last executing test programs: 13.834527956s ago: executing program 3 (id=1227): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x859d, 0xffff, 0x9, 0x0, 0x15, "7c869fdb80f084c63a7ff92265ed88a8f0fc4b"}) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) getrandom(0x0, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) syz_open_dev$vim2m(0x0, 0x1, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) 13.604885941s ago: executing program 3 (id=1230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1e1, @mcast2, 0xad1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x32}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x30}}], 0x1, 0x448b8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r6, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0xffffffff, 0x34324142, 0x6, 0x0, [{0x2}, {0x0, 0x271f4}, {}, {0x6}, {0x0, 0x80000000}, {}, {}, {0x1}], 0x5}}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x4}) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x0, 0x4, r6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r3}]) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x106, 0x5}}, 0x20) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x140) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffff8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x50}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r12, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 10.936073329s ago: executing program 3 (id=1239): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x10080}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x80}, 0x1c) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.495567337s ago: executing program 3 (id=1244): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10.075260091s ago: executing program 3 (id=1246): socket$inet(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) inotify_init() openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000b80), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x80) fcntl$setlease(r2, 0x400, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xe84c1ec4ce0ea591}], 0x1, 0x81) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 6.885443604s ago: executing program 4 (id=1252): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getdents(r0, &(0x7f0000000040)=""/241, 0xf1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x6, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r1}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x9dc1, 0x4300) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000380)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000400)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000500)={&(0x7f0000000440)=[r3, r4, 0x0, r5, r6], &(0x7f0000000480)=[0x1, 0x5, 0x4, 0x2, 0x0, 0x100, 0x8, 0x6, 0x10], 0x1, 0x5, 0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000540)=0x8) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xe, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r7, 0xc10c5541, &(0x7f00000005c0)={0xff, 0x8, 0x1}) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000700)) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x10002, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r8, 0x3309) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000880)={0x0, r9, 0x7, 0xffff, 0x8, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000008c0)=0x9) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000900)={0x4000000, 0x3, 0x7}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000940)='veth0_to_batadv\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000980)={0x9, 0x3}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000009c0)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000a00)=0x4) mkdir(&(0x7f0000000a40)='./file0\x00', 0x80) syz_open_dev$hidraw(&(0x7f0000000a80), 0x1, 0x602081) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000e00)={&(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[{}, {}, {}], &(0x7f0000000c40)=[0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x3}) 6.71961333s ago: executing program 4 (id=1253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x6, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200), 0x0, r2}, 0x68) 4.866277658s ago: executing program 0 (id=1261): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a000000000000000020000000000000000000000000000102f500000000000002000100000000000400000c000000fb05000500000000000a0000000000000000000000000000000000000000000001070000ea000000000200080008"], 0x90}, 0x1, 0x7}, 0x14) 4.467704877s ago: executing program 1 (id=1262): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x3, 0x3008, 0x0, 0xd, 0x1, 0x2, 0x6}}) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x16}, 0x58) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)="0a9159bf175ab412ab5bc5c65758d8f21b4ddaf7e91053c3f612254e89e74eff97a96933ac860046ffb7081c333c38e693728925533a0c47794d2150c077100b3a022bf0fcb5d09f1887aa37b343f79e75052a70ba9e6ef9eae53e8ff6a1cf2f8517bffa70fe5cd1dfa58d9106d0dfc38d85410e158d3360b15d8581b3fc90c2968440220cf4c2d3335a082185deb4508bb9a8e7b0eff9dadbfc630dd90869bc62970e34062119e46bd17af17a8841700f878e9df7b46745819d67b0eff5b2f9c2cf2bfa4aef48", 0xc7}, {0x0}, {&(0x7f00000004c0)="1b5fddd9829945b3612a835312e36a6d2cfda0ccfb9f55922ac76b93bce03466a00495fda063b6aa7c8eef3277cb7948cbc12461fdd0771963fb2525db57aab34f3182e9746ff524741c495e7fa7fe6a18a665c83e43e035585cdbcce329a122c6bbc063eaf0915f92f2d62c5e35e6c9feeb6648", 0x74}], 0x4, &(0x7f0000000580)=[{0xc0, 0x112, 0x2, "c7be48e7e50b14c5d6640ad014ad4bd6e088117b72f23e883d81efa41b99967f7ac8eb2b211a713505b3b8739687f894bc9c0475868746024c157072c4e99aa1d53a4f1925ffee2fff9322ea65c5c7b678b9bdef37ea4d7936ab0d75179c8f2fc4a5eaec20727463d8db338e693589cb19ce9663ac0c075a0334cbb14aa575f5109c0e6ba929b755400500bd27157b8866dd53e7bb86f9885988e96433353f197d179a4d823f9c4679"}, {0x20, 0x116, 0x0, "cd74d885054f481370d5855745"}], 0xe0}, 0x8010) r5 = epoll_create1(0x0) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)={0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.397444239s ago: executing program 2 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x4}, [@typed={0x8, 0x12a, 0x0, 0x0, @u32=0x10000}]}, 0xfffffffffffffe7b}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.267353385s ago: executing program 2 (id=1264): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = getpid() mprotect(&(0x7f0000ce1000/0x4000)=nil, 0x4000, 0x3000008) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="240004f258d179364f56a99bb4b800", @ANYRES16=r9, @ANYBLOB="00022bbd7000000000000200000008006100100000000800610000000020"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}}, 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b14fea7a1316b81525ccf0f8b91fd2eddb851ba62b00d87337407214ea270251"}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r12) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fcdbdf25030000003000018014000400ff010000000000000000000000000001060001000a000000080007a9a3bae4c7dad5678edd86cbd5fe4e33780c69e86e2625922da3155a981aceccd0c47e8f1eb8afcf100e5be1d635cbf2bd4ccb2cda0c3cbc1f5b9d0a650bdc8f4c6651583ad6bf6e9fba2e4cfdc22ec9a14fe46894c3f35c8edb275b2c0f00a2c5dc9bbe705e91b738671dcb9acc5679b5103867892d407c829d8dc5d156d2e1c646b5714783b992c39980c984bf8ce455b1f743f5d78a4159349e821e820ea9ea37a906e3f615c7af6d17ed474a"], 0x44}}, 0x40440d0) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r14, 0x4004ae99, &(0x7f0000000100)=0x3) 3.835805279s ago: executing program 0 (id=1265): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x80000000008000) 3.60113299s ago: executing program 0 (id=1266): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) 3.222377585s ago: executing program 2 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="4400330040bc01000802110000010802110000"], 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 2.955635094s ago: executing program 0 (id=1268): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x62}}}], 0x18}}], 0x2, 0x0) 2.91808948s ago: executing program 0 (id=1269): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x44b2, &(0x7f0000000380)={0x0, 0xaec7, 0x8, 0x1, 0x101}, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x2840, &(0x7f0000000300)={0x0, 0x2002, 0x40, 0x0, 0x8000001e, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002140)=ANY=[@ANYBLOB="bd7000fedbdf250a003f00", @ANYRES32=0x0, @ANYBLOB="bc2a0000080002000100000014000100fe880000000000000000000000000101"], 0x38}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mmap(&(0x7f0000510000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r7, 0x1f229000) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) syz_io_uring_setup(0x672, &(0x7f0000000840)={0x0, 0x29cc, 0x18300}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r10) 2.845132381s ago: executing program 2 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000180001019432b41ed57e8b000200000000f2ff"], 0x24}}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x40, 0xf0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0xc3, 0x0, {0x7, 0x25, 0x1, 0x81, 0x40, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7b, 0x2, 0x9, {0x7, 0x25, 0x1, 0x0, 0x1b, 0x8000}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x6, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x66, 0xf00f, 0xfffa, [0x3f00, 0xffa0f0]}]}}) 2.671848205s ago: executing program 4 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000003b0000000800", @ANYRES32=r1, @ANYBLOB="4400330040bc010008021100000108"], 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 2.308085843s ago: executing program 4 (id=1272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac1414bb00000000000000006c00000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105"], 0x1fc}}, 0x4000) 2.051279494s ago: executing program 4 (id=1273): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b0001000000000904000001031d02000905bb03"], 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x5, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="7800000055003d0926bd70000200000007000000", @ANYRESHEX=r1, @ANYRES16=r1, @ANYRESOCT=r3, @ANYBLOB="00010400000200000000000000000000000000008edd000020000100", @ANYRES32=r6, @ANYBLOB="000200006401010200000000000000000000000086dd00", @ANYRES8=r4], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x5d, 0x0, r9}, &(0x7f00000006c0), &(0x7f00000001c0)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e00)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newchain={0x3c, 0x64, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x8}, {0xfff2, 0x10}, {0xfff2, 0xfff7}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x7}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22040878}, 0x10010) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="ce"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x8d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x9, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "82fd245f80"}, {0x5, 0x24, 0x0, 0xc7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x8, 0xd}, {0x6, 0x24, 0x1a, 0x401, 0x8}, [@obex={0x5, 0x24, 0x15, 0x63}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x8, [0x4, 0x6, 0xfff, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x4, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x31, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x80, 0x5}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x6, 0x3, 0xb7, 0xff, 0xd}, 0x142, &(0x7f00000001c0)={0x5, 0xf, 0x142, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "e4ef6dd26597892ac9a799ffd6c87fb3"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0x1000}, @ptm_cap={0x3}, @generic={0x101, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1fede9dd366ea0ffaddc3eb6513d153b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x1, 0x7}]}, 0xa, [{0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "b4ced06dc6e91eca53c323c25b2eadd79c801cb934cafa715511589bc610e89d00e8e5a80f470c18f0b4caf1ba9c4a920a7db0a6e187a5e5032f3e7501298c7104903fba8a75192447bc0528f632a8cd3603546a7f4616f961a834f57a30f96d5a13c8ba2a7abe7a2db4e918b9f0071210eabe7bfae6a7e79c25a468a320ad36e62488d5867c2874062d2c58d3527c6d3217ab27a180be91485f85a9cc5128d879419bb59db066e2659dd44612520c5cc950881d5c538d08a8866d49"}}, {0x82, &(0x7f0000000400)=@string={0x82, 0x3, "340be436f7dbd596618bad5193afaa68f7afc5504d48a2dbbfc29dad7925c313ff6c9a2f3738158447bb2e9930624553fc65b1f2f27a8fba9f2c55d0a30e315462a614a91f9b00dd4f2ada36bab8556755c0fe71bc1447b65162c1251dfbf741e6a7ff3b15c55db7a2832c5c05f24e88131981b7ed234868872aa208dc238d63"}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "7a12acc7a16d47fd7ee085c0636bf066faa2227f2ab1d8a96ea88b16880ee51b15efea2176d9d1a47df9457db1b589d3fa76f46f68818924fa7ef5b2514ec97ef68efdc8cb77f0a99074e5298ec6b2aebe03ad9ebd98318dc382cf9d573141f8f01d4826e2c2f74535808567eae328a8a44f2e963da962f59c7fcc3f85039144b92f954a767c321f34838866c183eed0eb5be32b3ae4109045a72e49b9824eed2cfee42f7526f19d510b23ccfaa13c91fe865a1d11a218d2d49b921d7166d147b48add1848e2b5320dfe6c03a4e6457db5fa829904c5b977802875553e9d35e05c13f5928f"}}, {0xd8, &(0x7f00000005c0)=@string={0xd8, 0x3, "ec344a7b281260e3fecd57c422cef3572a0e3c646246d1fbf50b31c58f6cb78601a9be73f8b95cfcec34cfaebee13c33af562e2a540f314d65454185e086810b29a7cfbcd8df8d6a0042bc3deaba427ee22b25c1fd96ecea2bbe60221dd3b605fba55932d66f64fabd3c3dcda07c1b950524e3193ccbd306c0b3c7b4cada5bf9852308d67857f151c57c1c5df3f0b38f934d21155de723d10317aff7996908ac698bbb7fea382b56553ab3199cdf551aa8113c47001744f18910840d378dfd77bfd9705b020d7e755e69d941771975cb4dbe819851a3"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x449}}, {0xdb, &(0x7f0000000740)=@string={0xdb, 0x3, "5c104b61e2d55663fa3278e8dadd20534b5b0e4656586822e820251a8feb7d8337d3b82f3d923826463758ce79b36028e42bbafbf0f4851447548fbf2f57ddd68b9b216001699e9d0be8a8be679294ba3a4c170f06697637a3896f559fe66856e79ec80666a3db7ec2f1d0a60ad29e3d450d846f1842dd08ca92fcacdcae20df5472566168ff416019346bbce824518210c15ea985ca1f5da156698fd480366ef585ea64a05d3982e60f0e32edf28d46db723c56ee0270eaf90c4502abe9575e17416c99381b94e7fe5fbad985fee1c7291e21b1a3c22d543b"}}, {0x54, &(0x7f0000000840)=@string={0x54, 0x3, "bf1bf29047a8b59bfa0fcc14170bb153f22ac69b412cd087ad9afa3238a2a940f6f2a2fb62d8c51a91a4fbdd701ecc12738ee5a686c7930109daec61f4fcd7aac97c367795f357e79e105031daa7697d177c"}}, {0xdd, &(0x7f00000008c0)=@string={0xdd, 0x3, "dae4444a1231fa0b0ab1e682013d5c14c3c820a664c6f591760c67b3a4e3031634779c0a0f8c8e03e5478e3dd351dcc87de99facf8c70d8a80427c4c792ee21acad6126af73c4ccf1d33823b12644992e7363532d9ce610f237f1cd45fa31bf0d5b7c762c3f2dfb4a2814d6e45910d686606530cf78493e4e3b184d43bc7704526de44ac8edfca0bcc80f8471e2f7940a844efcc243206ff42d54189d6a18fb60cd29ae3a4b8edb0f462db84665bee5220ddc3595f275014b9c9c5dba657fb738ff6f394f01ded83094444f043b89e1fc13b3c2d47534dff9163c7"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_connect$uac1(0x4, 0x129, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0x80, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x2, 0x5, 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x5, 0x3, 0x2, 0x4, 0x1c}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x8f4, 0x2, "df9daadc7b4c"}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x5, 0x4, [0x2, 0x1, 0x7, 0xa], 0x7}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x2, 0xa, 0xd, 0x2], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1000}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xd, 0x3, 0x8, 0x2c, "6d8a", "ddee"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x6, 0x7, "d2c27fce1135"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9a, 0x3, 0x9, 0x2, "2e7bbe", "16"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0xe3, 0xed, {0x7, 0x25, 0x1, 0x0, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3, 0x1004}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x1, 0x5, "2ef07847bfc58976"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x45, 0x2, 0x9f, 0x7}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x0, "221d40", "8f0a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0xb1, 0x5, 0x2, "d34d4003913617aacf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xbb, 0x3f, 0x7, {0x7, 0x25, 0x1, 0x2, 0x49, 0x7}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0xfe9368e900fcd8e8, 0x0, 0x8, 0x9, 0x10, 0x60}, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="052ea9aa31253f050000"], 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x843}}, {0x79, &(0x7f0000000cc0)=@string={0x79, 0x3, "2dcbacb660d243716ef9ffc9a405a9784dc0e6a993984eb6313f1cb6fb81dfa8361a8abcbcf3aee9057cd35e28c8334ee8d93ae5bf53372b70dca5814de4cd2d3ff4ec4afc81b7530870da301ba05da04ee96b0dc56758e56aa105c2c2d021191af2993b424a70c2da293ba0cd0bd7e0261064cd2d61f7"}}, {0x7d, &(0x7f0000000d40)=@string={0x7d, 0x3, "8b2d6a63364d5989b580035d336f4a25f6c7128ac56334de24ac949abf6ee5e28bdb356db9cead939aa31153131c2ac552b6caaeee97be9e875bae7e828a76db354e02bee912fa30a13c0370c0bdb2d6fb5cd33f4cd5699a6601bbd6b26f8459fb3038c8e33bf4a6b86090482613fa50fa59be9593c67c3a35353c"}}]}) 1.077507544s ago: executing program 2 (id=1274): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)="88", 0x1}, {&(0x7f0000000140)="d3639dffd7ae981abd57ab9aafcaa8be1bf53521d99ae18956132b32cc7ca80a84c482a8bea20f928ab8ef7dbd9fd3af4cfa", 0x32}, {&(0x7f00000001c0)="010886d4cd82", 0x6}, {&(0x7f0000000300)="ae503072add18cb4d5fb776f88a5235d82759b3b509699d4ebb229675eacbfabc8a2a3ab8ab76782910d5673b535d7e31d69ef912435f66c7069283b9405fe267b39533cfbf8ce5b1f191ce2cc37cd6bdb6982653d43be263d4323cd16116cb578827c1227f5e8f2dcfad67830088398d7f5f1d16a8be5aa432054644ca433fd2910abff9ea3aeb0bf36f00fa2fb", 0x8e}, {&(0x7f00000003c0)="340e04ff74d359e1d6d525f97f983c9e62ef00009e016504c87fceab287efb92ba47cd7927ac55f259596cc18fccd7dfade8a4e79794def8164c5d6c431650ea9fdaa11b9db9a1eda6885ff5c09bc9259fa67e46d3ff742a48697c6e6dc6ea1828f08b3694e0f4b386098bef72ae5258d50a2bbf72b3965399802635f5d48ec9", 0x80}], 0x5}, 0x4048043) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x401, 0x3, 0x4, 0x9, 0x210e}, &(0x7f0000000280)=0x98) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x2, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) syz_emit_ethernet(0xfd4, &(0x7f0000000900)={@broadcast, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x9300, "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"}}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x6, 0xfffffffd, 0x3ff}}) 997.969601ms ago: executing program 1 (id=1275): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a000000000000000020000000000000000000000000000102f500000000000002000100000000000400000c00000000051f0500000000000a0000000000000000000000000000000000000000000001070000ea000000000200080008"], 0x90}, 0x1, 0x7}, 0x14) 751.7006ms ago: executing program 1 (id=1276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x100000000000000) 656.173398ms ago: executing program 0 (id=1277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x73, 0xff7ef001) mkdirat(r2, 0x0, 0x100) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40501000000fd8f71103b00000000007e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x2, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x525, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x4, 0x3, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0x4, "ca78b2"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0xf, 0x7, {0x7, 0x25, 0x1, 0x80, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0xc0, "b1", "f57968"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x3, 0x7}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x8, 0x7, "4cd4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd4, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0x6, 0x7}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000002040)="d4", 0x1, 0x4040000, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) tkill(0x0, 0x13) waitid(0x0, 0x0, &(0x7f0000000380), 0x2, 0x0) sendto$inet(r3, &(0x7f00000002c0)="88b8616ef6cd6c12b46ffb0e6ee4f16922e3b02e2ed37bfda31d9043b3db01e276fda40be4a2823ec2f376b89875a0fa858acaf68a01c4485164218286ba05f45c50545e8a3ba7d34810a9bac952eeff17c7fc37114f0b6429db3ff5a0976513d0766139e7a4bad17ec9e6822e3be1", 0x77, 0x4400c0e5, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000200)=""/185, 0xb9, 0x40000002, 0x0, 0x0) write(r3, &(0x7f0000000500)="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", 0x1000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) getpid() 488.537205ms ago: executing program 3 (id=1278): time(0x0) time(0x0) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100000000000000600000000000", @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 399.533953ms ago: executing program 1 (id=1279): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x80}, 0x1c) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 183.252623ms ago: executing program 1 (id=1280): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x62}}}], 0x18}}], 0x2, 0x0) 95.757589ms ago: executing program 2 (id=1281): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000fc0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000240)="5ecc4299c73419d2a128e2a55d97e869f002a0c1cac9398f82634124f2920370a498e34b83ff094fed83ee54df2d59ee768235edfe3a528b7dc6043497b24d2acf32faae2cfb159c47a5a2e724c005c2994011e7de7513f285f1df22336508590b35b8a2157115d88ef131ecfc69b0b026fb9874f568e2287eaf2ddb0888e3f37998bf4d0d50aaeaf85da00b2265", 0x8e}, {&(0x7f00000006c0)="87513968452fc16c6550dc65a3da4b5a9a236a52e6848e2e4522fbb531c7db912d386d84ed36771c7ad506da8aba9f7884258aae660fc28de36565cc46541b7b31672320010d72df60d94b6c7b718a99f8bec3f1daef3f361b6d2ac2dbfe91ab28570d923557889e923657e8d1b6cf23584be41057a17db17e6a317bf17852a57ae4397e0866843328b946fb973235ecf6eea3476d7c8f78712faa34e305504c7af289748d21cd9ff1e86a8807ec7f48650f66ecffac144d1d831da40ac106aa96a6263e78647dd77265c9", 0xcb}, {&(0x7f00000004c0)="1408676ec89934f279829c4bdbebf20e5de8acf5f6669717c9da96ba62b1b40aa5668f716c0f9fb44a89a381fc423f57fe39cad2eca0d7fec0b7b0954857db8049a527e43a65981ecd56", 0x4a}, {&(0x7f0000000580)="549dbc204f47e308a88856ce1e0d7d4039fc32bf6ede14b7fa64d3dbb202601b16e3c12b371dcf3c5761744df755ff3e3ee0229f9484247f093cc708bb3b8a5f2093552aa8b35d16b201be09c89186f12b2dc2ee8f979412fed1833169f24b9d29d330db237bb891bb9a90705ae73651efc4510ffb261206f5082cd14ea559421a522f41e986d82596653df81787ff2d437df30c4a79524105d0d8009765acc9ffa8012081", 0xa5}, {&(0x7f00000007c0)="b691bd073c49794ef8619820d3ed2f6e5a574b06a5ba17c260a03b3b16a9293892d3c374ddc3c03d6dee62b3f6cbf779f56fe6044cc9ea9a900ba281289b7d6fa6612a31108dd818ae8f6a26313379ffe7b57346655997ba085c9d1989b70ec2af798ba4be3574520b5df6c85508eaf979be60e5c050fa7aaae9ad58bb0653091fdd8c518adfdd69a4f9d63ac4f66bdd8d024c6dab986121a4ed35ee26e5be8dc439fd346e0b18ef03fadfafc5cb1db0fc378fec4eea8d3c22f208541bc70419ff34489fab3ff82628e473a95f490667f7cb5c1d53c04c039744dfcc40634a3307037a0b3227f1c6bd8cddc9", 0xec}, {&(0x7f00000008c0)="c90086a5741485b2c109410e9f35a286e4775c597792cebc959ab5772579cd33c343570e6e86a77af43f71b43e9ab826ad76c1db7e2e5f01125a93d52831054c71a60e633be50c6df5", 0x49}, {&(0x7f0000000140)="ae2ee9556c06173d86f6353373a17d8aebe637016a6f5376774f94ab7c22709614bcd759b7784b334bb8ca224f8c5371a681f87fa8f6a1f30d410a105f441a", 0x3f}], 0x7, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x60, 0x4}}, {{&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="6a2b82172dad47c492f45c4b837aa1a5cf22be820dfb28845885d7ad686bf8e6c8d7c7d3e81fd86c226f7209a3b45846f149612e81982041c5441267311e1af9d4ab50", 0x43}], 0x1, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x98, 0x4}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x48, [@private]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ptrace(0x10, r3) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, r6, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x40}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x20004000) r10 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000000)="7ea58a8c3b671fa65a0e077ac83607e4d7dbdf1a69b5a6c33343da5f8e86936336aa7e03b90a5787e6d28ec3", 0x2c, 0x4000001, 0x1, {0x0, r13}}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") fsopen(&(0x7f0000000000)='devpts\x00', 0x1) 1.424983ms ago: executing program 4 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB='D\x003'], 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 0s ago: executing program 1 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x0) r1 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000400)='uid', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8000}) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x2}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff6000/0x4000)=nil, 0x400c) shmdt(0x0) r6 = dup2(r4, r4) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r8, @ANYRES64=r7], 0x1c}}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) kernel console output (not intermixed with test programs): vrusb2: ********** [ 511.855373][ T8336] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 511.917238][ T8336] pvrusb2: Important functionality might not be entirely working. [ 512.044512][ T8336] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.146454][ T8336] pvrusb2: ********** [ 512.203371][ T2342] pvrusb2: Invalid write control endpoint [ 512.245293][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 512.264911][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 512.329128][ T8844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.339145][ T8844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.369408][ T8844] pvrusb2: Invalid write control endpoint [ 512.397476][ T5966] usb 5-1: USB disconnect, device number 31 [ 512.719691][ T2342] pvrusb2: Invalid write control endpoint [ 512.801122][ T8336] usb 3-1: USB disconnect, device number 45 [ 512.817373][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 512.841591][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 512.943524][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 512.967946][ T2342] pvrusb2: Device being rendered inoperable [ 512.988036][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.012596][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 513.037031][ T2342] pvrusb2: Attached sub-driver cx25840 [ 513.050076][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.073376][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.493054][ T8865] Cannot find del_set index 4 as target [ 514.126080][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.729'. [ 514.135474][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 514.145936][ T8882] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 514.398113][ T8882] bond4: entered allmulticast mode [ 514.404339][ T8882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.188423][ T5966] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 515.363363][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.378984][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.404513][ T5966] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 515.414060][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.427646][ T5966] usb 2-1: config 0 descriptor?? [ 515.916143][ T8918] binder: 8900:8918 unknown command 0 [ 515.922326][ T8918] binder: 8900:8918 ioctl c0306201 200000000c40 returned -22 [ 516.437238][ T5966] usbhid 2-1:0.0: can't add hid device: -71 [ 516.454224][ T5966] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 516.533476][ T5966] usb 2-1: USB disconnect, device number 26 [ 516.578543][ T5965] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 516.738533][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 516.755598][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.785699][ T5965] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 516.806396][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.833449][ T5965] usb 5-1: config 0 descriptor?? [ 517.126632][ T5965] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 517.400669][ T8336] usb 5-1: USB disconnect, device number 32 [ 518.354117][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.431470][ T8967] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 519.263225][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.411546][ T8970] bond1: (slave gretap1): making interface the new active one [ 519.490009][ T8970] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 519.535026][ T5909] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 519.818818][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 519.846675][ T5909] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 519.873430][ T5909] usb 3-1: config 0 has no interface number 0 [ 519.906652][ T5909] usb 3-1: config 0 interface 184 has no altsetting 0 [ 519.944956][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 519.980427][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.004614][ T5909] usb 3-1: Product: syz [ 520.033424][ T5909] usb 3-1: Manufacturer: syz [ 520.056371][ T5909] usb 3-1: SerialNumber: syz [ 520.100429][ T5909] usb 3-1: config 0 descriptor?? [ 520.110446][ T5909] smsc75xx v1.0.0 [ 520.114976][ T5909] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 520.166835][ T5909] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 520.199545][ T5910] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 520.371011][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 520.389497][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 520.405023][ T5910] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 520.417437][ T5910] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 520.433516][ T5910] usb 5-1: config 255 has no interface number 0 [ 520.440861][ T5910] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 520.458900][ T5910] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.483335][ T5910] usb 5-1: config 255 interface 81 has no altsetting 0 [ 520.503478][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 520.522954][ T5910] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 520.546260][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.632712][ T5910] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input27 [ 520.757895][ T8975] bond1 (unregistering): (slave gretap1): Releasing active interface [ 520.767087][ C1] usbtouchscreen 5-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 520.814998][ T8975] bond1 (unregistering): Released all slaves [ 521.218579][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.245415][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.352194][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.407560][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.714032][ T979] usb 3-1: USB disconnect, device number 46 [ 522.038985][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 522.178610][ T24] usb 4-1: device descriptor read/64, error -71 [ 522.258666][ T5965] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 522.418785][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 522.470359][ T9034] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 522.480342][ T979] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 522.511694][ T9034] batman_adv: batadv0: Adding interface: ip6gretap1 [ 522.534196][ T9034] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.560699][ T24] usb 4-1: device descriptor read/64, error -71 [ 522.572729][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.592511][ T5965] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 522.604590][ T5965] usb 2-1: config 1 interface 1 has no altsetting 0 [ 522.649583][ T9034] batman_adv: batadv0: Interface activated: ip6gretap1 [ 522.666758][ T5965] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.676963][ T24] usb usb4-port1: attempt power cycle [ 522.685024][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.695532][ T5965] usb 2-1: Product: syz [ 522.700925][ T5965] usb 2-1: Manufacturer: syz [ 522.711616][ T5965] usb 2-1: SerialNumber: syz [ 522.711664][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 522.747744][ T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.763493][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.781949][ T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.795224][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.811465][ T979] usb 3-1: Product: syz [ 522.823780][ T979] usb 3-1: Manufacturer: syz [ 522.833751][ T979] usb 3-1: SerialNumber: syz [ 523.068340][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 523.149390][ T24] usb 4-1: device descriptor read/8, error -71 [ 523.195075][ T9038] syz_tun: entered allmulticast mode [ 523.222973][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.252013][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.398400][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 523.446583][ T24] usb 4-1: device descriptor read/8, error -71 [ 523.524690][ T5909] usb 5-1: USB disconnect, device number 33 [ 523.559392][ T24] usb usb4-port1: unable to enumerate USB device [ 523.955369][ T9033] syz.0.757 (9033): drop_caches: 2 [ 524.008951][ T5909] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 524.184884][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.197263][ T5909] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 524.224811][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.260195][ T5909] usb 5-1: config 0 descriptor?? [ 524.724941][ T5909] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 524.779133][ T5909] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input28 [ 525.036171][ T5909] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 525.095078][ T9029] syz_tun: left allmulticast mode [ 525.188667][ T979] usb 3-1: 0:2 : does not exist [ 525.228741][ T979] usb 3-1: USB disconnect, device number 47 [ 525.248597][ T5851] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 525.395405][ T5965] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 525.447492][ T8070] udevd[8070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.469930][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 525.505596][ T5851] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 525.505626][ T5851] usb 4-1: config 0 has no interface number 0 [ 525.505681][ T5851] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 525.505705][ T5851] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.505730][ T5851] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 525.505756][ T5851] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 525.508353][ T5851] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 525.508381][ T5851] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 525.508401][ T5851] usb 4-1: Product: syz [ 525.508416][ T5851] usb 4-1: Manufacturer: syz [ 525.508431][ T5851] usb 4-1: SerialNumber: syz [ 525.512019][ T5851] usb 4-1: config 0 descriptor?? [ 525.513373][ T9043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.513531][ T9043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.530976][ T5965] usb 2-1: USB disconnect, device number 27 [ 525.562083][ T9050] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 525.620328][ T8070] udevd[8070]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.828069][ T5851] usb 4-1: USB disconnect, device number 51 [ 526.597793][ T30] audit: type=1326 audit(1753786959.937:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6190b8e9a9 code=0x0 [ 526.725824][ T5851] usb 5-1: USB disconnect, device number 34 [ 527.032269][ T9080] syzkaller0: entered promiscuous mode [ 527.038863][ T8336] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 527.098940][ T9080] syzkaller0: entered allmulticast mode [ 527.228391][ T8336] usb 4-1: Using ep0 maxpacket: 32 [ 527.275759][ T8336] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 527.289221][ T5851] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 527.300803][ T8336] usb 4-1: config 0 has no interface number 0 [ 527.307290][ T8336] usb 4-1: config 0 interface 184 has no altsetting 0 [ 527.338488][ T8336] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 527.348165][ T8336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.378600][ T8336] usb 4-1: Product: syz [ 527.385633][ T8336] usb 4-1: Manufacturer: syz [ 527.390904][ T8336] usb 4-1: SerialNumber: syz [ 527.401345][ T8336] usb 4-1: config 0 descriptor?? [ 527.417122][ T8336] smsc75xx v1.0.0 [ 527.421538][ T8336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 527.433511][ T8336] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 527.509880][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 527.517451][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.533833][ T5851] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 527.543317][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.561479][ T5851] usb 5-1: config 0 descriptor?? [ 528.051899][ T9085] netlink: 220 bytes leftover after parsing attributes in process `syz.1.770'. [ 528.221061][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 528.283767][ T5851] usbhid 5-1:0.0: can't add hid device: -71 [ 528.304968][ T5851] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 528.450529][ T5851] usb 5-1: USB disconnect, device number 35 [ 528.598341][ T5966] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 528.788767][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 528.800306][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.814429][ T5966] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 528.827008][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.857620][ T5966] usb 2-1: Product: syz [ 528.874713][ T5966] usb 2-1: Manufacturer: syz [ 528.883119][ T5966] usb 2-1: SerialNumber: syz [ 528.906632][ T5966] usb 2-1: config 0 descriptor?? [ 528.934905][ T5966] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 528.948958][ T5851] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 528.986418][ T5966] usb 2-1: setting power ON [ 529.004194][ T5966] dvb-usb: bulk message failed: -22 (2/0) [ 529.031771][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 529.056671][ T5966] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 529.081242][ T5966] usb 2-1: media controller created [ 529.132120][ T9087] dvb-usb: bulk message failed: -22 (3/0) [ 529.139530][ T9087] dvb-usb: bulk message failed: -22 (5/0) [ 529.155672][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.165958][ T5851] usb 5-1: config 0 has no interfaces? [ 529.182757][ T9087] dvb-usb: bulk message failed: -22 (4/0) [ 529.207922][ T9087] cxusb: i2c read failed [ 529.226290][ T5966] usb 2-1: selecting invalid altsetting 6 [ 529.244248][ T5966] usb 2-1: digital interface selection failed (-22) [ 529.254197][ T5851] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 529.271726][ T5966] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 529.292860][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.309158][ T5966] usb 2-1: setting power OFF [ 529.315334][ T5851] usb 5-1: Product: syz [ 529.323266][ T5966] dvb-usb: bulk message failed: -22 (2/0) [ 529.332078][ T5851] usb 5-1: Manufacturer: syz [ 529.361863][ T5851] usb 5-1: SerialNumber: syz [ 529.374314][ T5966] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 529.412211][ T5851] usb 5-1: config 0 descriptor?? [ 529.417820][ T5966] (NULL device *): no alternate interface [ 529.670407][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 530.076109][ T24] usb 4-1: USB disconnect, device number 52 [ 531.269357][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.306928][ T30] audit: type=1326 audit(1753786964.637:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.3.783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4edcf8e9a9 code=0x0 [ 531.368940][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.507714][ T979] usb 5-1: USB disconnect, device number 36 [ 532.026859][ T30] audit: type=1326 audit(1753786965.367:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.182266][ T30] audit: type=1326 audit(1753786965.367:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.267740][ T30] audit: type=1326 audit(1753786965.367:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.296057][ T30] audit: type=1326 audit(1753786965.367:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.382116][ T30] audit: type=1326 audit(1753786965.377:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.420818][ T9155] ip6tnl1: entered allmulticast mode [ 532.427999][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.451443][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.462127][ T30] audit: type=1326 audit(1753786965.377:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.535187][ T30] audit: type=1326 audit(1753786965.377:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.618566][ T30] audit: type=1326 audit(1753786965.547:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.646605][ T30] audit: type=1326 audit(1753786965.557:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.669787][ T30] audit: type=1326 audit(1753786965.557:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.1.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91bf38e9a9 code=0x7ffc0000 [ 532.839368][ T5909] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 533.000953][ T5909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 533.027113][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.041193][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.061850][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 533.551255][ T5909] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 533.570686][ T5909] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 533.584607][ T5909] usb 5-1: Manufacturer: syz [ 533.596076][ T5909] usb 5-1: config 0 descriptor?? [ 534.066823][ T5909] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 534.095027][ T5909] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 534.315927][ T24] hid-generic 00A1:0009:0003.0015: unknown main item tag 0x7 [ 534.348366][ T24] hid-generic 00A1:0009:0003.0015: unknown main item tag 0x6 [ 534.374215][ T24] hid-generic 00A1:0009:0003.0015: hidraw1: HID v0.05 Device [syz1] on syz0 [ 535.489516][ T9197] vlan0: entered promiscuous mode [ 536.079871][ T8336] usb 5-1: USB disconnect, device number 37 [ 536.833774][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 537.326047][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 537.326061][ T30] audit: type=1326 audit(1753786970.667:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.2.819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6190b8e9a9 code=0x0 [ 538.736981][ T9243] tipc: Enabled bearer , priority 0 [ 538.747839][ T9243] syzkaller0: entered promiscuous mode [ 538.768627][ T9243] syzkaller0: entered allmulticast mode [ 539.438347][ T9242] tipc: Resetting bearer [ 539.573996][ T9242] tipc: Disabling bearer [ 540.298809][ T5965] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 540.470354][ T5965] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.485004][ T5965] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 540.508490][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.607355][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 540.743008][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 540.849219][ T5965] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.859185][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.867267][ T5965] usb 5-1: Product: syz [ 540.877964][ T5965] usb 5-1: Manufacturer: syz [ 540.908432][ T8336] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 540.975520][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 540.981487][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 541.000407][ T5965] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 541.006541][ T5965] cdc_wdm 5-1:1.0: Unknown control protocol [ 541.076665][ T9278] netlink: 'syz.2.831': attribute type 15 has an invalid length. [ 541.085014][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'. [ 541.316635][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.326072][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.403793][ T8336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 541.421062][ T8336] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 541.447149][ T8336] usb 4-1: config 1 interface 1 has no altsetting 0 [ 541.526961][ T8336] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.536684][ T8336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.546653][ T8336] usb 4-1: Product: syz [ 541.551345][ T8336] usb 4-1: Manufacturer: syz [ 541.559036][ T8336] usb 4-1: SerialNumber: syz [ 541.675738][ T9288] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[9288] [ 542.453399][ T9269] capability: warning: `syz.3.826' uses deprecated v2 capabilities in a way that may be insecure [ 544.673622][ T8336] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 544.790567][ T8336] usb 4-1: USB disconnect, device number 53 [ 545.094401][ T24] usb 5-1: USB disconnect, device number 38 [ 545.278982][ T9306] tipc: Enabled bearer , priority 0 [ 545.357646][ T9310] syzkaller0: entered promiscuous mode [ 545.398016][ T9310] syzkaller0: entered allmulticast mode [ 545.649206][ T9305] tipc: Resetting bearer [ 545.734299][ T9305] tipc: Disabling bearer [ 546.305898][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.347163][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.354129][ T9321] FAULT_INJECTION: forcing a failure. [ 546.354129][ T9321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.374721][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.4.842 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 546.374752][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.374763][ T9321] Call Trace: [ 546.374770][ T9321] [ 546.374778][ T9321] dump_stack_lvl+0x189/0x250 [ 546.374816][ T9321] ? __pfx____ratelimit+0x10/0x10 [ 546.374839][ T9321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.374857][ T9321] ? __pfx__printk+0x10/0x10 [ 546.374880][ T9321] ? __might_fault+0xb0/0x130 [ 546.374917][ T9321] should_fail_ex+0x414/0x560 [ 546.374948][ T9321] _copy_from_user+0x2d/0xb0 [ 546.374969][ T9321] ___sys_sendmsg+0x158/0x2a0 [ 546.374995][ T9321] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.375073][ T9321] ? __fget_files+0x2a/0x420 [ 546.375097][ T9321] ? __fget_files+0x3a0/0x420 [ 546.375130][ T9321] __x64_sys_sendmsg+0x19b/0x260 [ 546.375154][ T9321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.375187][ T9321] ? __pfx_ksys_write+0x10/0x10 [ 546.375207][ T9321] ? rcu_is_watching+0x15/0xb0 [ 546.375233][ T9321] ? do_syscall_64+0xbe/0x3b0 [ 546.375261][ T9321] do_syscall_64+0xfa/0x3b0 [ 546.375284][ T9321] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.375305][ T9321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.375321][ T9321] ? clear_bhb_loop+0x60/0xb0 [ 546.375353][ T9321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.375370][ T9321] RIP: 0033:0x7f182438e9a9 [ 546.375386][ T9321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.375401][ T9321] RSP: 002b:00007f18221f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.375423][ T9321] RAX: ffffffffffffffda RBX: 00007f18245b5fa0 RCX: 00007f182438e9a9 [ 546.375436][ T9321] RDX: 0000000000000880 RSI: 00002000000005c0 RDI: 0000000000000003 [ 546.375447][ T9321] RBP: 00007f18221f6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.375458][ T9321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.375469][ T9321] R13: 0000000000000000 R14: 00007f18245b5fa0 R15: 00007f18246dfa28 [ 546.375497][ T9321] [ 546.884670][ T9340] i2c i2c-0: Invalid block write size 36 [ 547.138571][ T5851] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 547.325259][ T5851] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 547.405395][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.421037][ T5851] usb 5-1: Product: syz [ 547.437372][ T5851] usb 5-1: Manufacturer: syz [ 547.458635][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.486291][ T5851] usb 5-1: SerialNumber: syz [ 547.497770][ T5851] usb 5-1: config 0 descriptor?? [ 547.580547][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.788148][ T9357] raw_sendmsg: syz.4.849 forgot to set AF_INET. Fix it! [ 547.911104][ T979] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 548.111080][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 548.161108][ T979] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 548.196370][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.208715][ T5851] usb 5-1: USB disconnect, device number 39 [ 548.300261][ T979] usb 4-1: Product: syz [ 548.313446][ T979] usb 4-1: Manufacturer: syz [ 548.323196][ T979] usb 4-1: SerialNumber: syz [ 548.337615][ T979] usb 4-1: config 0 descriptor?? [ 548.351823][ T979] gspca_main: se401-2.14.0 probing 047d:5003 [ 548.963845][ T979] gspca_se401: read req failed req 0x06 error -19 [ 548.974368][ T979] usb 4-1: USB disconnect, device number 54 [ 548.995543][ T9367] netlink: 'syz.4.855': attribute type 15 has an invalid length. [ 549.031404][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.855'. [ 549.200489][ T979] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 549.348934][ T979] usb 4-1: device descriptor read/64, error -71 [ 549.598359][ T979] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 549.750049][ T979] usb 4-1: device descriptor read/64, error -71 [ 549.868988][ T979] usb usb4-port1: attempt power cycle [ 550.113216][ T5909] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 550.239137][ T979] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 550.260117][ T979] usb 4-1: device descriptor read/8, error -71 [ 550.297358][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.319321][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.362072][ T5909] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 550.407248][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.442343][ T5909] usb 5-1: config 0 descriptor?? [ 550.498440][ T979] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 550.527827][ T979] usb 4-1: device descriptor read/8, error -71 [ 550.638606][ T979] usb usb4-port1: unable to enumerate USB device [ 550.873900][ T9382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.861'. [ 550.887450][ T30] audit: type=1804 audit(1753786984.217:355): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.858" name="/newroot/160/file1" dev="fuse" ino=1 res=1 errno=0 [ 550.902757][ T5909] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 550.990731][ T5909] sony 0003:054C:024B.0016: unknown main item tag 0x0 [ 551.005686][ T5909] sony 0003:054C:024B.0016: unexpected long global item [ 551.024882][ T5909] sony 0003:054C:024B.0016: parse failed [ 551.101562][ T5909] sony 0003:054C:024B.0016: probe with driver sony failed with error -22 [ 551.183178][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.246685][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.271955][ T9376] tipc: Enabled bearer , priority 0 [ 551.290829][ T9383] syzkaller0: entered promiscuous mode [ 551.315779][ T9383] syzkaller0: entered allmulticast mode [ 551.558924][ T9400] fuse: Bad value for 'fd' [ 551.591633][ T9403] fuse: Bad value for 'fd' [ 551.714969][ T9375] tipc: Resetting bearer [ 551.745622][ T9375] tipc: Disabling bearer [ 551.844089][ T9406] tipc: Started in network mode [ 551.849378][ T9406] tipc: Node identity 080211000001, cluster identity 4711 [ 551.863538][ T9406] tipc: Enabled bearer , priority 0 [ 551.873815][ T9406] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 551.884216][ T9406] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 552.812241][ T5965] usb 5-1: USB disconnect, device number 40 [ 552.998767][ T5965] tipc: Node number set to 134418688 [ 553.503023][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.571678][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.312074][ T30] audit: type=1326 audit(1753786988.327:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.1.875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91bf38e9a9 code=0x0 [ 555.687055][ T9453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.773383][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 555.979070][ T5909] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 556.149238][ T5909] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 556.190365][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.223052][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.239394][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.363960][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.393895][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 556.402882][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.413316][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.425326][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.448945][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.477897][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 556.503736][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.522422][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.558005][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.595839][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.648994][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 556.678105][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.692694][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.733163][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.762608][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.793567][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 556.806509][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.815870][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.827653][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.849577][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 556.867422][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 556.889238][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.969423][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.982852][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 556.995949][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.015113][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.030994][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.055512][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.156322][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 557.207766][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.244967][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.307624][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.324448][ T5909] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.381803][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 557.426622][ T5909] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 557.611992][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.637521][ T5909] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 557.651265][ T5909] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 557.660693][ T8336] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 557.680945][ T5909] usb 3-1: Product: syz [ 557.688518][ T5909] usb 3-1: Manufacturer: syz [ 557.697450][ T5909] usb 3-1: SerialNumber: syz [ 557.724976][ T5909] usb 3-1: config 0 descriptor?? [ 557.737975][ T9453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.822541][ T5909] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 557.840838][ T8336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.875934][ T8336] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 557.896676][ T8336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.963899][ T8336] usb 5-1: config 0 descriptor?? [ 558.396572][ T8336] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 558.523646][ T8336] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input29 [ 558.622078][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.682109][ T9494] team0: Port device batadv1 added [ 558.715371][ T8336] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 559.249321][ T9505] input: syz1 as /devices/virtual/input/input30 [ 559.505126][ T979] usb 3-1: USB disconnect, device number 48 [ 559.582874][ T979] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 560.088385][ T979] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 560.250209][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 560.284835][ T979] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 560.294449][ T979] usb 3-1: config 0 has no interface number 0 [ 560.339389][ T979] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 560.363529][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.411109][ T5965] usb 5-1: USB disconnect, device number 41 [ 560.427823][ T979] usb 3-1: Product: syz [ 560.435561][ T979] usb 3-1: Manufacturer: syz [ 560.454253][ T979] usb 3-1: SerialNumber: syz [ 560.485424][ T979] usb 3-1: config 0 descriptor?? [ 560.746096][ T9527] netlink: 'syz.4.900': attribute type 15 has an invalid length. [ 560.759974][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'. [ 561.362263][ T979] mos7840 3-1:0.225: required endpoints missing [ 561.513929][ T979] usb 3-1: USB disconnect, device number 49 [ 561.858490][ T5851] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 561.978969][ T9546] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 562.039897][ T9546] team0: Port device batadv1 added [ 562.048431][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 562.079658][ T5851] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 562.118457][ T5851] usb 4-1: config 0 has no interface number 0 [ 562.138385][ T5851] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.278666][ T5851] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 562.307650][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.361600][ T5851] usb 4-1: Product: syz [ 562.367836][ T5851] usb 4-1: Manufacturer: syz [ 562.388368][ T5851] usb 4-1: SerialNumber: syz [ 562.409586][ T5851] usb 4-1: config 0 descriptor?? [ 562.451477][ T5851] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 562.469303][ T9552] sctp: [Deprecated]: syz.2.907 (pid 9552) Use of int in max_burst socket option deprecated. [ 562.469303][ T9552] Use struct sctp_assoc_value instead [ 562.498368][ T5851] em28xx 4-1:0.132: Video interface 132 found: [ 562.531154][ T9552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 562.699361][ T5851] em28xx 4-1:0.132: chip ID is em2884 [ 562.985914][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 562.995645][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.912'. [ 563.007959][ T9573] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 563.309689][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.316084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.343387][ T9573] bond5: entered allmulticast mode [ 563.349711][ T9573] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.851093][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.868737][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.987981][ T5851] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 564.008430][ T5851] em28xx 4-1:0.132: board has no eeprom [ 564.118787][ T5851] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 564.127260][ T5851] em28xx 4-1:0.132: analog set to bulk mode. [ 564.218021][ T5965] em28xx 4-1:0.132: Registering V4L2 extension [ 564.705441][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 564.754750][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 564.795146][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 564.813134][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 564.906442][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 564.923563][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 565.100937][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 565.158993][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 565.469604][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 565.531567][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 565.686848][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 565.798470][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 565.872270][ T5965] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 565.928168][ T5965] em28xx 4-1:0.132: Config register raw data: 0xfffffffb [ 566.009548][ T5965] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 566.045871][ T5965] em28xx 4-1:0.132: No AC97 audio processor [ 567.259083][ T5965] usb 4-1: Decoder not found [ 567.263788][ T5965] em28xx 4-1:0.132: failed to create media graph [ 567.280503][ T5965] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 567.335445][ T5965] em28xx 4-1:0.132: Remote control support is not available for this card. [ 567.908539][ T5965] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 568.093289][ T5965] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.116335][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.150482][ T5965] usb 3-1: Product: syz [ 568.168319][ T5965] usb 3-1: Manufacturer: syz [ 568.183381][ T5965] usb 3-1: SerialNumber: syz [ 568.226715][ T5965] usb 3-1: config 0 descriptor?? [ 568.463189][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.482709][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.567930][ T5965] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 568.599925][ T9620] FAULT_INJECTION: forcing a failure. [ 568.599925][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 568.627671][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.0.924 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 568.627699][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.627709][ T9620] Call Trace: [ 568.627716][ T9620] [ 568.627725][ T9620] dump_stack_lvl+0x189/0x250 [ 568.627751][ T9620] ? __pfx____ratelimit+0x10/0x10 [ 568.627777][ T9620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.627797][ T9620] ? __pfx__printk+0x10/0x10 [ 568.627837][ T9620] should_fail_ex+0x414/0x560 [ 568.627867][ T9620] should_failslab+0xa8/0x100 [ 568.627897][ T9620] kmem_cache_alloc_noprof+0x73/0x3c0 [ 568.627922][ T9620] ? skb_clone+0x212/0x3a0 [ 568.627952][ T9620] skb_clone+0x212/0x3a0 [ 568.627991][ T9620] __netlink_deliver_tap+0x404/0x850 [ 568.628028][ T9620] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.628052][ T9620] netlink_deliver_tap+0x19c/0x1b0 [ 568.628074][ T9620] netlink_sendskb+0x68/0x140 [ 568.628096][ T9620] netlink_rcv_skb+0x28c/0x470 [ 568.628118][ T9620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 568.628141][ T9620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.628179][ T9620] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.628204][ T9620] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.628230][ T9620] netlink_unicast+0x75c/0x8e0 [ 568.628261][ T9620] netlink_sendmsg+0x805/0xb30 [ 568.628293][ T9620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.628319][ T9620] ? aa_sock_msg_perm+0x94/0x160 [ 568.628344][ T9620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.628364][ T9620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.628386][ T9620] __sock_sendmsg+0x21c/0x270 [ 568.628417][ T9620] ____sys_sendmsg+0x505/0x830 [ 568.628448][ T9620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.628483][ T9620] ? import_iovec+0x74/0xa0 [ 568.628509][ T9620] ___sys_sendmsg+0x21f/0x2a0 [ 568.628535][ T9620] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.628602][ T9620] ? __fget_files+0x2a/0x420 [ 568.628628][ T9620] ? __fget_files+0x3a0/0x420 [ 568.628667][ T9620] __x64_sys_sendmsg+0x19b/0x260 [ 568.628694][ T9620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.628729][ T9620] ? __pfx_ksys_write+0x10/0x10 [ 568.628750][ T9620] ? rcu_is_watching+0x15/0xb0 [ 568.628777][ T9620] ? do_syscall_64+0xbe/0x3b0 [ 568.628807][ T9620] do_syscall_64+0xfa/0x3b0 [ 568.628832][ T9620] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.628856][ T9620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.628873][ T9620] ? clear_bhb_loop+0x60/0xb0 [ 568.628896][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.628913][ T9620] RIP: 0033:0x7f69e8f8e9a9 [ 568.628931][ T9620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.628947][ T9620] RSP: 002b:00007f69e9d5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.628968][ T9620] RAX: ffffffffffffffda RBX: 00007f69e91b5fa0 RCX: 00007f69e8f8e9a9 [ 568.628992][ T9620] RDX: 0000000000000880 RSI: 00002000000005c0 RDI: 0000000000000003 [ 568.629004][ T9620] RBP: 00007f69e9d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 568.629015][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.629026][ T9620] R13: 0000000000000000 R14: 00007f69e91b5fa0 R15: 00007f69e92dfa28 [ 568.629058][ T9620] [ 568.949741][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.777441][ T9632] program syz.1.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.925208][ T5965] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 569.950658][ T5965] usb 3-1: USB disconnect, device number 50 [ 570.736887][ T9646] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 570.743852][ T9646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 570.858549][ T9646] vhci_hcd vhci_hcd.0: Device attached [ 570.909299][ T9646] xt_TCPMSS: Only works on TCP SYN packets [ 571.018599][ T979] vhci_hcd: vhci_device speed not set [ 571.095863][ T979] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 571.736961][ T9647] vhci_hcd: connection reset by peer [ 571.752143][ T1155] vhci_hcd: stop threads [ 571.758111][ T1155] vhci_hcd: release socket [ 571.773063][ T1155] vhci_hcd: disconnect device [ 571.847836][ T8336] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 572.128658][ T8336] usb 3-1: Using ep0 maxpacket: 8 [ 572.136411][ T8336] usb 3-1: config 0 has an invalid interface number: 85 but max is 1 [ 572.145141][ T8336] usb 3-1: config 0 has an invalid interface number: 89 but max is 1 [ 572.308864][ T8336] usb 3-1: config 0 has no interface number 0 [ 572.315114][ T8336] usb 3-1: config 0 has no interface number 1 [ 572.368178][ T8336] usb 3-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 572.389854][ T8336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.404237][ T8336] usb 3-1: Product: syz [ 572.480838][ T8336] usb 3-1: Manufacturer: syz [ 572.498818][ T8336] usb 3-1: SerialNumber: syz [ 572.528812][ T8336] usb 3-1: config 0 descriptor?? [ 572.769388][ T5910] usb 3-1: USB disconnect, device number 51 [ 572.947708][ T30] audit: type=1326 audit(1753787006.287:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.1.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91bf38e9a9 code=0x0 [ 573.762377][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.938'. [ 573.821108][ T9677] RDS: rds_bind could not find a transport for ::c000:0:20:0, load rds_tcp or rds_rdma? [ 573.831684][ T8336] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 573.888573][ T5965] usb 4-1: USB disconnect, device number 59 [ 573.895586][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 573.905817][ T9676] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 573.917280][ T5965] em28xx 4-1:0.132: Disconnecting em28xx [ 573.933644][ T5965] em28xx 4-1:0.132: Closing input extension [ 574.043460][ T8336] usb 5-1: Using ep0 maxpacket: 8 [ 574.075066][ T8336] usb 5-1: config 162 has an invalid interface number: 150 but max is 0 [ 574.117402][ T5965] em28xx 4-1:0.132: Freeing device [ 574.146434][ T8336] usb 5-1: config 162 has no interface number 0 [ 574.165230][ T8336] usb 5-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 574.180269][ T8336] usb 5-1: config 162 interface 150 has no altsetting 0 [ 574.224402][ T8336] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 574.235103][ T8336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.246010][ T8336] usb 5-1: Product: syz [ 574.254190][ T8336] usb 5-1: Manufacturer: syz [ 574.259054][ T8336] usb 5-1: SerialNumber: syz [ 574.498496][ T8336] usb 5-1: Found UVC 0.0a device syz (058f:3820) [ 574.510558][ T9676] bond1: entered allmulticast mode [ 574.521931][ T9676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.609608][ T8336] usb 5-1: No valid video chain found. [ 574.748450][ T8336] usb 5-1: USB disconnect, device number 42 [ 576.448689][ T979] vhci_hcd: vhci_device speed not set [ 577.239428][ T9519] syz.3.895 (9519) used greatest stack depth: 19624 bytes left [ 577.630320][ T9696] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 577.913892][ T9711] x_tables: ip_tables: udp match: only valid for protocol 17 [ 577.960892][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 578.468346][ T979] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 578.701528][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.738285][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 578.789448][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 578.884883][ T979] usb 3-1: New USB device found, idVendor=0755, idProduct=16bd, bcdDevice=b6.eb [ 578.954628][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.000082][ T979] usb 3-1: config 0 descriptor?? [ 579.019236][ T9717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 579.443438][ T979] hid (null): report_id 29495 is invalid [ 579.643546][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 579.715255][ T979] hid-generic 0003:0755:16BD.0018: unknown main item tag 0x6 [ 579.763828][ T979] hid-generic 0003:0755:16BD.0018: report_id 29495 is invalid [ 579.822937][ T979] hid-generic 0003:0755:16BD.0018: item 0 2 1 8 parsing failed [ 579.849188][ T979] hid-generic 0003:0755:16BD.0018: probe with driver hid-generic failed with error -22 [ 581.308686][ T5965] usb 3-1: USB disconnect, device number 52 [ 582.641891][ T9757] input: syz0 as /devices/virtual/input/input31 [ 583.078538][ T5851] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 583.094889][ T9764] netlink: 96 bytes leftover after parsing attributes in process `syz.2.962'. [ 583.208319][ T5851] usb 5-1: device descriptor read/64, error -71 [ 583.289418][ T9768] netlink: 'syz.2.964': attribute type 2 has an invalid length. [ 583.337813][ T9768] netlink: 'syz.2.964': attribute type 12 has an invalid length. [ 583.354549][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.369293][ T9768] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.964'. [ 583.387710][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.488380][ T5851] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 583.504010][ T9773] binder: BINDER_SET_CONTEXT_MGR already set [ 583.511567][ T9773] binder: 9769:9773 ioctl 4018620d 200000000040 returned -16 [ 583.629221][ T5851] usb 5-1: device descriptor read/64, error -71 [ 583.738648][ T5851] usb usb5-port1: attempt power cycle [ 583.908857][ T5909] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 583.947326][ T9779] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 583.990049][ T9779] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 583.996695][ T9779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 584.014473][ T9779] vhci_hcd vhci_hcd.0: Device attached [ 584.054907][ T5909] usb 3-1: device descriptor read/64, error -71 [ 584.067324][ T9783] netlink: 'syz.0.968': attribute type 15 has an invalid length. [ 584.081496][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 584.128599][ T5851] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 584.149105][ T5851] usb 5-1: device descriptor read/8, error -71 [ 584.198360][ T979] vhci_hcd: vhci_device speed not set [ 584.258879][ T979] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 584.298380][ T5909] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 584.410371][ T5851] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 584.428574][ T5909] usb 3-1: device descriptor read/64, error -71 [ 584.450387][ T5851] usb 5-1: device descriptor read/8, error -71 [ 584.549288][ T5909] usb usb3-port1: attempt power cycle [ 584.570354][ T5851] usb usb5-port1: unable to enumerate USB device [ 584.700764][ T9780] vhci_hcd: connection reset by peer [ 584.719659][ T3543] vhci_hcd: stop threads [ 584.727310][ T3543] vhci_hcd: release socket [ 584.738867][ T3543] vhci_hcd: disconnect device [ 584.948698][ T5909] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 585.189190][ T5909] usb 3-1: device descriptor read/8, error -71 [ 585.450640][ T5909] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 585.490145][ T5909] usb 3-1: device descriptor read/8, error -71 [ 585.695980][ T5909] usb usb3-port1: unable to enumerate USB device [ 585.982439][ T9802] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 585.996311][ T9802] team0: Port device batadv2 added [ 587.798856][ T5851] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 587.872739][ T30] audit: type=1326 audit(1753787021.217:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.2.979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6190b8e9a9 code=0x0 [ 587.894459][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.958836][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 587.981642][ T5851] usb 5-1: no configurations [ 587.997517][ T5851] usb 5-1: can't read configurations, error -22 [ 588.138756][ T5851] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 588.248661][ T5910] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 588.277504][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 588.298756][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 588.333677][ T5851] usb 5-1: no configurations [ 588.357439][ T5851] usb 5-1: can't read configurations, error -22 [ 588.380298][ T5851] usb usb5-port1: attempt power cycle [ 588.422376][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.450202][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.480640][ T5910] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 588.494244][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.507965][ T5910] usb 4-1: config 0 descriptor?? [ 588.729688][ T9832] netlink: 'syz.0.983': attribute type 15 has an invalid length. [ 588.738426][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.983'. [ 588.769244][ T5851] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 588.789218][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 588.802977][ T5851] usb 5-1: no configurations [ 588.810805][ T5851] usb 5-1: can't read configurations, error -22 [ 588.948722][ T5851] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 588.994673][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 589.009621][ T5851] usb 5-1: no configurations [ 589.019260][ T5851] usb 5-1: can't read configurations, error -22 [ 589.032996][ T5851] usb usb5-port1: unable to enumerate USB device [ 589.170314][ T5910] usbhid 4-1:0.0: can't add hid device: -71 [ 589.185895][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 589.190552][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 589.205808][ T5910] usb 4-1: USB disconnect, device number 60 [ 589.234107][ T9837] batadv1: entered promiscuous mode [ 589.253463][ T9837] team0: Port device batadv1 added [ 589.359018][ T979] vhci_hcd: vhci_device speed not set [ 589.871688][ T9846] syz_tun: entered allmulticast mode [ 590.251381][ T9839] syz_tun: left allmulticast mode [ 590.456058][ T9848] syzkaller0: entered promiscuous mode [ 590.463063][ T9848] syzkaller0: entered allmulticast mode [ 590.768961][ T5846] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 590.794726][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 590.921585][ T5846] usb 4-1: config 8 has an invalid interface number: 101 but max is 0 [ 590.952029][ T5846] usb 4-1: config 8 has no interface number 0 [ 590.964499][ T5846] usb 4-1: config 8 interface 101 has no altsetting 0 [ 590.988725][ T5846] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 591.001359][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.088867][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.141023][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.172244][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.190415][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.200674][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.210763][ T9866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.993'. [ 591.238091][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 591.296703][ T5846] usb 4-1: string descriptor 0 read error: -71 [ 591.321197][ T5846] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 591.340175][ T5846] gspca_sunplus: reg_w_riv err -71 [ 591.345747][ T5846] sunplus 4-1:8.101: probe with driver sunplus failed with error -71 [ 591.366318][ T5846] usb 4-1: USB disconnect, device number 61 [ 592.113027][ T9884] netlink: 'syz.1.1000': attribute type 15 has an invalid length. [ 592.188381][ T979] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 592.218970][ T5851] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 592.340377][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 592.352628][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.365324][ T979] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 592.374740][ T5910] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 592.383062][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.404707][ T5851] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.408963][ T979] usb 3-1: config 0 descriptor?? [ 592.418334][ T5851] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 592.447634][ T5851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.475697][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 592.506994][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 592.538791][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 592.551367][ T5851] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.561230][ T5910] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 592.561582][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.577950][ T5851] usb 5-1: Product: syz [ 592.613633][ T5851] usb 5-1: Manufacturer: syz [ 592.615443][ T5910] usb 4-1: config 0 has no interface number 0 [ 592.651923][ T5910] usb 4-1: config 0 interface 184 has no altsetting 0 [ 592.653277][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 592.669329][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 592.679843][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 592.681017][ T5851] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 592.696368][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.703297][ T5851] cdc_wdm 5-1:1.0: Unknown control protocol [ 592.723707][ T5910] usb 4-1: Product: syz [ 592.743195][ T5910] usb 4-1: Manufacturer: syz [ 592.758699][ T5910] usb 4-1: SerialNumber: syz [ 592.783322][ T5910] usb 4-1: config 0 descriptor?? [ 592.820272][ T5910] smsc75xx v1.0.0 [ 592.832303][ T5910] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 592.866055][ T5910] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 593.033421][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.059314][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.118992][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.130265][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.390820][ T979] usbhid 3-1:0.0: can't add hid device: -71 [ 593.710082][ T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 593.865486][ T979] usb 3-1: USB disconnect, device number 57 [ 594.402289][ T9903] __nla_validate_parse: 60 callbacks suppressed [ 594.402309][ T9903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1003'. [ 594.589833][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 595.610597][ T5851] usb 4-1: USB disconnect, device number 62 [ 595.942242][ T9926] netlink: 'syz.0.1011': attribute type 15 has an invalid length. [ 595.965634][ T5910] usb 5-1: USB disconnect, device number 51 [ 595.979174][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1011'. [ 596.169594][ T9931] ======================================================= [ 596.169594][ T9931] WARNING: The mand mount option has been deprecated and [ 596.169594][ T9931] and is ignored by this kernel. Remove the mand [ 596.169594][ T9931] option from the mount to silence this warning. [ 596.169594][ T9931] ======================================================= [ 596.204490][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.218458][ T9931] fuse: Bad value for 'fd' [ 596.489483][ T5910] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 596.671093][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 596.687934][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.712410][ T5910] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 596.778992][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.881285][ T5910] usb 5-1: config 0 descriptor?? [ 597.749440][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 597.757774][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 597.803261][ T5910] usb 5-1: USB disconnect, device number 52 [ 597.886566][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 597.951258][ T9962] vlan2: entered promiscuous mode [ 598.148337][ T979] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 598.288331][ T979] usb 4-1: device descriptor read/64, error -71 [ 598.437747][ T9971] netlink: 'syz.2.1025': attribute type 15 has an invalid length. [ 598.453768][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 598.559028][ T979] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 598.668623][ T5965] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 598.698513][ T979] usb 4-1: device descriptor read/64, error -71 [ 598.808749][ T979] usb usb4-port1: attempt power cycle [ 598.881391][ T5965] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 598.927990][ T5965] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 598.952445][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 598.963640][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 599.014131][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 599.078804][ T5965] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.115643][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.160634][ T5965] usb 5-1: Product: syz [ 599.175156][ T5965] usb 5-1: Manufacturer: syz [ 599.189892][ T979] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 599.394549][ T979] usb 4-1: device descriptor read/8, error -71 [ 599.433295][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 599.462789][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 599.480950][ T5965] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 599.497608][ T5965] cdc_wdm 5-1:1.0: Unknown control protocol [ 599.648532][ T979] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 599.960142][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.970575][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.104171][ T979] usb 4-1: device descriptor read/8, error -71 [ 600.188944][ T5965] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 600.362591][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.373614][ T5965] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 600.391676][ T5965] usb 3-1: config 1 interface 1 has no altsetting 0 [ 600.431201][ T979] usb usb4-port1: unable to enumerate USB device [ 600.444269][ T5965] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.455339][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.507972][ T5965] usb 3-1: Product: syz [ 600.607013][ T9993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1029'. [ 600.661309][ T5965] usb 3-1: Manufacturer: syz [ 600.778635][ T5965] usb 3-1: SerialNumber: syz [ 601.971520][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.029541][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.137853][T10004] binder: BINDER_SET_CONTEXT_MGR already set [ 602.155274][T10004] binder: 10001:10004 ioctl 4018620d 200000000040 returned -16 [ 602.317766][T10007] tipc: Enabled bearer , priority 0 [ 602.348106][T10007] syzkaller0: entered promiscuous mode [ 602.367843][T10007] syzkaller0: entered allmulticast mode [ 602.509617][T10007] tipc: Resetting bearer [ 602.540116][T10005] tipc: Resetting bearer [ 602.594727][T10005] tipc: Disabling bearer [ 603.120003][ T5965] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 603.279638][ T5965] usb 3-1: USB disconnect, device number 58 [ 603.337670][ T979] usb 5-1: USB disconnect, device number 53 [ 603.811943][ T979] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 603.990285][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.002750][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 604.029231][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 604.050671][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 604.066598][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 604.093753][ T979] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 604.104277][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 604.114171][ T979] usb 5-1: Product: syz [ 604.118961][ T979] usb 5-1: Manufacturer: syz [ 604.124131][ T979] usb 5-1: SerialNumber: syz [ 604.132082][ T979] usb 5-1: config 0 descriptor?? [ 604.270750][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.298454][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.307614][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.329041][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.561685][ T979] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 604.588363][ T979] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 604.620277][ T979] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 604.628165][ T979] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 604.688564][ T979] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 604.845371][ T979] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 605.710279][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.739307][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.949657][ T979] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 605.993864][ T979] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 606.310863][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.365109][T10056] batadv_slave_0: entered promiscuous mode [ 606.382026][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.407971][T10056] sg_write: data in/out 28/154 bytes for SCSI command 0x0-- guessing data in; [ 606.407971][T10056] program syz.3.1048 not setting count and/or reply_len properly [ 606.436576][T10055] batadv_slave_0: left promiscuous mode [ 606.608358][ T5909] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 606.760793][ T5909] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 606.776507][ T5909] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 606.787384][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.797030][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 606.810158][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 606.842827][ T5910] usb 5-1: USB disconnect, device number 54 [ 606.899750][ T5909] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.913711][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.931584][ T5909] usb 3-1: Product: syz [ 606.940462][ T5909] usb 3-1: Manufacturer: syz [ 606.964948][ T5909] cdc_wdm 3-1:1.0: skipping garbage [ 606.976641][ T5909] cdc_wdm 3-1:1.0: skipping garbage [ 606.995675][ T5909] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 607.011146][ T5909] cdc_wdm 3-1:1.0: Unknown control protocol [ 607.104771][T10072] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 607.120839][T10072] batadv2: entered promiscuous mode [ 607.129786][T10072] batadv2: entered allmulticast mode [ 607.147559][T10072] team0: Port device batadv2 added [ 607.279409][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.288059][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.673335][ T9532] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 607.683069][ T9532] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 607.728623][ T5851] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 607.901810][ T5851] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 607.914200][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.937856][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.038073][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 608.100547][ T5851] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 608.146885][ T5851] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 608.169876][ T5851] usb 4-1: Manufacturer: syz [ 608.194303][ T5851] usb 4-1: config 0 descriptor?? [ 608.650248][ T5851] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 608.759041][ T5851] appleir 0003:05AC:8243.0019: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 608.826700][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 608.869016][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 609.287347][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1057'. [ 609.418547][ T5965] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 609.568403][ T5965] usb 5-1: device descriptor read/64, error -71 [ 609.657515][T10095] loop4: detected capacity change from 0 to 1 [ 609.702326][T10095] Dev loop4: unable to read RDB block 1 [ 609.764487][T10095] loop4: unable to read partition table [ 609.818628][ T5965] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 609.836004][T10095] loop4: partition table beyond EOD, truncated [ 609.881094][T10095] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 609.968585][ T5965] usb 5-1: device descriptor read/64, error -71 [ 610.052753][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.069971][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.080630][ T5965] usb usb5-port1: attempt power cycle [ 610.428669][ T5965] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 610.445401][ T5909] usb 3-1: USB disconnect, device number 59 [ 610.452979][ T5965] usb 5-1: device descriptor read/8, error -71 [ 610.710106][ T5965] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 610.743371][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 610.762225][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 610.762299][ T5965] usb 5-1: device descriptor read/8, error -71 [ 610.779952][T10108] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 610.908685][ T5965] usb usb5-port1: unable to enumerate USB device [ 610.960886][T10108] bond4: entered allmulticast mode [ 610.972998][T10108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 610.999654][T10110] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 611.013095][T10110] team0: Port device batadv4 added [ 611.054434][ T5909] usb 4-1: USB disconnect, device number 67 [ 611.478348][ T5965] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 611.654730][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 611.708905][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 611.717087][ T5965] usb 3-1: config 0 has an invalid interface number: 85 but max is 1 [ 611.731029][ T5965] usb 3-1: config 0 has an invalid interface number: 89 but max is 1 [ 611.767410][ T5965] usb 3-1: config 0 has no interface number 0 [ 611.803431][ T5965] usb 3-1: config 0 has no interface number 1 [ 611.825488][ T5965] usb 3-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 611.836617][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.845929][ T5965] usb 3-1: Product: syz [ 611.865957][ T5965] usb 3-1: Manufacturer: syz [ 611.878082][ T5965] usb 3-1: SerialNumber: syz [ 611.930720][ T5965] usb 3-1: config 0 descriptor?? [ 612.156405][ T5965] usb 3-1: USB disconnect, device number 60 [ 612.517067][T10129] pim6reg9: entered allmulticast mode [ 612.779367][ T5965] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 613.002239][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.026943][ T5965] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 613.146996][ T5965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.188986][ T979] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 613.236626][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 613.297659][ T5965] usb 4-1: SerialNumber: syz [ 613.317098][ T5965] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 613.361480][ T979] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.390246][ T979] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 613.424660][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.451586][ T979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 613.509140][ T979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 613.530844][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.540641][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.550575][ T979] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.560792][ T979] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.571121][ T5965] usb 4-1: USB disconnect, device number 68 [ 613.612866][ T979] usb 3-1: Product: syz [ 613.636646][ T979] usb 3-1: Manufacturer: syz [ 613.663057][ T979] cdc_wdm 3-1:1.0: skipping garbage [ 613.672848][ T979] cdc_wdm 3-1:1.0: skipping garbage [ 613.736823][ T979] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 613.740729][T10145] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 613.758021][ T979] cdc_wdm 3-1:1.0: Unknown control protocol [ 613.781653][T10145] team0: Port device batadv3 added [ 613.945235][T10155] veth0: entered promiscuous mode [ 613.959895][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 613.995099][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.004953][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.998391][ T5910] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 615.179713][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 615.202458][ T5910] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 615.226554][ T5910] usb 5-1: config 0 has no interface number 0 [ 615.246077][ T5910] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 615.256602][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.268924][ T5910] usb 5-1: Product: syz [ 615.283132][ T5910] usb 5-1: Manufacturer: syz [ 615.295553][ T5910] usb 5-1: SerialNumber: syz [ 615.362574][ T5910] usb 5-1: config 0 descriptor?? [ 615.788153][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.950832][ T5910] usb 5-1: USB disconnect, device number 59 [ 616.656664][T10189] binder: 10185:10189 ioctl c0306201 200000000380 returned -14 [ 616.670852][ T30] audit: type=1326 audit(1753787049.977:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 616.741037][ T30] audit: type=1326 audit(1753787049.987:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 616.817297][ T5846] usb 3-1: USB disconnect, device number 61 [ 616.842126][ T30] audit: type=1326 audit(1753787049.987:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.326006][ T30] audit: type=1326 audit(1753787049.987:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.355909][T10200] fuse: Unknown parameter '0x0000000000000004' [ 617.401076][ T30] audit: type=1326 audit(1753787049.987:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.426248][ T30] audit: type=1326 audit(1753787049.987:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.479878][ T30] audit: type=1326 audit(1753787049.987:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.518125][T10200] nvme_fabrics: missing parameter 'transport=%s' [ 617.524964][T10200] nvme_fabrics: missing parameter 'nqn=%s' [ 617.582923][ T30] audit: type=1326 audit(1753787049.987:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.638339][ T979] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 617.842097][ T30] audit: type=1326 audit(1753787049.987:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.931248][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.962682][ T30] audit: type=1326 audit(1753787049.987:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10185 comm="syz.3.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4edcf8e9a9 code=0x7ffc0000 [ 617.986719][ T979] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.014828][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.042055][ T979] usb 5-1: config 0 descriptor?? [ 618.138712][ T5910] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 618.300779][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.312419][ T5910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.357074][ T5910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.366774][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.394640][T10206] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 618.430637][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.481369][ T979] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 618.547104][ T979] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input32 [ 618.591609][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.600792][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.692385][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.740044][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.920185][ T979] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 618.999606][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.159098][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.189205][ T5846] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 620.191490][ T979] usb 3-1: USB disconnect, device number 62 [ 620.362120][ T5846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.374406][ T5846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 620.406987][ T5846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 620.417086][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 620.427046][ T5846] usb 4-1: SerialNumber: syz [ 620.451822][ T5846] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 620.479424][ T5846] usb-storage 4-1:1.0: USB Mass Storage device detected [ 620.531059][ T5846] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 620.556744][ T5846] scsi host1: usb-storage 4-1:1.0 [ 620.582296][ T5851] usb 5-1: USB disconnect, device number 60 [ 620.622848][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'. [ 621.197674][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1096'. [ 622.412810][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.425436][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.721872][ T5910] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 622.893984][ T5910] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.904821][ T5910] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 622.943037][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 623.195280][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 623.256569][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 623.276550][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.312488][ T5910] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.331319][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.363659][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.378630][ T5910] usb 5-1: Product: syz [ 623.382891][ T5910] usb 5-1: Manufacturer: syz [ 623.397626][ T5851] usb 4-1: USB disconnect, device number 69 [ 623.471177][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 623.476477][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 623.504865][ T5910] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 623.532035][ T5910] cdc_wdm 5-1:1.0: Unknown control protocol [ 623.804870][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.814149][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.914614][T10265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1106'. [ 624.084594][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.100681][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.742716][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.750861][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.061058][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 627.561923][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.598087][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.736675][ T979] usb 5-1: USB disconnect, device number 61 [ 628.108552][ T5851] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 628.292373][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 628.314609][ T5851] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 628.327285][ T5851] usb 3-1: config 1 interface 1 has no altsetting 0 [ 628.352597][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.362367][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.370588][ T5851] usb 3-1: Product: syz [ 628.374826][ T5851] usb 3-1: Manufacturer: syz [ 628.380243][ T5851] usb 3-1: SerialNumber: syz [ 629.174152][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 629.344264][T10332] syzkaller0: entered promiscuous mode [ 629.389945][T10332] syzkaller0: entered allmulticast mode [ 629.534236][T10332] fuse: Invalid gid '0x0000000000000006' [ 630.162930][ T5846] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 630.269074][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 630.335541][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.357162][ T5846] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 630.380850][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.414910][ T5846] usb 5-1: config 0 descriptor?? [ 630.430697][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 630.440216][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 630.450731][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 630.466645][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 630.478459][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 630.505816][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 630.515647][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 630.525248][ T24] usb 4-1: Product: syz [ 630.530264][ T24] usb 4-1: Manufacturer: syz [ 630.552428][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 630.558304][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 630.575110][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 630.582726][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 630.880836][T10351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.895077][T10351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.920226][ T5846] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 631.092751][ T5846] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input33 [ 631.247488][T10353] syz.1.1135: attempt to access beyond end of device [ 631.247488][T10353] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 631.323027][ T5846] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 631.576361][ T5851] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 631.822114][ T5851] usb 3-1: USB disconnect, device number 63 [ 631.902002][T10361] fuse: Bad value for 'rootmode' [ 631.970228][ T8070] udevd[8070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.717416][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 632.930478][T10375] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 633.020072][T10375] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 633.054159][T10375] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 633.077941][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.095269][ T5851] usb 5-1: USB disconnect, device number 62 [ 633.269123][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.015440][ T5910] usb 4-1: USB disconnect, device number 70 [ 634.066216][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 634.066236][ T30] audit: type=1326 audit(1753787067.407:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.2.1146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6190b8e9a9 code=0x0 [ 634.237233][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.251477][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.341663][T10403] x_tables: ip_tables: ah match: only valid for protocol 51 [ 634.693688][T10411] xt_hashlimit: overflow, try lower: 17286/0 [ 634.889196][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 636.059621][ T5846] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 636.258757][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.277580][ T5846] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.293295][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.333335][ T5846] usb 5-1: config 0 descriptor?? [ 636.777520][ T5846] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 636.855084][ T5846] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input34 [ 636.994081][ T5846] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 637.558638][ T5851] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 637.728916][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 637.748558][ T5851] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 637.754492][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.758021][ T5851] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 637.783899][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.805497][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.827462][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.846845][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.855580][ T5851] usb 3-1: Product: syz [ 637.860924][ T5851] usb 3-1: Manufacturer: syz [ 637.866030][ T5851] usb 3-1: SerialNumber: syz [ 637.883849][ T5910] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 637.921412][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.931100][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.074202][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 638.090546][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.113375][ T30] audit: type=1326 audit(1753787071.457:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6190b8e9a9 code=0x7ffc0000 [ 638.136371][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.136426][ T5910] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 638.136448][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.165528][ T5910] usb 4-1: config 0 descriptor?? [ 638.197209][ T5851] usb 3-1: 0:2 : does not exist [ 638.244315][ T5851] usb 3-1: USB disconnect, device number 64 [ 638.399342][ T30] audit: type=1326 audit(1753787071.457:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6190b8e9a9 code=0x7ffc0000 [ 638.461097][ T30] audit: type=1326 audit(1753787071.457:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6190b8e9a9 code=0x7ffc0000 [ 638.500388][ T30] audit: type=1326 audit(1753787071.457:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6190b8e9a9 code=0x7ffc0000 [ 638.530091][ T30] audit: type=1326 audit(1753787071.457:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6190b908c7 code=0x7ffc0000 [ 638.553669][ T30] audit: type=1326 audit(1753787071.457:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6190b9083c code=0x7ffc0000 [ 638.595020][ T30] audit: type=1326 audit(1753787071.457:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6190b90774 code=0x7ffc0000 [ 638.646866][ T30] audit: type=1326 audit(1753787071.517:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6190b90774 code=0x7ffc0000 [ 638.650519][ T5910] uclogic 0003:5543:0004.001D: hidraw1: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 638.846445][ T5909] usb 4-1: USB disconnect, device number 71 [ 638.908146][ T30] audit: type=1326 audit(1753787071.517:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.2.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6190b8d60a code=0x7ffc0000 [ 638.914571][ T5851] usb 5-1: USB disconnect, device number 63 [ 639.144144][T10441] fido_id[10441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 639.254504][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 639.538764][ T5910] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 639.698476][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 639.714783][ T5910] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.747518][ T5910] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.771819][ T5909] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 639.812500][ T5910] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.851749][ T5910] usb 5-1: config 1 interface 0 has no altsetting 0 [ 639.861124][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 639.872331][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.882116][ T5910] usb 5-1: Product: syz [ 639.886587][ T5910] usb 5-1: Manufacturer: syz [ 639.927854][ T5910] usb 5-1: SerialNumber: syz [ 639.973348][ T5909] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.986328][ T5909] usb 4-1: config 0 has no interface number 0 [ 640.001448][ T5909] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 640.026469][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.153956][ T5909] usb 4-1: config 0 descriptor?? [ 640.177223][ T5910] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 640.190149][ T5909] usb 4-1: selecting invalid altsetting 1 [ 640.200337][ T5909] dvb_ttusb_budget: ttusb_init_controller: error [ 640.237628][ T5909] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 640.318558][ T5851] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 640.368936][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.377837][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.400105][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.434100][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.482450][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.491580][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 640.509273][ T5909] DVB: Unable to find symbol cx22700_attach() [ 640.519515][ T5851] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.569781][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.583607][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 640.624361][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 640.639963][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.686809][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 640.711292][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.712854][ T5909] DVB: Unable to find symbol tda10046_attach() [ 640.839684][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 640.839969][T10468] netlink: 'syz.4.1162': attribute type 10 has an invalid length. [ 640.860309][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.877207][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 640.887248][ T5909] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 640.889014][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.914030][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 640.950459][ T5851] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 640.967728][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.986777][ T5851] usb 3-1: Product: syz [ 641.007164][ T5910] usb 4-1: USB disconnect, device number 72 [ 641.018424][ T5851] usb 3-1: Manufacturer: syz [ 641.023251][ T5851] usb 3-1: SerialNumber: syz [ 641.034054][ T5851] usb 3-1: config 0 descriptor?? [ 641.056257][ T5851] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.091121][ T5846] usb 5-1: USB disconnect, device number 64 [ 641.254472][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 641.318716][ T5851] usb 3-1: USB disconnect, device number 65 [ 641.351219][T10467] usblp0:failed reading printer status (-71) [ 641.422883][ T8093] udevd[8093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.751860][T10480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.763379][T10480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.531816][T10492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.549121][T10492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.789029][ T5851] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 642.952622][ T5851] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.980158][ T5851] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 642.997213][ T5851] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.021293][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.073495][T10495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 643.092757][ T5851] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.352749][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.369561][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.483251][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.611972][T10467] usblp0: removed [ 643.681453][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.958517][ T5851] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 644.185508][ T5851] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 644.205692][ T5851] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 644.235751][ T5851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 644.279575][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 644.302238][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 644.325289][ T5851] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.337680][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.380511][ T5851] usb 5-1: Product: syz [ 644.394313][ T5851] usb 5-1: Manufacturer: syz [ 644.427259][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 644.447975][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 644.506221][ T5851] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 644.526198][ T5851] cdc_wdm 5-1:1.0: Unknown control protocol [ 644.613148][ T5851] usb 3-1: USB disconnect, device number 66 [ 644.799811][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.814115][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.690306][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.712877][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.733727][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.756414][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.113754][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 646.113792][ T30] audit: type=1326 audit(1753787079.457:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10523 comm="syz.2.1183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6190b8e9a9 code=0x0 [ 646.438647][ T979] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 646.642653][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 646.654746][ T979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.664830][ T979] usb 4-1: config 0 has no interface number 0 [ 646.671592][ T979] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 646.896221][ T979] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 33925, setting to 1024 [ 647.073628][ T5909] usb 5-1: USB disconnect, device number 65 [ 647.121653][ T979] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 647.131096][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.174847][ T979] usb 4-1: config 0 descriptor?? [ 647.184135][T10533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 647.756618][T10542] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 647.901814][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.910842][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.002520][ T979] usbhid 4-1:0.1: can't add hid device: -71 [ 648.009164][ T979] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 648.023192][T10542] team0: Port device batadv4 added [ 648.065630][ T979] usb 4-1: USB disconnect, device number 73 [ 648.392775][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1191'. [ 648.402810][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 648.412765][T10551] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 648.585914][T10551] bond3: entered allmulticast mode [ 648.637005][T10551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.912383][ T979] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 649.183463][ T979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.199596][ T979] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 649.311092][ T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.364749][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.487688][T10558] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 649.526747][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.568610][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.606258][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.617006][T10570] netlink: 'syz.2.1197': attribute type 15 has an invalid length. [ 649.665594][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'. [ 649.701360][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.728977][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.762058][ T5851] usb 4-1: USB disconnect, device number 74 [ 649.785856][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.798806][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.397070][ T979] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 652.077860][ T979] usb 4-1: device descriptor read/64, error -71 [ 652.349265][ T979] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 653.008294][ T979] usb 4-1: device descriptor read/64, error -71 [ 653.119001][ T979] usb usb4-port1: attempt power cycle [ 653.528758][ T979] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 653.666572][ T979] usb 4-1: device descriptor read/8, error -71 [ 654.298637][ T979] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 654.373892][ T979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.385674][ T979] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.411258][ T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.436434][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.510075][T10609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 654.592151][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.936019][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.945130][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.010648][ T5846] usb 4-1: USB disconnect, device number 78 [ 655.030738][T10622] ucma_write: process 753 (syz.0.1209) changed security contexts after opening file descriptor, this is not allowed. [ 655.416108][ T30] audit: type=1326 audit(1753787088.757:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.0.1210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69e8f8e9a9 code=0x0 [ 656.649240][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 656.664379][T10646] vlan2: entered promiscuous mode [ 657.100825][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.191526][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.360870][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.377842][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.389308][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 658.458686][ T5846] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 658.562007][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 658.568064][ T24] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 658.579724][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 658.587799][ T24] usb 4-1: can't read configurations, error -61 [ 658.626352][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 658.643009][ T5846] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 658.664318][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 658.694025][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.719561][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 658.777908][T10664] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 658.793311][ T5846] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 658.899742][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 658.905899][ T24] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 658.936633][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 658.953802][ T24] usb 4-1: can't read configurations, error -61 [ 658.973531][ T24] usb usb4-port1: attempt power cycle [ 659.037418][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.121094][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.261643][ T5909] usb 5-1: USB disconnect, device number 66 [ 659.328660][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 659.350850][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 659.356524][ T24] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 659.380436][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 659.414567][ T24] usb 4-1: can't read configurations, error -61 [ 659.569344][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 659.629262][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 659.681261][ T24] usb 4-1: too many configurations: 124, using maximum allowed: 8 [ 659.883572][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 659.902235][ T24] usb 4-1: can't read configurations, error -61 [ 659.929460][ T24] usb usb4-port1: unable to enumerate USB device [ 661.819300][T10694] input: syz1 as /devices/virtual/input/input36 [ 662.258624][ T5910] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 662.410316][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 662.447067][ T5910] usb 4-1: config 6 has an invalid interface number: 144 but max is 0 [ 662.477383][ T5910] usb 4-1: config 6 has no interface number 0 [ 662.508715][ T5910] usb 4-1: config 6 interface 144 altsetting 1 endpoint 0x3 has an invalid bInterval 113, changing to 10 [ 662.598542][ T5910] usb 4-1: config 6 interface 144 has no altsetting 0 [ 662.638977][ T5846] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 662.659357][ T5910] usb 4-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2 [ 662.695726][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.736270][ T5910] usb 4-1: Product: syz [ 662.748311][ T5910] usb 4-1: Manufacturer: syz [ 662.764251][ T5910] usb 4-1: SerialNumber: syz [ 662.850592][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.888526][ T5846] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 662.995866][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.035914][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.044587][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.065018][ T5910] usb 4-1: MIDIStreaming interface descriptor not found [ 663.077953][T10704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 663.178059][ T5846] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.198672][ T5910] usb 4-1: USB disconnect, device number 83 [ 663.303789][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.314800][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.389511][ T5846] usb 5-1: USB disconnect, device number 67 [ 663.610527][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.749636][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.327860][ T5846] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 664.509722][ T5846] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 664.535538][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.585822][ T5846] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 664.614694][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.644321][ T5846] usb 5-1: config 0 descriptor?? [ 664.671763][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 664.677858][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 664.700405][ T5846] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 665.215660][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1243'. [ 665.297535][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.313198][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.518947][ T30] audit: type=1326 audit(1753787098.867:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.3.1246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4edcf8e9a9 code=0x0 [ 666.096075][T10744] program syz.1.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.215734][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.230886][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.508988][ T8336] usb 5-1: USB disconnect, device number 68 [ 668.038845][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 668.210604][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 669.642048][T10782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.663408][T10782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 669.669936][T10782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.765209][T10782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.870827][T10782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 669.996972][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 670.553495][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.574773][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.811144][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.820678][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.190315][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 671.336129][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 671.348363][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 671.367149][T10821] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 671.389543][T10821] team0: Port device batadv2 added [ 671.605729][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.758712][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.758741][T10784] Bluetooth: hci2: command 0x0c1a tx timeout [ 671.838447][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 671.923379][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.102127][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 672.327363][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 672.625789][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 672.653092][ T5909] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 672.820695][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 672.835633][ T5909] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 672.870478][ T5909] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 672.940319][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.024168][ T5909] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 673.049156][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.078455][ T5909] usb 3-1: Product: syz [ 673.090559][ T5909] usb 3-1: Manufacturer: syz [ 673.119452][ T5909] usb 3-1: SerialNumber: syz [ 673.344333][ T5909] usb 3-1: 0:2 : does not exist [ 673.350205][ T979] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 673.392490][ T5909] usb 3-1: USB disconnect, device number 67 [ 673.508652][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 673.516225][ T979] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 673.563468][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.585469][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 673.740410][ T979] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 673.750551][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.769946][ T979] usb 5-1: Product: syz [ 673.787332][ T979] usb 5-1: Manufacturer: syz [ 673.795460][ T979] usb 5-1: SerialNumber: syz [ 673.826048][ T979] usb 5-1: config 0 descriptor?? [ 674.072256][T10840] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1273'. [ 674.106498][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.119533][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.130615][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.160057][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.265938][T10846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 674.357332][ T979] usb 5-1: USB disconnect, device number 69 [ 674.438266][T10848] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 674.489367][T10848] batadv2: entered promiscuous mode [ 674.504642][T10848] team0: Port device batadv2 added [ 674.982367][ T979] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 675.158107][ T979] usb 4-1: config 0 has no interfaces? [ 675.168059][ T979] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 675.197744][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.238380][ T979] usb 4-1: Product: syz [ 675.278515][ T31] INFO: task kworker/1:6:5966 blocked for more than 143 seconds. [ 675.303123][ T979] usb 4-1: Manufacturer: syz [ 675.308743][ T31] Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 [ 675.320715][ T979] usb 4-1: SerialNumber: syz [ 675.358988][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.384869][ T979] usb 4-1: config 0 descriptor?? [ 675.406466][ T31] task:kworker/1:6 state:D stack:21064 pid:5966 tgid:5966 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 675.465110][ T31] Workqueue: usb_hub_wq hub_event [ 675.470722][ T31] Call Trace: [ 675.474646][ T31] [ 675.477705][ T31] __schedule+0x16fd/0x4cf0 [ 675.484936][ T31] ? schedule+0x165/0x360 [ 675.489939][ T31] ? __pfx___schedule+0x10/0x10 [ 675.495630][ T31] ? schedule+0x91/0x360 [ 675.501033][ T31] schedule+0x165/0x360 [ 675.505390][ T31] schedule_timeout+0x9a/0x270 [ 675.510965][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 675.516615][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 675.522508][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.529192][ T31] ? wait_for_completion+0x267/0x5d0 [ 675.534775][ T31] wait_for_completion+0x2bf/0x5d0 [ 675.541301][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 675.547130][ T31] i2c_del_adapter+0x581/0x6e0 [ 675.553372][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 675.559778][ T31] ? rcu_is_watching+0x15/0xb0 [ 675.564777][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 675.571385][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 675.576285][ T31] dvb_usb_device_exit+0x1be/0x350 [ 675.582198][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 675.587968][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 675.600247][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.605788][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 675.613053][ T31] cxusb_probe+0x603/0x700 [ 675.619790][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 675.633738][ T979] usb 4-1: USB disconnect, device number 84 [ 675.645687][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 675.652060][ T31] usb_probe_interface+0x641/0xbc0 [ 675.657482][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 675.664040][ T31] really_probe+0x26d/0x9a0 [ 675.669124][ T31] __driver_probe_device+0x18c/0x2f0 [ 675.677691][ T31] driver_probe_device+0x4f/0x430 [ 675.683534][ T31] __device_attach_driver+0x2ce/0x530 [ 675.689505][ T31] bus_for_each_drv+0x24e/0x2e0 [ 675.694679][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 675.703707][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 675.710819][ T31] __device_attach+0x2b8/0x400 [ 675.715778][ T31] ? __pfx___device_attach+0x10/0x10 [ 675.721694][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 675.727549][ T31] bus_probe_device+0x185/0x260 [ 675.737957][ T31] device_add+0x7b6/0xb50 [ 675.743074][ T31] usb_set_configuration+0x1a87/0x20e0 [ 675.749311][ T31] usb_generic_driver_probe+0x8d/0x150 [ 675.755420][ T31] usb_probe_device+0x1c1/0x390 [ 675.761281][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 675.768023][ T31] really_probe+0x26d/0x9a0 [ 675.777115][ T31] __driver_probe_device+0x18c/0x2f0 [ 675.784099][ T31] driver_probe_device+0x4f/0x430 [ 675.794283][ T31] __device_attach_driver+0x2ce/0x530 [ 675.863774][ T31] bus_for_each_drv+0x24e/0x2e0 [ 675.877201][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 675.893548][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 675.943529][ T31] __device_attach+0x2b8/0x400 [ 675.954946][ T31] ? __pfx___device_attach+0x10/0x10 [ 675.968028][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 675.983556][ T31] bus_probe_device+0x185/0x260 [ 675.994659][ T31] device_add+0x7b6/0xb50 [ 676.015790][ T31] usb_new_device+0xa39/0x16c0 [ 676.028493][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 676.061045][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.079817][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.085118][ T31] hub_event+0x2958/0x4a20 [ 676.108508][ T31] ? __pfx_hub_event+0x10/0x10 [ 676.118971][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 676.136224][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.185631][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 676.208228][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 676.228463][ T31] process_scheduled_works+0xade/0x17b0 [ 676.234115][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 676.262680][ T31] worker_thread+0x8a0/0xda0 [ 676.267461][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 676.281292][ T31] ? __kthread_parkme+0x7b/0x200 [ 676.286838][ T31] kthread+0x711/0x8a0 [ 676.292923][ T31] ? __pfx_worker_thread+0x10/0x10 [ 676.298479][ T31] ? __pfx_kthread+0x10/0x10 [ 676.303664][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.309903][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.315319][ T31] ? __pfx_kthread+0x10/0x10 [ 676.321251][ T31] ret_from_fork+0x3fc/0x770 [ 676.326497][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 676.332154][ T31] ? __switch_to_asm+0x39/0x70 [ 676.337809][ T31] ? __switch_to_asm+0x33/0x70 [ 676.343047][ T31] ? __pfx_kthread+0x10/0x10 [ 676.349382][ T31] ret_from_fork_asm+0x1a/0x30 [ 676.354377][ T31] [ 676.358580][ T31] [ 676.358580][ T31] Showing all locks held in the system: [ 676.366597][ T31] 2 locks held by kworker/u8:1/13: [ 676.390995][ T31] #0: ffff888143e9b148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 676.495108][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 676.510955][ T31] 1 lock held by rcu_preempt/16: [ 676.516541][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 676.527275][ T31] 1 lock held by khungtaskd/31: [ 676.533530][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.544353][ T31] 2 locks held by getty/5609: [ 676.549569][ T31] #0: ffff8880354c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.560546][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 676.571499][ T31] 1 lock held by syz-executor/5865: [ 676.576909][ T31] 5 locks held by kworker/1:6/5966: [ 676.584915][ T31] #0: ffff8881442ed948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 676.596712][ T31] #1: ffffc90004affbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 676.610552][ T31] #2: ffff888144384198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 676.623422][ T31] #3: ffff88805e64a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 676.640100][ T31] #4: ffff88805e64f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 676.675523][ T31] 4 locks held by udevd/8075: [ 676.688787][ T31] #0: ffff888079bee790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 676.707295][ T31] #1: ffff88805dee6888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 676.719070][ T31] #2: ffff88805dae0788 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 676.745422][ T31] #3: ffff88805e64a198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 676.797136][ T31] 5 locks held by kworker/u8:8/9532: [ 676.807376][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 676.828749][ T31] #1: ffffc9000b4c7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 676.873355][ T31] #2: ffffffff8f5123d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 676.895275][ T31] #3: ffffffff8f51efc8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 676.917793][ T31] #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 676.938061][ T31] 1 lock held by syz.0.1277/10855: [ 676.946988][ T31] [ 676.959353][ T31] ============================================= [ 676.959353][ T31] [ 676.987809][ T31] NMI backtrace for cpu 0 [ 676.987830][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 676.987853][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.987864][ T31] Call Trace: [ 676.987871][ T31] [ 676.987880][ T31] dump_stack_lvl+0x189/0x250 [ 676.987906][ T31] ? __wake_up_klogd+0xd9/0x110 [ 676.987934][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.987955][ T31] ? __pfx__printk+0x10/0x10 [ 676.987992][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 676.988019][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 676.988037][ T31] ? _printk+0xcf/0x120 [ 676.988066][ T31] ? __pfx__printk+0x10/0x10 [ 676.988099][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.988130][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 676.988155][ T31] watchdog+0xfee/0x1030 [ 676.988182][ T31] ? watchdog+0x1de/0x1030 [ 676.988225][ T31] kthread+0x711/0x8a0 [ 676.988252][ T31] ? __pfx_watchdog+0x10/0x10 [ 676.988277][ T31] ? __pfx_kthread+0x10/0x10 [ 676.988302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.988325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.988352][ T31] ? __pfx_kthread+0x10/0x10 [ 676.988378][ T31] ret_from_fork+0x3fc/0x770 [ 676.988400][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 676.988427][ T31] ? __switch_to_asm+0x39/0x70 [ 676.988448][ T31] ? __switch_to_asm+0x33/0x70 [ 676.988468][ T31] ? __pfx_kthread+0x10/0x10 [ 676.988493][ T31] ret_from_fork_asm+0x1a/0x30 [ 676.988533][ T31] [ 677.141971][ T31] Sending NMI from CPU 0 to CPUs 1: [ 677.147605][ C1] NMI backtrace for cpu 1 [ 677.147622][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 677.147641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.147651][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 677.147677][ C1] RIP: 0010:unwind_next_frame+0x4ef/0x2390 [ 677.147696][ C1] Code: 62 05 48 89 f0 48 c1 e8 03 48 89 44 24 40 0f b6 04 28 84 c0 48 89 54 24 08 48 89 34 24 0f 85 4d 18 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 63 18 00 00 0f b7 1e c1 eb 0b 80 e3 01 48 [ 677.147709][ C1] RSP: 0018:ffffc90000127478 EFLAGS: 00000a03 [ 677.147722][ C1] RAX: 1ffffffff2066837 RBX: ffffffff8fb6d810 RCX: ffffffff8fb6d814 [ 677.147733][ C1] RDX: ffffffff903341b8 RSI: ffffffff903341bc RDI: ffffffff8be2cd20 [ 677.147744][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8172bae5 [ 677.147755][ C1] R10: ffffc90000127598 R11: ffffffff81ad0fc0 R12: ffffffff903341bd [ 677.147766][ C1] R13: ffffc90000127598 R14: ffffc90000127548 R15: ffffffff8172bae5 [ 677.147777][ C1] FS: 0000000000000000(0000) GS:ffff888125d07000(0000) knlGS:0000000000000000 [ 677.147790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.147801][ C1] CR2: 0000200000303030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 677.147818][ C1] Call Trace: [ 677.147824][ C1] [ 677.147834][ C1] ? unwind_next_frame+0xa5/0x2390 [ 677.147850][ C1] ? kthread+0x711/0x8a0 [ 677.147871][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 677.147890][ C1] arch_stack_walk+0x11c/0x150 [ 677.147910][ C1] ? kthread+0x711/0x8a0 [ 677.147930][ C1] stack_trace_save+0x9c/0xe0 [ 677.147948][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 677.147970][ C1] kasan_save_track+0x3e/0x80 [ 677.147987][ C1] ? kasan_save_track+0x3e/0x80 [ 677.148003][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 677.148020][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 677.148039][ C1] ? __alloc_skb+0x112/0x2d0 [ 677.148054][ C1] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 677.148071][ C1] ? process_scheduled_works+0xade/0x17b0 [ 677.148086][ C1] ? worker_thread+0x8a0/0xda0 [ 677.148100][ C1] ? kthread+0x711/0x8a0 [ 677.148136][ C1] ? kmem_cache_alloc_node_noprof+0x2f5/0x3c0 [ 677.148160][ C1] __kasan_slab_alloc+0x6c/0x80 [ 677.148181][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 677.148203][ C1] ? __alloc_skb+0x112/0x2d0 [ 677.148223][ C1] __alloc_skb+0x112/0x2d0 [ 677.148242][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 677.148269][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 677.148285][ C1] process_scheduled_works+0xade/0x17b0 [ 677.148312][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.148342][ C1] worker_thread+0x8a0/0xda0 [ 677.148369][ C1] kthread+0x711/0x8a0 [ 677.148389][ C1] ? __pfx_worker_thread+0x10/0x10 [ 677.148404][ C1] ? __pfx_kthread+0x10/0x10 [ 677.148424][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 677.148442][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.148460][ C1] ? __pfx_kthread+0x10/0x10 [ 677.148478][ C1] ret_from_fork+0x3fc/0x770 [ 677.148495][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 677.148519][ C1] ? __switch_to_asm+0x39/0x70 [ 677.148536][ C1] ? __switch_to_asm+0x33/0x70 [ 677.148552][ C1] ? __pfx_kthread+0x10/0x10 [ 677.148570][ C1] ret_from_fork_asm+0x1a/0x30 [ 677.148594][ C1] [ 677.483681][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 677.490756][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 677.502657][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.512722][ T31] Call Trace: [ 677.516115][ T31] [ 677.519162][ T31] dump_stack_lvl+0x99/0x250 [ 677.523791][ T31] ? __asan_memcpy+0x40/0x70 [ 677.528401][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.533609][ T31] ? __pfx__printk+0x10/0x10 [ 677.538274][ T31] panic+0x2db/0x790 [ 677.542228][ T31] ? __pfx_panic+0x10/0x10 [ 677.546738][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 677.551509][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 677.557326][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 677.562797][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 677.569155][ T31] watchdog+0x102d/0x1030 [ 677.573506][ T31] ? watchdog+0x1de/0x1030 [ 677.577954][ T31] kthread+0x711/0x8a0 [ 677.582061][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.586834][ T31] ? __pfx_kthread+0x10/0x10 [ 677.591441][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 677.596646][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.601853][ T31] ? __pfx_kthread+0x10/0x10 [ 677.606456][ T31] ret_from_fork+0x3fc/0x770 [ 677.611058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.616195][ T31] ? __switch_to_asm+0x39/0x70 [ 677.621140][ T31] ? __switch_to_asm+0x33/0x70 [ 677.625911][ T31] ? __pfx_kthread+0x10/0x10 [ 677.630600][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.635397][ T31] [ 677.638914][ T31] Kernel Offset: disabled [ 677.643242][ T31] Rebooting in 86400 seconds..