume '' [ 534.846732][ T5900] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 534.899030][ T978] usb 5-1: USB disconnect, device number 83 [ 535.033090][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.045404][ T5893] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 535.061116][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.083765][ T5900] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 535.095452][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.112309][ T5900] usb 3-1: config 0 descriptor?? [ 535.204181][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1838'. [ 535.205899][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 535.223638][ T5893] usb 1-1: config 0 has an invalid interface number: 180 but max is 0 [ 535.233600][ T5893] usb 1-1: config 0 has no interface number 0 [ 535.251063][ T5893] usb 1-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 535.261131][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.270155][ T5893] usb 1-1: Product: syz [ 535.274403][ T5893] usb 1-1: Manufacturer: syz [ 535.279861][ T5893] usb 1-1: SerialNumber: syz [ 535.288383][ T5893] usb 1-1: config 0 descriptor?? [ 535.297555][ T5893] usb 1-1: bad CDC descriptors [ 535.328109][ T5900] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 535.340211][ T5900] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 535.386041][ T978] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 535.476435][ T5961] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 535.535942][ T24] usb 1-1: USB disconnect, device number 90 [ 535.542971][ T5900] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 535.556043][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 535.566529][ T978] usb 5-1: config 8 has an invalid interface number: 190 but max is 2 [ 535.574965][ T978] usb 5-1: config 8 has an invalid interface number: 155 but max is 2 [ 535.575429][ T5900] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 535.585358][ T978] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 535.606382][ T978] usb 5-1: config 8 has an invalid interface number: 148 but max is 2 [ 535.608922][ T5900] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -5 [ 535.614736][ T978] usb 5-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 535.624636][ T5961] usb 4-1: device descriptor read/64, error -71 [ 535.638679][ T978] usb 5-1: config 8 has no interface number 0 [ 535.651311][ T978] usb 5-1: config 8 has no interface number 1 [ 535.657856][ T978] usb 5-1: config 8 has no interface number 2 [ 535.664063][ T978] usb 5-1: config 8 interface 190 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 535.678156][ T978] usb 5-1: config 8 interface 190 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 535.689547][ T978] usb 5-1: config 8 interface 148 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 535.708545][ T978] usb 5-1: config 8 interface 190 has no altsetting 0 [ 535.715373][ T978] usb 5-1: config 8 interface 155 has no altsetting 0 [ 535.724046][ T978] usb 5-1: config 8 interface 148 has no altsetting 0 [ 535.734726][ T978] usb 5-1: New USB device found, idVendor=0403, idProduct=e88e, bcdDevice=5a.ab [ 535.745798][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.755413][ T978] usb 5-1: Product: 盆股謵齈嵡ë‡î± ã€¾äŒ²ìœ·ï¤–씿鋔䱭ʒꙸ釔㹟鎥 [ 535.767210][ T978] usb 5-1: Manufacturer: ᑉ [ 535.771837][ T978] usb 5-1: SerialNumber: syz [ 535.877162][ T5961] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 535.990395][ T978] ftdi_sio 5-1:8.190: FTDI USB Serial Device converter detected [ 536.016641][ T5961] usb 4-1: device descriptor read/64, error -71 [ 536.017118][ T978] ftdi_sio ttyUSB0: unknown device type: 0x5aab [ 536.051377][ T978] ftdi_sio 5-1:8.155: FTDI USB Serial Device converter detected [ 536.072479][ T978] ftdi_sio ttyUSB1: unknown device type: 0x5aab [ 536.101213][ T978] ftdi_sio 5-1:8.148: FTDI USB Serial Device converter detected [ 536.117868][ T978] ftdi_sio ttyUSB2: unknown device type: 0x5aab [ 536.136906][ T978] usb 5-1: USB disconnect, device number 84 [ 536.140413][ T5961] usb usb4-port1: attempt power cycle [ 536.157851][ T978] ftdi_sio 5-1:8.190: device disconnected [ 536.223775][ T978] ftdi_sio 5-1:8.155: device disconnected [ 536.244654][ T978] ftdi_sio 5-1:8.148: device disconnected [ 536.297002][T12263] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 536.516507][ T5961] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 536.537413][ T5961] usb 4-1: device descriptor read/8, error -71 [ 536.555984][ T978] usb 3-1: USB disconnect, device number 97 [ 536.580133][T12269] libceph: resolve '4..' (ret=-3): failed [ 536.776566][ T5961] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 536.797421][ T5961] usb 4-1: device descriptor read/8, error -71 [ 536.929209][ T5961] usb usb4-port1: unable to enumerate USB device [ 537.166825][ T5900] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 537.341471][ T5900] usb 5-1: config 0 has no interfaces? [ 537.351928][ T5900] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 537.369946][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.392369][ T5900] usb 5-1: Product: syz [ 537.410520][ T5900] usb 5-1: Manufacturer: syz [ 537.426991][ T5900] usb 5-1: SerialNumber: syz [ 537.457168][ T5900] usb 5-1: config 0 descriptor?? [ 538.170842][T12287] kvm: apic: phys broadcast and lowest prio [ 538.503518][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 538.513568][T12301] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1850'. [ 539.100228][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1852'. [ 539.144532][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1852'. [ 539.188375][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1852'. [ 539.314482][T12316] fuse: Unknown parameter '' [ 539.366727][ T5900] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 539.535833][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 539.536306][ T5917] vhci_hcd: vhci_device speed not set [ 539.563135][ T5900] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 539.580987][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.600149][ T5900] usb 3-1: Product: syz [ 539.612141][ T5900] usb 3-1: Manufacturer: syz [ 539.621277][ T5900] usb 3-1: SerialNumber: syz [ 539.635283][ T5900] usb 3-1: config 0 descriptor?? [ 539.653639][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 539.686508][ T5961] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 539.842824][ T978] usb 5-1: USB disconnect, device number 85 [ 539.848855][ T5961] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 539.848913][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.848941][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 539.848996][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 539.851933][ T5961] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 540.029570][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.060689][ T5961] usb 1-1: Product: syz [ 540.065582][ T5961] usb 1-1: Manufacturer: syz [ 540.072205][ T5961] usb 1-1: SerialNumber: syz [ 540.103129][ T5961] usb 1-1: config 0 descriptor?? [ 540.111521][T12316] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 540.297596][ T978] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 540.323975][ T5961] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 540.351535][ T5961] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 540.475266][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.499920][ T978] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 540.526161][ T978] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.559962][ T978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 540.575154][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.590881][ T978] usb 5-1: Product: syz [ 540.595264][ T978] usb 5-1: Manufacturer: syz [ 540.600095][ T978] usb 5-1: SerialNumber: syz [ 540.745773][ C0] powermate: config urb returned -71 [ 540.752371][ C0] powermate: config urb returned -71 [ 540.760008][ C0] powermate: config urb returned -71 [ 540.765652][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 540.774484][ T5961] usb 1-1: USB disconnect, device number 91 [ 540.835299][ T978] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 541.088498][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1861'. [ 541.116704][ T5961] usb 5-1: USB disconnect, device number 86 [ 541.130867][ T5961] usblp0: removed [ 541.453536][T12349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.641122][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1864'. [ 541.725299][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 541.745794][ T978] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 541.766456][ T5900] gspca_sonixj: reg_w1 err -71 [ 541.774859][ T5900] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 541.803725][ T5900] usb 3-1: USB disconnect, device number 98 [ 541.962732][ T978] usb 2-1: config 0 has no interfaces? [ 541.974926][ T978] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.005767][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.013917][ T978] usb 2-1: Product: syz [ 542.020172][ T978] usb 2-1: Manufacturer: syz [ 542.025276][ T978] usb 2-1: SerialNumber: syz [ 542.044900][ T978] usb 2-1: config 0 descriptor?? [ 542.236512][ T5900] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 542.407028][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 542.414966][ T5900] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 542.433907][ T5900] usb 5-1: config 0 has no interface number 0 [ 542.446930][ T5961] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 542.462511][ T5900] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 542.473428][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.483675][ T5900] usb 5-1: Product: syz [ 542.504283][ T5900] usb 5-1: Manufacturer: syz [ 542.520564][ T5900] usb 5-1: SerialNumber: syz [ 542.548857][ T5900] usb 5-1: config 0 descriptor?? [ 542.580847][ T5900] hub 5-1:0.145: bad descriptor, ignoring hub [ 542.602183][ T5900] hub 5-1:0.145: probe with driver hub failed with error -5 [ 542.621123][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 542.635573][ T5961] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 542.656479][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input38 [ 542.669206][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.681547][ T5961] usb 1-1: Product: syz [ 542.686611][ T5961] usb 1-1: Manufacturer: syz [ 542.691638][ T5961] usb 1-1: SerialNumber: syz [ 542.711702][ T5961] usb 1-1: config 0 descriptor?? [ 542.735371][ T5961] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 542.872826][T12376] xt_HMARK: spi-set and port-set can't be combined [ 542.934155][ T5961] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 542.951976][ T5961] visor 1-1:0.0: probe with driver visor failed with error -32 [ 543.053605][T12381] bridge_slave_0: entered promiscuous mode [ 543.072589][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1875'. [ 543.082287][T12381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 543.265038][T12386] xt_CT: No such helper "netbios-ns" [ 543.383650][T12391] nvme_fabrics: missing parameter 'transport=%s' [ 543.397769][T12391] nvme_fabrics: missing parameter 'nqn=%s' [ 543.566480][ T5961] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 543.726029][ T5917] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 543.993308][ T5961] usb 3-1: config 0 has no interfaces? [ 544.008361][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.022933][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.032000][ T5961] usb 3-1: Product: syz [ 544.036951][ T5961] usb 3-1: Manufacturer: syz [ 544.042487][ T5961] usb 3-1: SerialNumber: syz [ 544.052617][ T5961] usb 3-1: config 0 descriptor?? [ 544.145908][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 544.162346][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 544.191829][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.203097][ T5917] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.221494][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 544.237161][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.252685][ T5917] usb 4-1: config 0 descriptor?? [ 544.474545][ T24] usb 2-1: USB disconnect, device number 94 [ 544.530899][ T5917] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 545.069665][ T24] usb 1-1: USB disconnect, device number 92 [ 545.696974][ T5961] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 545.866586][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 545.873233][ T5961] usb 1-1: too many configurations: 98, using maximum allowed: 8 [ 545.883581][ T5961] usb 1-1: config 6 has no interfaces? [ 545.892475][ T5961] usb 1-1: config 6 has no interfaces? [ 545.900221][T12424] Invalid logical block size (3) [ 545.900780][ T5961] usb 1-1: config 6 has no interfaces? [ 545.920000][ T5961] usb 1-1: config 6 has no interfaces? [ 545.927887][ T5961] usb 1-1: config 6 has no interfaces? [ 545.934887][ T5961] usb 1-1: config 6 has no interfaces? [ 545.943170][ T5961] usb 1-1: config 6 has no interfaces? [ 545.952158][ T5961] usb 1-1: config 6 has no interfaces? [ 545.961945][ T5961] usb 1-1: string descriptor 0 read error: -71 [ 545.969568][ T5961] usb 1-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 545.997013][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 546.030451][ T5961] usb 1-1: rejected 8 configurations due to insufficient available bus power [ 546.042615][ T5961] usb 1-1: no configuration chosen from 8 choices [ 546.051794][ T5961] usb 1-1: USB disconnect, device number 93 [ 546.120481][T12426] xt_HMARK: spi-set and port-set can't be combined [ 546.250081][ T24] usb 3-1: USB disconnect, device number 99 [ 546.366801][ T5900] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 546.523843][ T5917] usb 4-1: USB disconnect, device number 89 [ 546.543194][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.571300][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.590678][ T978] usb 5-1: USB disconnect, device number 87 [ 546.614853][ T5900] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.650765][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.684932][ T5900] usb 2-1: config 0 descriptor?? [ 546.695281][T12439] Invalid logical block size (117440512) [ 547.820628][ T5900] plantronics 0003:047F:FFFF.001E: collection stack underflow [ 547.831845][ T5900] plantronics 0003:047F:FFFF.001E: item 0 2 0 12 parsing failed [ 547.843987][T12446] syz.3.1890 (12446): drop_caches: 2 [ 547.867499][ T5900] plantronics 0003:047F:FFFF.001E: parse failed [ 547.879712][ T5900] plantronics 0003:047F:FFFF.001E: probe with driver plantronics failed with error -22 [ 548.040013][ T5900] usb 2-1: USB disconnect, device number 95 [ 548.657922][ T5961] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 548.682692][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1897'. [ 548.734419][T12461] netlink: 'syz.4.1897': attribute type 7 has an invalid length. [ 548.766525][T12461] netlink: 'syz.4.1897': attribute type 8 has an invalid length. [ 548.834694][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 548.887529][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.906637][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.938924][T12471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 549.007193][ T5961] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 549.054224][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.087661][ T5961] usb 3-1: config 0 descriptor?? [ 549.508173][ T5961] usbhid 3-1:0.0: can't add hid device: -71 [ 549.516875][ T5961] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 549.529714][ T5961] usb 3-1: USB disconnect, device number 100 [ 549.615729][ T978] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 549.926006][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 549.933629][ T978] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 549.945060][ T978] usb 2-1: config 0 has no interface number 0 [ 549.953891][ T978] usb 2-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 549.971376][ T978] usb 2-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 550.047272][ T978] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 550.056889][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.065229][ T978] usb 2-1: Product: syz [ 550.161072][ T978] usb 2-1: Manufacturer: syz [ 550.212366][ T978] usb 2-1: SerialNumber: syz [ 550.250977][ T978] usb 2-1: config 0 descriptor?? [ 550.485489][ T978] usb 2-1: USB disconnect, device number 96 [ 550.764964][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 550.764984][ T30] audit: type=1326 audit(1751119475.245:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 550.808211][T12493] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 550.927298][T12495] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 550.955780][ T30] audit: type=1326 audit(1751119475.295:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.288863][ T30] audit: type=1326 audit(1751119475.295:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.396710][ T5961] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 551.414808][ T30] audit: type=1326 audit(1751119475.295:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.472410][ T30] audit: type=1326 audit(1751119475.325:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.516704][ T5900] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 551.536615][ T30] audit: type=1326 audit(1751119475.325:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.556959][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 551.580435][ T5961] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 551.604444][ T30] audit: type=1326 audit(1751119475.325:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.631284][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.631566][ T30] audit: type=1326 audit(1751119475.325:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.666480][ T30] audit: type=1326 audit(1751119475.325:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.676671][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 551.709611][ T30] audit: type=1326 audit(1751119475.325:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12492 comm="syz.2.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 551.733033][ T5961] usb 3-1: Product: syz [ 551.738295][ T5961] usb 3-1: Manufacturer: syz [ 551.762516][ T5900] usb 2-1: New USB device found, idVendor=c6d9, idProduct=690a, bcdDevice= 0.c2 [ 551.773118][ T5961] usb 3-1: SerialNumber: syz [ 551.786588][ T5900] usb 2-1: New USB device strings: Mfr=194, Product=173, SerialNumber=105 [ 551.800191][ T5961] usb 3-1: config 0 descriptor?? [ 551.806971][ T5900] usb 2-1: Product: syz [ 551.823777][ T5900] usb 2-1: Manufacturer: syz [ 551.837269][ T5961] empeg 3-1:0.0: empeg converter detected [ 551.843089][ T5900] usb 2-1: SerialNumber: syz [ 551.848690][ T5961] usb 3-1: active config #0 != 1 ?? [ 551.901465][ T5900] usb 2-1: config 0 descriptor?? [ 552.025374][ T5900] usb 3-1: USB disconnect, device number 101 [ 552.666970][ T978] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 552.837897][ T978] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 552.946533][ T978] usb 4-1: config 160 has an invalid descriptor of length 33, skipping remainder of the config [ 552.977912][ T978] usb 4-1: config 160 has no interface number 0 [ 552.994499][ T978] usb 4-1: config 160 interface 200 altsetting 30 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 553.042460][ T978] usb 4-1: config 160 interface 200 altsetting 30 endpoint 0x8 has invalid wMaxPacketSize 0 [ 553.086469][ T978] usb 4-1: config 160 interface 200 has no altsetting 0 [ 553.121320][ T978] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 553.135386][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.165747][ T978] usb 4-1: Product: syz [ 553.181854][ T978] usb 4-1: Manufacturer: syz [ 553.217971][ T978] usb 4-1: SerialNumber: syz [ 553.324552][T12532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'. [ 553.337662][T12532] openvswitch: netlink: Flow key attr not present in new flow. [ 553.762677][T12544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.876933][ T5900] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 554.036786][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 554.049730][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.070171][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.088111][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 554.101524][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 554.113140][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.130940][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.143813][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.154115][ T5900] usb 5-1: Manufacturer: syz [ 554.194713][ T5900] usb 5-1: config 0 descriptor?? [ 554.267080][ T5961] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 554.298758][ T5893] usb 2-1: USB disconnect, device number 97 [ 554.426563][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 554.439230][ T5961] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 554.457107][ T5961] usb 3-1: config 0 has no interface number 0 [ 554.483917][ T5961] usb 3-1: config 0 interface 29 has no altsetting 0 [ 554.525381][ T5961] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 554.551116][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.565074][ T5961] usb 3-1: Product: syz [ 554.570135][ T5961] usb 3-1: Manufacturer: syz [ 554.575230][ T5961] usb 3-1: SerialNumber: syz [ 554.669155][ T5961] usb 3-1: config 0 descriptor?? [ 554.680771][ T5900] rc_core: IR keymap rc-hauppauge not found [ 554.698780][ T5900] Registered IR keymap rc-empty [ 554.703844][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.761553][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.802326][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 554.835438][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 554.876463][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.906805][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.917288][ T5961] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 554.936799][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.967941][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.017937][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.090022][ T978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.096776][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.126456][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.150530][ T978] usb 4-1: MIDIStreaming interface descriptor not found [ 555.168747][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.215009][ T5961] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 555.224716][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.267626][ T5961] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 555.274596][ T5961] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 555.306719][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.358217][ T5900] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 555.365872][ T978] usb 4-1: USB disconnect, device number 90 [ 555.384774][ T5900] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 555.502516][T10825] udevd[10825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.503148][ T5900] usb 5-1: USB disconnect, device number 88 [ 555.563284][ T5961] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 555.647018][ T5961] usb 3-1: USB disconnect, device number 102 [ 555.796275][ T24] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 555.845102][T12568] netlink: 'syz.4.1925': attribute type 12 has an invalid length. [ 555.861810][T12568] netlink: 'syz.4.1925': attribute type 29 has an invalid length. [ 555.890710][T12568] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1925'. [ 555.904148][T12568] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 555.913960][T12568] netlink: 'syz.4.1925': attribute type 2 has an invalid length. [ 555.973830][T12568] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1925'. [ 556.015837][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 556.022980][ T24] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 556.067181][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.094688][ T24] usb 1-1: config 0 has no interface number 0 [ 556.113886][ T24] usb 1-1: config 0 interface 52 has no altsetting 0 [ 556.154871][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 556.188565][ T5961] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 556.201403][ T24] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 556.255815][ T24] usb 1-1: Manufacturer: syz [ 556.282879][ T24] usb 1-1: config 0 descriptor?? [ 556.400397][ T5961] usb 4-1: config 0 has no interfaces? [ 556.418148][ T5961] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.430249][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.440581][ T5961] usb 4-1: Product: syz [ 556.444817][ T5961] usb 4-1: Manufacturer: syz [ 556.452107][ T5961] usb 4-1: SerialNumber: syz [ 556.467048][ T5961] usb 4-1: config 0 descriptor?? [ 556.490595][T12581] FAULT_INJECTION: forcing a failure. [ 556.490595][T12581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.496881][ T5900] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 556.546539][T12581] CPU: 0 UID: 0 PID: 12581 Comm: syz.1.1929 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 556.546571][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.546586][T12581] Call Trace: [ 556.546596][T12581] [ 556.546607][T12581] dump_stack_lvl+0x189/0x250 [ 556.546657][T12581] ? __pfx____ratelimit+0x10/0x10 [ 556.546690][T12581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.546724][T12581] ? __pfx__printk+0x10/0x10 [ 556.546750][T12581] ? __might_fault+0xb0/0x130 [ 556.546785][T12581] should_fail_ex+0x414/0x560 [ 556.546817][T12581] _copy_from_user+0x2d/0xb0 [ 556.546844][T12581] kstrtouint_from_user+0xc4/0x170 [ 556.546877][T12581] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 556.546926][T12581] proc_fail_nth_write+0x88/0x240 [ 556.546954][T12581] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 556.546987][T12581] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 556.547017][T12581] vfs_write+0x27e/0xa90 [ 556.547061][T12581] ? __pfx_vfs_write+0x10/0x10 [ 556.547097][T12581] ? __fget_files+0x2a/0x420 [ 556.547127][T12581] ? __fget_files+0x3a0/0x420 [ 556.547162][T12581] ? __fget_files+0x2a/0x420 [ 556.547196][T12581] ksys_write+0x145/0x250 [ 556.547219][T12581] ? __pfx_ksys_write+0x10/0x10 [ 556.547236][T12581] ? rcu_is_watching+0x15/0xb0 [ 556.547275][T12581] ? do_syscall_64+0xbe/0x3b0 [ 556.547312][T12581] do_syscall_64+0xfa/0x3b0 [ 556.547342][T12581] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.547372][T12581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.547393][T12581] ? clear_bhb_loop+0x60/0xb0 [ 556.547420][T12581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.547441][T12581] RIP: 0033:0x7fc0d3f8d3df [ 556.547460][T12581] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 556.547479][T12581] RSP: 002b:00007fc0d4daa030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 556.547503][T12581] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc0d3f8d3df [ 556.547518][T12581] RDX: 0000000000000001 RSI: 00007fc0d4daa0a0 RDI: 0000000000000006 [ 556.547531][T12581] RBP: 00007fc0d4daa090 R08: 0000000000000000 R09: 0000000000000000 [ 556.547545][T12581] R10: 000000000000000e R11: 0000000000000293 R12: 0000000000000001 [ 556.547557][T12581] R13: 0000000000000000 R14: 00007fc0d41b5fa0 R15: 00007fc0d42dfa28 [ 556.547591][T12581] [ 557.072718][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.092044][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.104451][ T24] usb 1-1: Can not set alternate setting to 1, error: -71 [ 557.140293][ T24] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 557.156569][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 557.178792][ T5900] usb 5-1: config 2 interface 0 has no altsetting 0 [ 557.201361][ T24] usb 1-1: USB disconnect, device number 94 [ 557.222788][ T5900] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 557.328377][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.407311][ T5900] usb 5-1: Product: syz [ 557.411575][ T5900] usb 5-1: Manufacturer: syz [ 557.495042][ T5900] usb 5-1: SerialNumber: syz [ 557.756745][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.911787][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.988113][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.044668][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.170548][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.245363][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.346597][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.516419][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.757909][ T5900] usb 5-1: USB disconnect, device number 89 [ 559.269561][ T5900] usb 4-1: USB disconnect, device number 91 [ 559.676048][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 559.835997][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 559.885121][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 559.894605][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.916037][ T24] usb 5-1: Product: syz [ 559.920357][ T24] usb 5-1: Manufacturer: syz [ 559.925036][ T24] usb 5-1: SerialNumber: syz [ 559.937165][ T24] usb 5-1: config 0 descriptor?? [ 560.352038][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.366580][ T5900] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 560.379012][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.477287][ T24] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 560.496730][ T24] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 560.563571][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.600226][ T5900] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 560.627684][ T5900] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.645516][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.667213][ T24] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 560.674196][T12624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 560.745921][ T24] usb 5-1: USB disconnect, device number 90 [ 560.757709][ T5900] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.824662][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 560.833847][T12640] dummy0: left allmulticast mode [ 560.838992][T12640] dummy0: left promiscuous mode [ 560.844403][T12640] bridge0: port 3(dummy0) entered disabled state [ 560.940964][T12610] input: syz1 as /devices/virtual/input/input40 [ 560.982300][T12610] netlink: 'syz.3.1938': attribute type 2 has an invalid length. [ 561.155025][T12642] binder: 12623:12642 ioctl c0306201 2000000003c0 returned -14 [ 561.328526][T12640] bridge_slave_1: left allmulticast mode [ 561.336564][T12640] bridge_slave_1: left promiscuous mode [ 561.343019][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.459738][T12640] bridge_slave_0: left promiscuous mode [ 561.467181][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.654292][ T5900] usb 1-1: USB disconnect, device number 95 [ 562.386093][ T978] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 562.465280][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 562.731758][T12663] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.741978][T12663] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.751406][T12663] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.760821][T12663] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.800112][T12663] vxlan0: entered promiscuous mode [ 562.896279][ T24] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 563.062219][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.079128][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.085521][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.098484][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.237359][ T24] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 563.332206][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.385909][ T24] usb 3-1: Product: syz [ 563.390246][ T24] usb 3-1: Manufacturer: syz [ 563.394889][ T24] usb 3-1: SerialNumber: syz [ 563.485365][ T24] usb 3-1: config 0 descriptor?? [ 563.567850][ T5900] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 563.766517][ T5961] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 563.796656][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 563.808976][ T5900] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 563.830751][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.843435][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.872550][ T5900] usb 1-1: config 0 descriptor?? [ 563.905181][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.929237][ T5961] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.945320][ T5961] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 563.961248][ T5961] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 563.971545][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.005643][T12677] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 564.021421][ T5961] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.121972][ T5900] usbhid 1-1:0.0: can't add hid device: -71 [ 564.138876][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 564.175220][ T5900] usb 1-1: USB disconnect, device number 96 [ 564.224540][T12677] qrtr: Invalid version 0 [ 564.259617][ T5917] usb 5-1: USB disconnect, device number 91 [ 564.276097][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 564.426157][ T24] usb 2-1: device descriptor read/64, error -71 [ 564.685949][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 564.836025][ T24] usb 2-1: device descriptor read/64, error -71 [ 564.957413][ T24] usb usb2-port1: attempt power cycle [ 565.171762][T12691] Invalid logical block size (570425344) [ 565.305890][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 565.360135][ T24] usb 2-1: device descriptor read/8, error -71 [ 565.429497][T12700] TCP: TCP_TX_DELAY enabled [ 565.629480][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 565.658918][ T24] usb 2-1: device descriptor read/8, error -71 [ 565.697396][ T5917] usb 3-1: USB disconnect, device number 103 [ 565.786565][ T24] usb usb2-port1: unable to enumerate USB device [ 565.867402][ T5900] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 566.036241][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 566.100486][ T5900] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 566.110265][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 566.153039][ T5900] usb 5-1: Product: syz [ 566.243100][ T5900] usb 5-1: Manufacturer: syz [ 566.256614][ T5900] usb 5-1: SerialNumber: syz [ 566.299817][ T5900] usb 5-1: config 0 descriptor?? [ 566.455810][ T5917] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 566.694132][ T5917] usb 1-1: config 0 has no interfaces? [ 566.733074][ T5917] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 566.754488][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.784877][ T5917] usb 1-1: Product: syz [ 566.792387][ T5917] usb 1-1: Manufacturer: syz [ 566.803950][ T5917] usb 1-1: SerialNumber: syz [ 566.821855][ T5917] usb 1-1: config 0 descriptor?? [ 567.511857][T12724] dvmrp16: entered allmulticast mode [ 567.797331][ T5917] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 567.975789][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 567.983140][ T5917] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 567.991832][ T5917] usb 2-1: config 0 has no interface number 0 [ 568.050692][ T5917] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 568.059972][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.068727][ T5917] usb 2-1: Product: syz [ 568.075157][ T5917] usb 2-1: Manufacturer: syz [ 568.086396][ T5917] usb 2-1: SerialNumber: syz [ 568.111723][ T5917] usb 2-1: config 0 descriptor?? [ 568.322041][ T5917] cx82310_eth 2-1:0.36: probe with driver cx82310_eth failed with error -71 [ 568.339904][ T5917] cxacru 2-1:0.36: usbatm_usb_probe: bind failed: -19! [ 568.372708][ T5917] usb 2-1: USB disconnect, device number 102 [ 568.963936][T12727] veth0_to_bridge: left allmulticast mode [ 568.985182][T12727] veth0_to_bridge: left promiscuous mode [ 569.007860][T12727] bridge0: port 1(veth0_to_bridge) entered disabled state [ 569.018528][T12728] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 569.119275][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.137330][T12728] team0: Port device bond0 added [ 569.164924][T12732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.180562][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 569.193395][T12732] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1974'. [ 569.202462][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1974'. [ 569.211924][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 569.498100][ T5900] usb 5-1: USB disconnect, device number 92 [ 569.604786][ T5961] usb 1-1: USB disconnect, device number 97 [ 569.858294][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 569.858313][ T30] audit: type=1326 audit(1751119494.335:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 569.968997][ T30] audit: type=1326 audit(1751119494.335:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.106506][ T30] audit: type=1326 audit(1751119494.345:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f986d92ab19 code=0x7ffc0000 [ 570.131290][ T30] audit: type=1326 audit(1751119494.345:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.298044][ T30] audit: type=1326 audit(1751119494.345:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.414028][ T30] audit: type=1326 audit(1751119494.345:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f986d92ab19 code=0x7ffc0000 [ 570.456179][ T5917] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 570.527455][ T30] audit: type=1326 audit(1751119494.345:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f986d92ab19 code=0x7ffc0000 [ 570.549842][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.604072][ T30] audit: type=1326 audit(1751119494.345:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.627100][ T5917] usb 2-1: device descriptor read/64, error -71 [ 570.686837][ T30] audit: type=1326 audit(1751119494.375:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.845801][ T30] audit: type=1326 audit(1751119494.385:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12745 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986d98e929 code=0x7ffc0000 [ 570.868275][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.910136][ T5917] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 571.066737][ T5917] usb 2-1: device descriptor read/64, error -71 [ 571.162579][T12763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 571.179808][ T5917] usb usb2-port1: attempt power cycle [ 571.525933][ T5917] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 571.551969][T12770] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 571.562507][ T5917] usb 2-1: device descriptor read/8, error -71 [ 571.581798][T12770] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 571.609103][T12770] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 571.631465][T12770] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 571.669673][T12768] wg1: entered promiscuous mode [ 571.825952][ T5917] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 571.861852][ T5917] usb 2-1: device descriptor read/8, error -71 [ 571.990689][ T5917] usb usb2-port1: unable to enumerate USB device [ 572.065886][ T24] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 572.126657][T12779] netlink: 'syz.0.1988': attribute type 27 has an invalid length. [ 572.273403][ T24] usb 3-1: config 0 has no interfaces? [ 572.289432][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 572.302075][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.318904][ T24] usb 3-1: Product: syz [ 572.334453][ T24] usb 3-1: Manufacturer: syz [ 572.352194][ T24] usb 3-1: SerialNumber: syz [ 572.429403][ T24] usb 3-1: config 0 descriptor?? [ 572.897737][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.916346][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.148350][T12779] wg1: left promiscuous mode [ 573.160854][T12779] wg1: left allmulticast mode [ 573.226911][ T5900] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 573.283506][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.386924][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 573.402034][ T5900] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 573.416777][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.442725][ T5900] usb 5-1: config 0 descriptor?? [ 573.651767][ T5900] usb 5-1: USB disconnect, device number 93 [ 573.754735][T12779] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 573.792015][T12779] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 573.829480][T12779] gretap1: left promiscuous mode [ 573.841291][T12779] macvlan2: left allmulticast mode [ 573.859289][T12779] macvlan3: left allmulticast mode [ 573.874679][T12779] macvlan4: left allmulticast mode [ 573.885518][T12779] macvlan5: left allmulticast mode [ 573.898171][T12779] macvlan6: left allmulticast mode [ 573.908824][T12779] macvlan7: left allmulticast mode [ 573.920868][T12779] macvlan8: left allmulticast mode [ 573.932603][T12779] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 573.944391][T12779] macvlan9: left allmulticast mode [ 573.969325][T12779] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.988727][T12779] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.002836][T12779] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.018606][T12779] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.034390][T12779] vti0: left promiscuous mode [ 574.040535][T12779] vti0: left allmulticast mode [ 574.049853][T12779] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.059547][T12779] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.068658][T12779] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.077640][T12779] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.093009][T12779] vxlan0: left promiscuous mode [ 574.466112][ T5917] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 574.628377][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.642903][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 574.652537][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.670194][ T5917] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 574.680252][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.688635][ T5917] usb 1-1: Product: syz [ 574.693160][ T5917] usb 1-1: Manufacturer: syz [ 574.698500][ T5917] usb 1-1: SerialNumber: syz [ 574.710723][ T5917] usb 1-1: config 0 descriptor?? [ 574.726477][ T5917] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 574.735286][ T5917] usb 1-1: No valid video chain found. [ 574.930430][ T5961] usb 1-1: USB disconnect, device number 98 [ 574.996376][ T5900] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 575.156884][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 575.167268][ T5917] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 575.168750][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.196393][ T5900] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 575.205514][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.220832][ T5900] usb 4-1: config 0 descriptor?? [ 575.238869][ T24] usb 3-1: USB disconnect, device number 104 [ 575.364694][ T5917] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 575.388875][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.408977][ T5917] usb 2-1: Product: syz [ 575.413305][ T5917] usb 2-1: Manufacturer: syz [ 575.438840][ T5917] usb 2-1: SerialNumber: syz [ 575.456488][ T5917] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 575.495786][ T978] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 575.731249][T12807] binder: BINDER_SET_CONTEXT_MGR already set [ 575.745100][T12807] binder: 12806:12807 ioctl 4018620d 200000000040 returned -16 [ 575.796592][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 575.916931][T12825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.975310][T12807] binder: 12806:12807 ioctl 4008ae6a 200000000440 returned -22 [ 576.008268][T12807] binder: 12806:12807 ioctl 4004af07 200000000180 returned -22 [ 576.029688][ T5961] usb 2-1: USB disconnect, device number 107 [ 576.041194][ T5900] belkin 0003:050D:3201.001F: unknown main item tag 0x0 [ 576.137457][ T5900] belkin 0003:050D:3201.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 576.586176][ T978] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 576.615402][ T978] ath9k_htc: Failed to initialize the device [ 576.660519][ T5961] usb 2-1: ath9k_htc: USB layer deinitialized [ 577.030203][T12835] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 577.040313][T12835] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 577.230198][ T978] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 577.373519][T12843] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 577.406345][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 577.421536][ T978] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 577.438591][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.490248][ T978] usb 5-1: Product: syz [ 577.494502][ T978] usb 5-1: Manufacturer: syz [ 577.516091][ T978] usb 5-1: SerialNumber: syz [ 577.557680][ T978] usb 5-1: config 0 descriptor?? [ 577.604810][ T978] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 577.749256][T12841] could not allocate digest TFM handle mcryptd(nhpoly1305-sse2) [ 577.769789][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'. [ 577.940333][ T5917] usb 4-1: USB disconnect, device number 93 [ 577.995822][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 578.124109][ T978] gspca_ov534_9: reg_w failed -71 [ 578.168100][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.180192][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.190332][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.199527][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.212022][T12848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 578.231194][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.376029][ T5878] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 578.386462][ T5917] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 578.435425][ T24] usb 3-1: USB disconnect, device number 105 [ 578.526145][ T978] gspca_ov534_9: Unknown sensor 0000 [ 578.526329][ T978] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 578.553138][ T978] usb 5-1: USB disconnect, device number 94 [ 578.559430][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 578.564750][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 578.575978][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 578.590833][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 578.606829][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.619189][ T5917] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 578.631564][ T5917] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 578.643296][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.662852][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.675828][ T5917] usb 4-1: config 8 has no interface number 0 [ 578.688021][ T5878] usb 1-1: Product: syz [ 578.694698][ T5917] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.711041][ T5878] usb 1-1: Manufacturer: syz [ 578.720089][ T5878] usb 1-1: SerialNumber: syz [ 578.732872][ T5917] usb 4-1: config 8 interface 132 has no altsetting 0 [ 578.740233][ T5878] usb 1-1: config 0 descriptor?? [ 578.754310][ T5878] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 578.779353][ T5917] usb 4-1: string descriptor 0 read error: -22 [ 578.788724][ T5878] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 578.805899][ T5917] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 578.815419][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.856702][ T5917] usb-storage 4-1:8.132: USB Mass Storage device detected [ 578.865268][T12861] Invalid logical block size (1454112767) [ 578.922764][ T5917] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 579.054216][ T5917] usb 4-1: USB disconnect, device number 94 [ 579.539052][T12878] tipc: Can't bind to reserved service type 2 [ 579.737218][ T5900] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 579.940026][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.964921][ T5900] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 579.982233][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.006666][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2018'. [ 580.024982][ T5878] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 580.036720][ T5878] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 580.046746][ T5878] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 580.053870][ T5878] em28xx 1-1:0.0: No AC97 audio processor [ 580.057933][ T5900] usb 3-1: config 0 descriptor?? [ 580.101143][ T5878] usb 1-1: USB disconnect, device number 99 [ 580.123363][ T5878] em28xx 1-1:0.0: Disconnecting em28xx [ 580.205114][ T5878] em28xx 1-1:0.0: Freeing device [ 580.232088][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 580.232109][ T30] audit: type=1326 audit(1751119504.705:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.309459][ T30] audit: type=1326 audit(1751119504.705:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.337673][ T30] audit: type=1326 audit(1751119504.715:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.464677][ T30] audit: type=1326 audit(1751119504.715:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.487166][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.497582][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.522987][ T30] audit: type=1326 audit(1751119504.715:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.551536][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.566650][ T30] audit: type=1326 audit(1751119504.715:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.589140][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.595716][ T5878] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 580.629893][ T5900] aquacomputer_d5next 0003:0C70:F00B.0020: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 580.649172][ T30] audit: type=1326 audit(1751119504.715:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.671700][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.825135][ T978] usb 3-1: USB disconnect, device number 106 [ 580.833007][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.864626][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.900670][ T30] audit: type=1326 audit(1751119504.715:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dddd8e929 code=0x7ffc0000 [ 580.923115][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.965147][ T5917] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 580.977674][ T5878] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 581.000643][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.012575][ T30] audit: type=1326 audit(1751119504.715:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dddd8d290 code=0x7ffc0000 [ 581.037835][ T5878] usb 1-1: config 0 descriptor?? [ 581.052280][ T30] audit: type=1326 audit(1751119504.715:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7dddd8e52b code=0x7ffc0000 [ 581.074792][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.120602][T12902] fido_id[12902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 581.196876][ T5917] usb 5-1: config index 0 descriptor too short (expected 768, got 77) [ 581.210038][ T5917] usb 5-1: config 25 has too many interfaces: 250, using maximum allowed: 32 [ 581.305876][ T5917] usb 5-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 581.390286][ T5917] usb 5-1: config 25 has 0 interfaces, different from the descriptor's value: 250 [ 581.517547][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: unknown main item tag 0x0 [ 581.680941][T12913] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2025'. [ 581.691133][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: unknown main item tag 0x0 [ 581.735879][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: unknown main item tag 0x0 [ 581.756143][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: unknown main item tag 0x0 [ 581.764382][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: unknown main item tag 0x0 [ 581.828522][ T5878] aquacomputer_d5next 0003:0C70:F00D.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 581.881699][ T5917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.916644][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.952036][ T5917] usb 5-1: Product: syz [ 581.966590][ T5917] usb 5-1: Manufacturer: syz [ 581.971263][ T5917] usb 5-1: SerialNumber: syz [ 582.283988][ T5917] usb 1-1: USB disconnect, device number 100 [ 582.906443][ T5900] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 582.946080][ T5917] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 583.012090][T12948] kvm: user requested TSC rate below hardware speed [ 583.058295][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.080114][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 583.110250][ T5900] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 583.120448][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.131884][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.154986][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 583.177946][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 583.190247][ T5900] usb 4-1: Product: syz [ 583.194549][ T5900] usb 4-1: Manufacturer: syz [ 583.201300][ T5900] usb 4-1: SerialNumber: syz [ 583.202878][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.221171][ T5900] usb 4-1: config 0 descriptor?? [ 583.240957][ T5917] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 583.252854][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.262949][ T5917] usb 1-1: Product: syz [ 583.268315][ T5917] usb 1-1: Manufacturer: syz [ 583.270729][ T5900] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 583.274287][ T5917] usb 1-1: SerialNumber: syz [ 583.291484][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.303825][ T5917] usb 1-1: config 0 descriptor?? [ 583.322009][ T5917] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 583.326663][ T5961] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 583.419043][ T5900] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 583.476927][ T5900] usb 4-1: media controller created [ 583.572974][ T5917] usb 1-1: USB disconnect, device number 101 [ 583.589771][ T5961] usb 3-1: config 0 has no interfaces? [ 583.633088][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.650513][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 583.688346][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.723186][ T5961] usb 3-1: Product: syz [ 583.737462][ T5961] usb 3-1: Manufacturer: syz [ 583.749374][ T5961] usb 3-1: SerialNumber: syz [ 583.770584][ T5961] usb 3-1: config 0 descriptor?? [ 583.937070][ T5900] DVB: Unable to find symbol tda10046_attach() [ 583.948900][ T5900] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 583.961906][ T5900] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 584.071483][ T5917] usb 5-1: USB disconnect, device number 95 [ 584.306539][ T5961] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 584.496460][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 584.507826][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 584.527179][ T5961] usb 2-1: too many configurations: 225, using maximum allowed: 8 [ 584.561939][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 584.588181][ T5961] usb 2-1: can't read configurations, error -61 [ 585.089926][ T5961] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 585.157734][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.276424][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 585.282631][ T5961] usb 2-1: too many configurations: 225, using maximum allowed: 8 [ 585.313057][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 585.342158][ T5961] usb 2-1: can't read configurations, error -61 [ 585.382454][ T5961] usb usb2-port1: attempt power cycle [ 585.436462][ T5878] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 585.493150][ T5900] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 585.509232][ T5900] usb 4-1: USB disconnect, device number 95 [ 585.596695][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 585.616878][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 585.645275][ T5878] usb 5-1: config 1 has an invalid interface number: 65 but max is 0 [ 585.675550][ T5878] usb 5-1: config 1 has no interface number 0 [ 585.693452][ T5878] usb 5-1: config 1 interface 65 has no altsetting 0 [ 585.720042][ T5878] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 585.736494][ T5961] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 585.755772][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.758398][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 585.772742][ T5961] usb 2-1: too many configurations: 225, using maximum allowed: 8 [ 585.782127][ T5878] usb 5-1: Product: syz [ 585.784819][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 585.798521][ T5961] usb 2-1: can't read configurations, error -61 [ 585.812814][ T5878] usb 5-1: Manufacturer: syz [ 585.839788][ T5878] usb 5-1: SerialNumber: syz [ 585.942352][ T5961] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 585.950857][ T5900] usb 3-1: USB disconnect, device number 107 [ 585.994825][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 586.001958][ T5961] usb 2-1: too many configurations: 225, using maximum allowed: 8 [ 586.013541][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 586.051670][ T5961] usb 2-1: can't read configurations, error -61 [ 586.072598][ T5961] usb usb2-port1: unable to enumerate USB device [ 586.685780][ T5917] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 586.756470][ T5961] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 586.828159][T12965] [U]  [ 586.846002][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 586.859085][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 586.906796][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 586.908483][ T5917] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 586.914625][ T5961] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.938120][ T5961] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 586.948702][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.997922][ T5961] usb 3-1: Product: syz [ 587.032242][ T5961] usb 3-1: Manufacturer: syz [ 587.066463][ T5961] usb 3-1: SerialNumber: syz [ 587.092511][ T5917] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 587.266530][ T5917] usb 1-1: config 1 interface 0 has no altsetting 0 [ 587.291984][ T5961] usb 3-1: config 0 descriptor?? [ 587.363755][ T5917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 587.508789][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.557043][ T5917] usb 1-1: Product: syz [ 587.591822][ T5917] usb 1-1: Manufacturer: syz [ 587.605768][ T5917] usb 1-1: SerialNumber: syz [ 587.686662][T12982] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 587.773304][ T5961] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 587.866526][ T5900] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 587.967693][ T2154] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 588.016007][ T5900] usb 2-1: device descriptor read/64, error -71 [ 588.185217][ T5961] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 588.234376][ T5961] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 588.267024][ T5900] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 588.275070][ T2154] usb 4-1: config 0 has no interfaces? [ 588.362668][ T5878] kalmia 5-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 588.426418][ T5878] kalmia 5-1:1.65: probe with driver kalmia failed with error -22 [ 588.430776][ T5961] usb 3-1: USB disconnect, device number 108 [ 588.446724][ T2154] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 588.491336][ T5878] usb 5-1: USB disconnect, device number 96 [ 588.526379][ T5900] usb 2-1: device descriptor read/64, error -71 [ 588.536439][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.546567][ T2154] usb 4-1: Product: syz [ 588.550769][ T2154] usb 4-1: Manufacturer: syz [ 588.580036][ T2154] usb 4-1: SerialNumber: syz [ 588.629851][ T2154] usb 4-1: config 0 descriptor?? [ 588.648101][ T5900] usb usb2-port1: attempt power cycle [ 589.046384][ T5900] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 589.120154][ T5900] usb 2-1: device descriptor read/8, error -71 [ 589.195816][ T5878] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 589.698118][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.719552][ T5900] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 590.169616][ T5900] usb 2-1: device descriptor read/8, error -71 [ 590.175762][ T5878] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 590.542330][ T5900] usb usb2-port1: unable to enumerate USB device [ 590.581021][ T5878] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.594033][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input42 [ 590.618739][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.630905][ T5878] usb 5-1: Product: syz [ 590.635224][ T5878] usb 5-1: Manufacturer: syz [ 590.642670][ T5878] usb 5-1: SerialNumber: syz [ 590.656700][ T5185] bcm5974 1-1:1.0: could not read from device [ 590.663536][ T5917] usb 1-1: USB disconnect, device number 102 [ 590.934094][T13000] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 591.370319][T13018] batman_adv: batadv0: Interface deactivated: dummy0 [ 591.377317][T13018] batman_adv: batadv0: Removing interface: dummy0 [ 591.398080][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.415538][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.489858][ T5900] usb 5-1: USB disconnect, device number 97 [ 591.520401][T13018] bridge_slave_0: left allmulticast mode [ 591.536595][T13018] bridge_slave_0: left promiscuous mode [ 591.558534][T13018] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.678610][T13018] bridge_slave_1: left allmulticast mode [ 591.686896][T13018] bridge_slave_1: left promiscuous mode [ 591.693597][ T5900] usb 4-1: USB disconnect, device number 96 [ 591.723603][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.757081][T13018] bond0: (slave bond_slave_0): Releasing backup interface [ 591.781494][T13018] bond0: (slave bond_slave_1): Releasing backup interface [ 591.865695][T13018] team0: Port device team_slave_0 removed [ 591.938056][T13018] team0: Port device team_slave_1 removed [ 592.027609][T13018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.061978][T13018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.110240][T13026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 592.116818][T13026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 592.159355][T13026] vhci_hcd vhci_hcd.0: Device attached [ 592.173114][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 592.194828][T13018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.239316][T13037] netlink: 'syz.4.2057': attribute type 30 has an invalid length. [ 592.325826][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 592.426516][ T5900] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 592.444794][ T5878] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 592.475475][T13033] vhci_hcd: connection reset by peer [ 592.485358][ T9537] vhci_hcd: stop threads [ 592.491053][ T9537] vhci_hcd: release socket [ 592.496482][ T9537] vhci_hcd: disconnect device [ 592.522063][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 592.625945][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 592.640626][ T5878] usb 4-1: config 13 has an invalid interface number: 56 but max is 1 [ 592.712802][ T5878] usb 4-1: config 13 has no interface number 1 [ 592.722267][ T5878] usb 4-1: config 13 interface 56 has no altsetting 0 [ 592.734771][ T5878] usb 4-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=65.93 [ 592.779681][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.796737][ T5878] usb 4-1: Product: syz [ 592.808983][ T5878] usb 4-1: Manufacturer: syz [ 592.821589][ T5878] usb 4-1: SerialNumber: syz [ 593.425398][ T5878] usb 4-1: USB disconnect, device number 97 [ 593.456461][ T5961] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 593.606206][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 593.646611][ T5917] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 593.688140][ T5961] usb 2-1: config 1 has an invalid interface number: 255 but max is 2 [ 593.731029][ T5961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.742008][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.751826][ T5961] usb 2-1: config 1 has no interface number 0 [ 593.764045][ T5961] usb 2-1: too many endpoints for config 1 interface 255 altsetting 19: 47, using maximum allowed: 30 [ 593.795602][ T5961] usb 2-1: config 1 interface 255 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 593.816069][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 593.824738][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 593.854604][ T5961] usb 2-1: config 1 interface 255 has no altsetting 0 [ 593.885442][ T5961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 593.895358][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.915649][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.925595][ T5961] usb 2-1: Product: syz [ 593.930266][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 593.930290][ T5917] pvrusb2: ********** [ 593.930301][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 593.930316][ T5917] pvrusb2: Important functionality might not be entirely working. [ 593.930328][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 593.930342][ T5917] pvrusb2: ********** [ 594.116426][ T5961] usb 2-1: Manufacturer: syz [ 594.129771][ T5961] usb 2-1: SerialNumber: syz [ 594.137042][ T2345] pvrusb2: Invalid write control endpoint [ 594.331611][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2061'. [ 594.389484][ T2345] pvrusb2: Invalid write control endpoint [ 594.400550][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 594.412881][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 594.418289][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.450041][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.510566][ T5961] usb 2-1: USB disconnect, device number 116 [ 594.526971][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 594.578699][ T2345] pvrusb2: Device being rendered inoperable [ 594.610498][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2064'. [ 594.625336][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 594.649658][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 594.704831][ T2345] pvrusb2: Attached sub-driver cx25840 [ 594.726998][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 594.749609][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 594.915974][ T5878] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 594.926501][ T2154] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 595.083049][ T2154] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 595.093246][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.102490][ T2154] usb 4-1: Product: syz [ 595.105817][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 595.116664][ T2154] usb 4-1: Manufacturer: syz [ 595.117158][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.121314][ T2154] usb 4-1: SerialNumber: syz [ 595.125442][ T2154] usb 4-1: config 0 descriptor?? [ 595.132614][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.179278][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.188910][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.208474][ T5878] usb 5-1: Product: syz [ 595.216222][ T5878] usb 5-1: Manufacturer: syz [ 595.222386][ T5878] usb 5-1: SerialNumber: syz [ 595.417529][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 595.417548][ T30] audit: type=1326 audit(1751119519.905:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.3.2065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea238e929 code=0x0 [ 595.469868][ T2154] usb 4-1: USB disconnect, device number 98 [ 595.505933][ T5917] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 595.659935][ T5878] usb 5-1: cannot find UAC_HEADER [ 595.670228][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 595.692607][ T5917] usb 2-1: config 0 has an invalid interface number: 85 but max is 1 [ 595.708352][ T5878] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 595.717642][ T5917] usb 2-1: config 0 has an invalid interface number: 89 but max is 1 [ 595.725828][ T5917] usb 2-1: config 0 has no interface number 0 [ 595.738251][ T5917] usb 2-1: config 0 has no interface number 1 [ 595.752392][ T5917] usb 2-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 595.769613][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.795568][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.850645][ T5917] usb 2-1: Product: syz [ 595.866903][ T5878] usb 5-1: USB disconnect, device number 98 [ 595.876503][ T5917] usb 2-1: Manufacturer: syz [ 595.881170][ T5917] usb 2-1: SerialNumber: syz [ 595.919556][ T5917] usb 2-1: config 0 descriptor?? [ 596.144182][T13069] loop7: detected capacity change from 0 to 6 [ 596.156979][ T5878] usb 1-1: USB disconnect, device number 103 [ 596.170441][T13069] Dev loop7: unable to read RDB block 6 [ 596.184480][T13069] loop7: unable to read partition table [ 596.199303][T13069] loop7: partition table beyond EOD, truncated [ 596.231126][T13069] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.255033][ T2154] usb 2-1: USB disconnect, device number 117 [ 596.685987][ T5917] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 596.858397][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 596.880088][ T5917] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.889274][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.905176][ T5917] usb 4-1: config 0 descriptor?? [ 596.915933][ T5878] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 596.930540][ T5917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 597.088028][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.102973][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.128060][ T5878] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 597.142614][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.158559][ T5878] usb 5-1: config 0 descriptor?? [ 597.358112][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'. [ 597.367329][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'. [ 597.536987][ T5900] vhci_hcd: vhci_device speed not set [ 597.581470][ T5878] isku 0003:1E7D:319C.0022: item fetching failed at offset 5/7 [ 597.597554][ T5878] isku 0003:1E7D:319C.0022: parse failed [ 597.659135][ T5878] isku 0003:1E7D:319C.0022: probe with driver isku failed with error -22 [ 597.716223][ T5917] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 597.783633][ T2154] usb 5-1: USB disconnect, device number 99 [ 597.866299][ T5917] usb 1-1: device descriptor read/64, error -71 [ 598.565819][ T5917] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 598.693850][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 598.748951][ T5917] usb 1-1: device descriptor read/64, error -71 [ 598.858235][ T5917] usb usb1-port1: attempt power cycle [ 598.999337][T13120] netlink: 'syz.4.2082': attribute type 3 has an invalid length. [ 599.233999][T13122] bond1: entered promiscuous mode [ 599.255884][ T5917] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 599.277288][T13122] bond1: entered allmulticast mode [ 599.282959][T13122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.359789][ T5917] usb 1-1: device descriptor read/8, error -71 [ 599.403489][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2083'. [ 599.413554][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2083'. [ 599.576022][ T5878] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 599.665864][ T5917] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 599.686513][ T5900] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 599.694402][ T5917] usb 1-1: device descriptor read/8, error -71 [ 599.751598][ T5878] usb 2-1: config 0 has no interfaces? [ 599.762309][ T5878] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 599.773675][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.808353][ T5878] usb 2-1: Product: syz [ 599.817492][ T5917] usb usb1-port1: unable to enumerate USB device [ 599.832757][ T5878] usb 2-1: Manufacturer: syz [ 599.850702][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 599.873357][ T5878] usb 2-1: SerialNumber: syz [ 599.881489][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.904217][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.936500][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 599.959265][ T5900] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 599.971961][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.003891][ T5878] usb 2-1: config 0 descriptor?? [ 600.031576][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 600.059849][ T5900] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 600.102728][ T5900] usb 5-1: Manufacturer: syz [ 600.103236][T13128] netlink: 'syz.2.2084': attribute type 7 has an invalid length. [ 600.168192][ T5900] usb 5-1: config 0 descriptor?? [ 600.258119][ T5961] usb 4-1: USB disconnect, device number 99 [ 600.652595][ T5900] rc_core: IR keymap rc-hauppauge not found [ 600.736481][ T5900] Registered IR keymap rc-empty [ 600.741654][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.857361][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 600.985131][ T5900] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 601.022862][ T5900] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 601.264998][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.365908][ T5917] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 601.377178][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.436441][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.561027][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 601.571964][ T5917] usb 1-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 601.593963][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.596851][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.656460][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.680325][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.693928][ T5917] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 601.708970][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.782351][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.811888][ T5917] usb 1-1: config 0 descriptor?? [ 601.826748][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.866959][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.911740][ T5900] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 601.960496][ T5900] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 602.023540][ T5900] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 602.072989][ T5900] usb 5-1: USB disconnect, device number 100 [ 602.296942][ T5917] usb 1-1: string descriptor 0 read error: -71 [ 602.390502][ T5917] usb 1-1: USB disconnect, device number 108 [ 602.889863][ T5878] usb 2-1: USB disconnect, device number 118 [ 603.442670][T13155] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 604.586027][ T5917] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 604.755964][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 604.843265][ T5917] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 604.864898][ T5917] usb 4-1: config 0 has no interface number 0 [ 604.887890][ T5917] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.989470][ T5917] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 605.004673][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.026585][ T5917] usb 4-1: Product: syz [ 605.035787][ T5917] usb 4-1: Manufacturer: syz [ 605.056700][ T5917] usb 4-1: SerialNumber: syz [ 605.092095][ T5917] usb 4-1: config 0 descriptor?? [ 605.112702][ T5917] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 605.123192][ T5917] em28xx 4-1:0.132: Video interface 132 found: isoc [ 605.134886][ T5961] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 605.366310][ T5917] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 605.516962][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 605.524367][ T5961] usb 1-1: config index 0 descriptor too short (expected 22, got 18) [ 605.536419][ T5917] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 605.536741][ T5961] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 605.584342][ T5961] usb 1-1: New USB device found, idVendor=0b95, idProduct=2f3b, bcdDevice=60.e5 [ 605.601843][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.611332][ T5917] em28xx 4-1:0.132: board has no eeprom [ 605.647383][ T5961] usb 1-1: Product: syz [ 605.671863][ T5961] usb 1-1: Manufacturer: syz [ 605.686518][ T5917] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 605.701468][ T5961] usb 1-1: SerialNumber: syz [ 605.710291][ T5917] em28xx 4-1:0.132: analog set to isoc mode. [ 605.732749][ T5878] em28xx 4-1:0.132: Registering V4L2 extension [ 605.761596][ T5961] usb 1-1: config 0 descriptor?? [ 605.787566][ T5917] usb 4-1: USB disconnect, device number 100 [ 606.077916][ T5917] em28xx 4-1:0.132: Disconnecting em28xx [ 606.315786][ T978] usb 1-1: USB disconnect, device number 109 [ 606.549257][ T5878] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 606.646731][ T5878] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 606.725138][T13188] loop2: detected capacity change from 0 to 7 [ 606.741682][ T5878] em28xx 4-1:0.132: No AC97 audio processor [ 606.768718][T13188] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 606.798459][T13188] loop2: p1 start 892444690 is beyond EOD, truncated [ 606.815151][T13188] loop2: p2 start 692251825 is beyond EOD, truncated [ 606.846982][T13188] loop2: p3 start 2947565984 is beyond EOD, truncated [ 606.867742][T13188] loop2: p4 start 3710248819 is beyond EOD, truncated [ 606.910490][T13188] loop2: p5 start 536870912 is beyond EOD, truncated [ 606.910624][ T5878] usb 4-1: Decoder not found [ 606.937467][T13188] loop2: p6 size 1969750016 extends beyond EOD, truncated [ 607.082478][ T5878] em28xx 4-1:0.132: failed to create media graph [ 607.160711][ T5878] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 607.203731][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 607.324549][ T5878] em28xx 4-1:0.132: Remote control support is not available for this card. [ 607.342838][T13191] ================================================================== [ 607.350945][T13191] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 607.358333][T13191] Read of size 8 at addr ffff88804a2a0738 by task v4l_id/13191 [ 607.365877][T13191] [ 607.368204][T13191] CPU: 0 UID: 0 PID: 13191 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 607.368224][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.368234][T13191] Call Trace: [ 607.368242][T13191] [ 607.368250][T13191] dump_stack_lvl+0x189/0x250 [ 607.368276][T13191] ? __virt_addr_valid+0x1c8/0x5c0 [ 607.368292][T13191] ? rcu_is_watching+0x15/0xb0 [ 607.368316][T13191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.368338][T13191] ? rcu_is_watching+0x15/0xb0 [ 607.368361][T13191] ? lock_release+0x4b/0x3e0 [ 607.368383][T13191] ? __virt_addr_valid+0x1c8/0x5c0 [ 607.368397][T13191] ? __virt_addr_valid+0x4a5/0x5c0 [ 607.368413][T13191] print_report+0xd2/0x2b0 [ 607.368433][T13191] ? v4l2_fh_open+0xc7/0x430 [ 607.368455][T13191] kasan_report+0x118/0x150 [ 607.368471][T13191] ? v4l2_fh_open+0xc7/0x430 [ 607.368496][T13191] v4l2_fh_open+0xc7/0x430 [ 607.368517][T13191] ? __pfx___mutex_lock+0x10/0x10 [ 607.368543][T13191] em28xx_v4l2_open+0x157/0x9a0 [ 607.368570][T13191] v4l2_open+0x20f/0x360 [ 607.368585][T13191] chrdev_open+0x4c9/0x5e0 [ 607.368603][T13191] ? __pfx_chrdev_open+0x10/0x10 [ 607.368622][T13191] ? __pfx_chrdev_open+0x10/0x10 [ 607.368637][T13191] do_dentry_open+0xdf0/0x1970 [ 607.368662][T13191] vfs_open+0x3b/0x340 [ 607.368678][T13191] ? path_openat+0x2ecd/0x3830 [ 607.368701][T13191] path_openat+0x2ee5/0x3830 [ 607.368721][T13191] ? arch_stack_walk+0xfc/0x150 [ 607.368748][T13191] ? __pfx_path_openat+0x10/0x10 [ 607.368768][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.368791][T13191] do_filp_open+0x1fa/0x410 [ 607.368811][T13191] ? __lock_acquire+0xab9/0xd20 [ 607.368831][T13191] ? __pfx_do_filp_open+0x10/0x10 [ 607.368861][T13191] ? _raw_spin_unlock+0x28/0x50 [ 607.368879][T13191] ? alloc_fd+0x64c/0x6c0 [ 607.368899][T13191] do_sys_openat2+0x121/0x1c0 [ 607.368919][T13191] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.368939][T13191] ? exc_page_fault+0x76/0xf0 [ 607.368961][T13191] ? do_user_addr_fault+0xc8a/0x1390 [ 607.368981][T13191] __x64_sys_openat+0x138/0x170 [ 607.369002][T13191] do_syscall_64+0xfa/0x3b0 [ 607.369024][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.369045][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.369065][T13191] ? clear_bhb_loop+0x60/0xb0 [ 607.369082][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.369097][T13191] RIP: 0033:0x7f5b1eaa7407 [ 607.369112][T13191] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 607.369127][T13191] RSP: 002b:00007ffcda7d8e50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 607.369143][T13191] RAX: ffffffffffffffda RBX: 00007f5b1f146880 RCX: 00007f5b1eaa7407 [ 607.369155][T13191] RDX: 0000000000000000 RSI: 00007ffcda7d9f1b RDI: ffffffffffffff9c [ 607.369166][T13191] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 607.369175][T13191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 607.369185][T13191] R13: 00007ffcda7d90a0 R14: 00007f5b1f2ad000 R15: 000055cd1d86f4d8 [ 607.369203][T13191] [ 607.369208][T13191] [ 607.673278][T13191] Allocated by task 5878: [ 607.677721][T13191] kasan_save_track+0x3e/0x80 [ 607.682514][T13191] __kasan_kmalloc+0x93/0xb0 [ 607.687120][T13191] __kmalloc_cache_noprof+0x230/0x3d0 [ 607.692512][T13191] em28xx_v4l2_init+0x10b/0x2e70 [ 607.697459][T13191] em28xx_init_extension+0x11d/0x1c0 [ 607.702748][T13191] process_scheduled_works+0xae1/0x17b0 [ 607.708305][T13191] worker_thread+0x8a0/0xda0 [ 607.712904][T13191] kthread+0x70e/0x8a0 [ 607.716976][T13191] ret_from_fork+0x3fc/0x770 [ 607.721574][T13191] ret_from_fork_asm+0x1a/0x30 [ 607.726338][T13191] [ 607.728659][T13191] Freed by task 5878: [ 607.732636][T13191] kasan_save_track+0x3e/0x80 [ 607.737325][T13191] kasan_save_free_info+0x46/0x50 [ 607.742368][T13191] __kasan_slab_free+0x62/0x70 [ 607.747144][T13191] kfree+0x18e/0x440 [ 607.751050][T13191] em28xx_v4l2_init+0x1683/0x2e70 [ 607.756081][T13191] em28xx_init_extension+0x11d/0x1c0 [ 607.761367][T13191] process_scheduled_works+0xae1/0x17b0 [ 607.766926][T13191] worker_thread+0x8a0/0xda0 [ 607.771544][T13191] kthread+0x70e/0x8a0 [ 607.775613][T13191] ret_from_fork+0x3fc/0x770 [ 607.780218][T13191] ret_from_fork_asm+0x1a/0x30 [ 607.784987][T13191] [ 607.787328][T13191] The buggy address belongs to the object at ffff88804a2a0000 [ 607.787328][T13191] which belongs to the cache kmalloc-8k of size 8192 [ 607.801417][T13191] The buggy address is located 1848 bytes inside of [ 607.801417][T13191] freed 8192-byte region [ffff88804a2a0000, ffff88804a2a2000) [ 607.815488][T13191] [ 607.817818][T13191] The buggy address belongs to the physical page: [ 607.824225][T13191] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a2a0 [ 607.833071][T13191] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 607.841656][T13191] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 607.849223][T13191] page_type: f5(slab) [ 607.853236][T13191] raw: 00fff00000000040 ffff88801a442280 ffffea0000c4f600 0000000000000006 [ 607.861832][T13191] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 607.870420][T13191] head: 00fff00000000040 ffff88801a442280 ffffea0000c4f600 0000000000000006 [ 607.879093][T13191] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 607.887788][T13191] head: 00fff00000000003 ffffea000128a801 00000000ffffffff 00000000ffffffff [ 607.896460][T13191] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 607.905124][T13191] page dumped because: kasan: bad access detected [ 607.911543][T13191] page_owner tracks the page as allocated [ 607.917270][T13191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12748, tgid 12741 (syz.4.1978), ts 569888186552, free_ts 512476697909 [ 607.938820][T13191] post_alloc_hook+0x240/0x2a0 [ 607.943594][T13191] get_page_from_freelist+0x21e4/0x22c0 [ 607.949149][T13191] __alloc_frozen_pages_noprof+0x181/0x370 [ 607.954969][T13191] alloc_pages_mpol+0x232/0x4a0 [ 607.959828][T13191] allocate_slab+0x8a/0x3b0 [ 607.964335][T13191] ___slab_alloc+0xbfc/0x1480 [ 607.969446][T13191] __kmalloc_noprof+0x305/0x4f0 [ 607.974302][T13191] n_hdlc_alloc_buf+0x83/0x210 [ 607.979069][T13191] n_hdlc_tty_open+0x277/0x460 [ 607.983843][T13191] tty_ldisc_failto+0x1e1/0x330 [ 607.988699][T13191] tty_ldisc_restore+0x57/0x110 [ 607.993565][T13191] tty_set_ldisc+0x3a1/0x560 [ 607.998164][T13191] tty_ioctl+0xc38/0xde0 [ 608.002420][T13191] __se_sys_ioctl+0xf9/0x170 [ 608.007016][T13191] do_syscall_64+0xfa/0x3b0 [ 608.011528][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.017428][T13191] page last free pid 11912 tgid 11912 stack trace: [ 608.023963][T13191] __free_frozen_pages+0xc71/0xe70 [ 608.029080][T13191] __put_partials+0x161/0x1c0 [ 608.033760][T13191] put_cpu_partial+0x17c/0x250 [ 608.038544][T13191] __slab_free+0x2f7/0x400 [ 608.042989][T13191] qlist_free_all+0x97/0x140 [ 608.047608][T13191] kasan_quarantine_reduce+0x148/0x160 [ 608.053076][T13191] __kasan_slab_alloc+0x22/0x80 [ 608.057926][T13191] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 608.063399][T13191] __anon_vma_prepare+0xcb/0x4a0 [ 608.068338][T13191] __handle_mm_fault+0x4d02/0x5620 [ 608.073634][T13191] handle_mm_fault+0x40a/0x8e0 [ 608.078406][T13191] do_user_addr_fault+0xa81/0x1390 [ 608.083526][T13191] exc_page_fault+0x76/0xf0 [ 608.088042][T13191] asm_exc_page_fault+0x26/0x30 [ 608.092898][T13191] [ 608.095221][T13191] Memory state around the buggy address: [ 608.100848][T13191] ffff88804a2a0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.109002][T13191] ffff88804a2a0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.117073][T13191] >ffff88804a2a0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.125131][T13191] ^ [ 608.131020][T13191] ffff88804a2a0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.139086][T13191] ffff88804a2a0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 608.147143][T13191] ================================================================== [ 608.190197][T13191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 608.197460][T13191] CPU: 0 UID: 0 PID: 13191 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 608.209182][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.219242][T13191] Call Trace: [ 608.222527][T13191] [ 608.225459][T13191] dump_stack_lvl+0x99/0x250 [ 608.230064][T13191] ? __asan_memcpy+0x40/0x70 [ 608.234665][T13191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.239895][T13191] ? __pfx__printk+0x10/0x10 [ 608.244496][T13191] panic+0x2db/0x790 [ 608.248404][T13191] ? __pfx_panic+0x10/0x10 [ 608.252919][T13191] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 608.258817][T13191] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 608.265150][T13191] ? print_memory_metadata+0x314/0x400 [ 608.270638][T13191] ? v4l2_fh_open+0xc7/0x430 [ 608.275249][T13191] check_panic_on_warn+0x89/0xb0 [ 608.280194][T13191] ? v4l2_fh_open+0xc7/0x430 [ 608.284790][T13191] end_report+0x78/0x160 [ 608.289036][T13191] kasan_report+0x129/0x150 [ 608.293561][T13191] ? v4l2_fh_open+0xc7/0x430 [ 608.298167][T13191] v4l2_fh_open+0xc7/0x430 [ 608.302593][T13191] ? __pfx___mutex_lock+0x10/0x10 [ 608.307638][T13191] em28xx_v4l2_open+0x157/0x9a0 [ 608.312502][T13191] v4l2_open+0x20f/0x360 [ 608.316749][T13191] chrdev_open+0x4c9/0x5e0 [ 608.321176][T13191] ? __pfx_chrdev_open+0x10/0x10 [ 608.326121][T13191] ? __pfx_chrdev_open+0x10/0x10 [ 608.331061][T13191] do_dentry_open+0xdf0/0x1970 [ 608.335852][T13191] vfs_open+0x3b/0x340 [ 608.339965][T13191] ? path_openat+0x2ecd/0x3830 [ 608.344744][T13191] path_openat+0x2ee5/0x3830 [ 608.349350][T13191] ? arch_stack_walk+0xfc/0x150 [ 608.354213][T13191] ? __pfx_path_openat+0x10/0x10 [ 608.359165][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.365248][T13191] do_filp_open+0x1fa/0x410 [ 608.369762][T13191] ? __lock_acquire+0xab9/0xd20 [ 608.374622][T13191] ? __pfx_do_filp_open+0x10/0x10 [ 608.379661][T13191] ? _raw_spin_unlock+0x28/0x50 [ 608.384517][T13191] ? alloc_fd+0x64c/0x6c0 [ 608.388863][T13191] do_sys_openat2+0x121/0x1c0 [ 608.393549][T13191] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.398755][T13191] ? exc_page_fault+0x76/0xf0 [ 608.403442][T13191] ? do_user_addr_fault+0xc8a/0x1390 [ 608.408731][T13191] __x64_sys_openat+0x138/0x170 [ 608.413594][T13191] do_syscall_64+0xfa/0x3b0 [ 608.418110][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.423313][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.429383][T13191] ? clear_bhb_loop+0x60/0xb0 [ 608.434155][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.440058][T13191] RIP: 0033:0x7f5b1eaa7407 [ 608.444476][T13191] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 608.464091][T13191] RSP: 002b:00007ffcda7d8e50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 608.472513][T13191] RAX: ffffffffffffffda RBX: 00007f5b1f146880 RCX: 00007f5b1eaa7407 [ 608.480492][T13191] RDX: 0000000000000000 RSI: 00007ffcda7d9f1b RDI: ffffffffffffff9c [ 608.488488][T13191] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 608.496461][T13191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 608.504432][T13191] R13: 00007ffcda7d90a0 R14: 00007f5b1f2ad000 R15: 000055cd1d86f4d8 [ 608.512411][T13191] [ 608.515803][T13191] Kernel Offset: disabled [ 608.520146][T13191] Rebooting in 86400 seconds..