last executing test programs: 15.262676188s ago: executing program 4 (id=998): r0 = socket(0x10, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000140), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/249, 0xf9}], 0x1}, 0x10033) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x7101}) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x80002004}) (async) shutdown(r5, 0x1) (async) socket(0x400000000010, 0x3, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13.335302407s ago: executing program 4 (id=1004): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x3, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x700, 0xe, 0x889c, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x68, 0x0, 0xfa, 0x29, 0x0, @multicast1, @broadcast}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, r0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000940)={'#! ', './file1/../file0', [{0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6>\xd38/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x8e\xd2\xeb\x12\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '[\'+!!\\'}, {0x20, '\xb9,\xec\x89]\xab\xc9\xf3\xe5\xda\xb7El O\xeb,\xc9\xae\xcc[N\xd0o\xe7\x03\x1f\x84\xc4\xb6T\x18\xac\f\x10\x18c\xb8g\xb1\x97\xa9{\xd4A]\x1d\xeb\xeb\xdaO}\xd6\xbd$\xac\xfa\xae\xb3\x8f\xe0\xf7\xac\xb7\x12\xce\f\x83\x02G\xc7\xe9\xe1\xea\xfd\xcf\xaf\\\xea\xdd\x91\xc6\r\x00\x00\xd8\xa9\xaa\xd66R\x94\x05\x8e\xc9\xe7;\xeb\x87\xeb^~\xf9dY\x8cl\x01\xcd\xc9\xfd\x0e\xfeI\xe9\x16\xc5_<\xff ]}Y\x85\f\xcb4'}, {0x20, '#! '}, {0x20, '{@Y\xf4\xe4lC\n\x00\xc7t\xe9\xf2\xa1?77g\xa3\xb2t\x1c\x02`\x98\x1e\x0f\xcd\xb928|\x82\xb2WF\xd1;t\x85\xd1mI\xb26\x9b\\/\x7f\xc5\x01\x7f+\xa8D\x10RkY\xcc\xd4L]qN\xdfL\xccA\xa9\x90R|\x9a7\x88\xe8\xeen\a\xff\x00\xa1\x95\xcbW\xb9x\xd0\xae\xd5ny\xe87e-\xd0\x80\xe3BE<\x14\xceN?\xc4\x88\xd1T\r\xfa\xaer\xd8hg\xfb\xce\x03[N\xc5\x9e\x83\xb8\xb1O%\x13\xd8\xb1\xb1\xcan\xd82\x93R,\xab\xden\x83Xv\x8e\xc5[Y^V\x00%\xcfl\x9a_\xce\xf0%\xaf\xdf\x9f\xec3\xe4\x19\xf7\xde\xf5\v\x96KH\xfa\x89\x82\xda\xf4X\xa6=\x01\x8f\x11\xff\xb2=\x962k\bm<\xeb\xf7a\x160\x1a\xe8\xaa\xcay\xb2\xb4\xfb5\xfb~\r\xe1\x16\xd8%{M\xe8u~QEn\xea\xc4 ~\x00\x00\x00\x81\x0e\xfb\x98\xb7\xe4\\ \v\xde!bU\xed`(\xaf\xe2\xdc\xa1\x91h\r\xf5\xee\xd1\xd9?\xe9K\xbb\xdb5s\a\xab\xb9\xd5\x06u\xff\xd4Bb\xdfw7\xb5i\xdd \x903\xd60\x04\x01\xb5\xf5}\x16\xb4W\xf9kh\x83\xba2\xa7\xe1\xef\rdEf\xc3\x8a\x86\xbb\x13\xa7X\xc1\xd9\x1e\xd0aeO\xf2w\xd8\x12\xcbXNI\xcd$\x84Tg\xf4v\x87\x97R\xe9\xb4f?o\xd2\x98\x9b\xc9F#\'I\xff}C[\x10n\xa8\\\xfd\xb4\xc2\xd0\x13\x94Q\xc1\x1d<\t\xb3\x18X\x9f\x1e\xaa\xfe}\xd7]A\x03\xf7]\x95\x7f\x11\xfd7\xa6\xcc\xbd;\x9b\xc7!\x8e\x04\x98e\xf2\x98\x00Yc\x9e\xa3\x0f{\x81Z\x80]d7\x97_&(\xff\xbd0\xc6\xad\xd2P$\xcdB\xab\xe5~\xd6E\x8a\xcb'}]}, 0x354) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfd, &(0x7f0000000cc0)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1}}, {@x25={0x805, {0x1, 0x2, 0x5, "842f9f2c9b93c126b9ed5b016e72f497d38185db4a80c5967fb4446628e8120a0925109700fc7f26bc3e9578c6e7bd9932125e288d3ffde060f762e3f327f26c205376b41bc68492898cb52cff425b3b5e37c7ff43d0c43ec5e896a8823008fc9415c0cc3d85257db23e6bf524bf82796eb5095149396e66a5305b20036f8d3428234802a0fa0e53a40587428e24e835134090349e5964271e11573a87d20dab44e36c3a4a768af1187c4cd0af50fe5a9befb58bb46d22225dc5fd8b9dc1edfbfdfbcffbd7882993206db71806d09e4584ec62b762502cd2d5646a71f44cd7bbb2ff259c81b036fe"}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x8000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44008) socket$inet6(0xa, 0x80002, 0x0) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) 13.091332726s ago: executing program 2 (id=1007): r0 = socket(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000040d07d408612a41f16fb0102030109021b0001000000000904dcf0d61377e3ecd2700001ee670800090502100004030300"], 0x0) cachestat(r1, &(0x7f0000000040)={0x5, 0xfffffffffffff5b3}, &(0x7f0000000080), 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) socket(0x2b, 0x1, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x602, {0x1, 0x1}, {0x45, 0x8}, @rumble={0x844, 0xbb4}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf8, 0x290, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffff00], 'dummy0\x00', 'syz_tun\x00', {}, {0xff}, 0x11, 0x6f, 0x0, 0xd3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "64dd"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x84, 0x0, 0xf, 0x5, 0x8, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0x0, 0xff, 0xffffff00, 0xffff00], [0xff, 0x0, 0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffffff], 0x400, 0x244}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x7}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0x0, 0xff000000, 0xffffff00, 0xff], 'xfrm0\x00', 'netpci0\x00', {}, {0xff}, 0xff, 0x6, 0x7}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x1, 0x7, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 0x80, 0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "008374c40f01b1f389b481cf5128a999e62a786f828cd988b6793dc0fe1d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r4 = socket(0x11, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002010100000000fc010000000049000000000000000000"], 0x18) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4, 0x10000, @remote, 0x9}, 0x1c) 11.4206938s ago: executing program 4 (id=1009): socket$netlink(0x10, 0x3, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x9, 0x50, 0x6, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x2000c040) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x21) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8e}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, r6}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x1, {0xd, 0x0, "4cc3f718f6710e250fb971ec291ec11461ff47d74eae15f71864814ce40bd7a3c24f7fdc8fc3b774750cc265bce1353b9df1df375036abc25b530ea82812127043847407c0395c8e87bd38b7a055269823e473ef878d0e377e5a2a3d25698af7154951e8c7f5a2145b88a8b5ee1ef78d7fe249c24a5bc38e659bfd2b01f7733acedc8783f33ae5e9373929e6567d07781b24102d29054f74a34b896f2569702d9883892225ee2d4eab59e68db9d701e2b019e1d1026b89bbbc9dc5f05cc6e9e7c6e09ff8050fcf9abe8e74a255bd737dd90b68e7499401d6589aed28ba74fc598ac6eef65eb8935c74b4e016d0e013b866f6b6df957806b5e56cf5517a16cd2f", 0x3a, 0x2, 0x6, 0xff, 0x4, 0xff, 0x5}, r6}}, 0x128) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x3, 0x60000000, {"74aef34021156aa3cd1eaaea2914b7d7"}, 0x6243, 0x80000000, 0x2}}}, 0x90) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 10.605118528s ago: executing program 2 (id=1013): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0xc}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 9.128093042s ago: executing program 0 (id=1019): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x20, 0x3, 0x5, {{0xb, 0x4, 0x3, 0xe, 0x2c, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @private=0xa010101, {[@end, @rr={0x7, 0xb, 0x9b, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x92, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, 0x0, 0x0, r6) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000340)=r7) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af25, 0x0) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r10, 0xc0cc5615, &(0x7f0000000200)={0xa, @raw_data="94a9dca1ca73855e3d9bae811b9340ee4a5acf656459ff7c7f0ed903b503fe4451052eb1f82cbb0a7d0ffe4ab11e9b8328bbfae608042d42e1a729ef5f41aa438309e7b3ad0753ced866c69a90a6783db0891a67a8fcff0276d412869fca1889bcaaeb890ca3d894505e2ea73a7dac196fa300701e3617781b9602ce546a83a8e968bbaf1110ac60bab61a6fdf4d50fb9ca374bed2962ffd628b979a9cd76371f0cfae9b660b270f970a39d35be23a6b77760606f10db5f2e9b24a4cbfceb8a806565fed7166b340"}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 9.127464434s ago: executing program 3 (id=1020): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r3, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r5, r4, 0x0, 0x20000023893) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) 8.281969619s ago: executing program 2 (id=1021): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pipe(&(0x7f0000000380)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x1d, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0417e29a22c2000000000001090224000100000000090400001b03000000092100000001220b00090581030000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220b0000001bdbc79ef4832ac0f22a44"], 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000040000000000000005000600000000000a00000000000000fe80000000000000000000000000000000004000000000000200010000000000000000000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$uac1(0x6, 0xaa, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x8, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x5, 0x4d, 0x5, 0x4, 0x96}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x1, 0x9, '0\v', "89"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x5}, @as_header={0x7, 0x24, 0x1, 0x8, 0x80, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0xa0, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x9, 0x5, '|C', "f82ead"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x44, 0x80, 0x40, {0x7, 0x25, 0x1, 0x80, 0x3b, 0x3}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x3, 0x4, 0x40, 0xf7}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0xa6, &(0x7f0000000540)=@string={0xa6, 0x3, "f452e82de4b6ca0221ebf6ae4a53d7bf727d50568314fa09859efddc280f0bd2964b8e25a5506adc7b0c35878be5bcc4873202ee2d9a30b8a2d209d02c9f59c97d17c7bdc4c043ec798070173c0c6cac8fca268bcf93527d7f4abdf0767bdb03661e55f59fb6312cc1f48fe9f4e8a6474dc42719052722f70486884edb872199bd9dcb2bc57661319884575f2ae13967380824cab391ef1fe35d01539b8b109e87a445f9"}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "8043f176cc2b3b5d0caefbd9e85e36340584"}}]}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r0], 0x0) 8.184745763s ago: executing program 4 (id=1022): syz_usb_connect(0x1, 0x52a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xe9, 0xf1, 0xca, 0x20, 0x4f2, 0xaff9, 0x1bc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x518, 0x2, 0x7, 0x4, 0x20, 0xa, [{{0x9, 0x4, 0xcc, 0x1, 0x2, 0xb1, 0x82, 0x49, 0x1, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0xf, "771b85"}]}], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0xfa, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfe00}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x82, 0x9, 0x4}}]}}, {{0x9, 0x4, 0x55, 0x9, 0xa, 0xf9, 0xce, 0xea, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x6, 0x8, 0x607e, 0x5, 0xf}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x2, 0x6, [0x2, 0x5, 0x7, 0x2, 0x2, 0x9], 0xa8}]}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x9, 0xa2, [@generic={0x93, 0x10, "57bcfb4dfd54fff16d34732ec061669c8f2dc5b63a0a7735246ea9a81011cb976f7700b6cf606ea2d2da5dc84219db97db8c73b68cdb4f33450cc683ee21c6180d7ce55745e9636f3c81bafb2e709c79d6c282741b5b6be460126e43da527ffcd989262db0ba6e064a6aaa832d5fcc4e20df003390ea06356a661db4b97129684567a8d7c471e7232eb62f089e04ac1204"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0xf5, 0x1, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x100}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xce, 0x6f, 0xff, [@generic={0x35, 0x31, "59eddb3da2e9936dc3bddc26a5476ae7cca6c29337038bed256314e30038d566e6bd07604324277f0f01bc68c91c50fd40822f"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x2, 0x24, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xff}, @generic={0x6b, 0x8, "37a2cb2d746fcfc5d07c0965bacaa3011904103d632a5826b35607b61b6de31ef517d6e4ed15d1a20bc71f85b20cad475c5b2262719999e7901212e4b235cd0efcb3aaea605b507c301d22ebb4ed95e9abce38417f69e0ee731fed99842447724dc215c31770941ae4"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x0, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0xfffe}, @generic={0xbf, 0x31, "f687de1ae5c63844edf4053d9852869e83cd69adb0d4312125ac194908f42cc231ff07c1567c8c06e51cdead55bfc4c105854ebe396732d03636277c975de89543e064e15ea16147aafb4055a90883832b6809580e3dd3d4aa61e732f9b9a5449d08d23811deac14e5f22d802fdc693756492aad46487a6e153300c5290859871266a811ff12a841f5473480c9a2c7408274dfdc7339100eeb6ed8637dc96bb9f5550bdf7edcfc6c42cab42126d3b104a3a89c1d995f9c8732002cfb0c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x4, 0x5, 0x5d, [@generic={0xa7, 0x5, "938ed98812eecb07804d732f4cf314f43b0cb6781304212fcb79cb15f74f4a780b2497424dee3583bb70a29c115ef29d7b7e9c77905cfb7c549b0e390d602830cb9b3c520054ed41e5f8b9649dad5d8606c26a69833ce48b9c9a1762bdd0df3b9a770a1b64a3fae459be032f002aad0aa4f1d964d39820a3698d08bc59924fc65f6f81f8fc2a70e8ef6183c2959b495468cb22eab364ab4698ba8d9260c40e775dc027f59a"}, @generic={0x42, 0x4, "c604e80caa2e75bc94b6318c17aac29f32720be4b074faf56797319a2095992e6425d0b0fae562260c6eb63b2ae4ef68cd00c3d1f06653a2a0e44af023bb19d3"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x3, 0x3, 0x9a, [@generic={0xf3, 0x23, "b4b24f86b5aeb6d302675bf950fc374b947d8d8e8e2c68e3655da9a7e0cd7908ac343680d24abbaaf09b4a6e654d89a64d93393e9ef983123ae0d45da27101288dc1e3f071191ee541ef2135a5296ed59e9894d62e66356efa156b5488a5269d86a13ac0f9b7de4592d1dd36c659d8d6b8f6ef2c8b89c23f009b9190a6a5167378dd1b24b4c29c5da0d0f4d20806911100065d7c9318ae8247de8f915d2cc1c16567956222e6dca7628a6df1d971fce95f3a109ad62aa98a8149b8851f5bdd9a91ea406432a1009d36af5c0fca55548d9e92a4613a39927b470b4c5e7c86a3650d5249abce7f7c6a4bfb2d3a325e9614e6"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, [@generic={0x5a, 0x4, "64532a5d4bd36d6103e22c5029325879b273d20872e11583ee592d4f524d1d8fb20e74cd0ed515680c3901977284807537a857f9cf2ea6c8b95d70903d09a9da34123d642d12214da69a48aa4a9da11863a9ce7eb1ae791e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xc}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0xff, 0x7, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfff4}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x5d, 0x96, 0xf6, 0xff, 0x5}, 0x1d, &(0x7f0000000580)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x3, 0xf0f, 0x3, [0x299ebc574604811b, 0xff0000, 0x0]}]}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x827}}, {0xa8, &(0x7f0000000640)=@string={0xa8, 0x3, "8091f262dac996a67a0e48c577cba4220957797e9a7014f1bcf861e9c1f33830797c47f69680f6df1b2fa6f2d53662160b22c68d7b1b7f87de8f7716218d0299170b80d3a250caa1e86392a323bdffebd2e0fa7a56922320193c610899df4760128598e187c31a8ab542724c256fd2f200891472511c9ead4755e3647d419226b9298a2a2c9c474a964319cd55b6a87b0b7b82715698bd44a3a51622c4952b8a25fad4da4d54"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x80c}}]}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x20a000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0xff51, 0x0, 0x8001, 0x4, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x65, 0x0, 0x40, 0x2f, 0x0, @multicast1, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x29, 0x2, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x1, 0xddb}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000980)={@private0, 0x0}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x2f, 0x96, 0x3, 0x6, 0x40, @loopback, @loopback, 0x7, 0x1, 0x80000001, 0xc0}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000c00)=@gcm_128={{0x304}, "5c381192a5f76be5", "6182b17ceb480bc1772ced2a6fd73ab4", "a5861ba2", "c0d55fb8fa20a118"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000c80)=0x7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10b, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r6, 0xe215b000) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r8) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20058000}, 0xc080) syz_open_dev$sndmidi(&(0x7f0000000f80), 0x4, 0x40840) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r13, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@getchain={0x2c, 0x66, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0x8, 0xf}, {0xfff3, 0x3}}, [{0x8, 0xb, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x15, &(0x7f0000001200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, @ldst={0x0, 0x2, 0x2, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x5, 0x4, 0x30, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000001300)=""/157, 0x40f00, 0x3, '\x00', r4, @sched_cls=0x37, r8, 0x8, &(0x7f00000013c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000001440)=[r8, r10, r10, r7, r7, r11], &(0x7f0000001480)=[{0x3, 0x5, 0x6}, {0x4, 0x2, 0xb, 0x9}, {0x1, 0x3, 0xb, 0x9}, {0x3, 0x3, 0xd, 0x9}, {0x0, 0x1, 0x6, 0xb}, {0x3, 0x2, 0xf, 0x1}, {0x5de4, 0x5, 0x1, 0xb}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0x6, @void, @value}, 0x94) r14 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f00000015c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401, 0x507, 0x5, 0x100, 0x7, 0xa0000, r3}) ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000001640)={0x1, 0x1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000001740)={0x0, 0x6c, &(0x7f00000016c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x2503c1c5, @remote, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000001780)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000017c0)=@sack_info={r15, 0x8, 0xa7f}, 0xc) 7.387345703s ago: executing program 3 (id=1023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) 7.365936729s ago: executing program 3 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0x9, @pix_mp={0x9, 0x3, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x8, 0xa}, {0x2, 0x1000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x7}}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x1, 0x1, &(0x7f0000000000)=0xffffffffffffff55}) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) syz_usb_connect(0x6, 0x6dc, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x7e, 0x50, 0x42, 0xff, 0x403, 0xf608, 0x8e23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ca, 0x3, 0x87, 0x40, 0x30, 0x4, [{{0x9, 0x4, 0x49, 0x8, 0xf, 0x1a, 0x94, 0x19, 0x8d, [], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x2, 0x4, [@generic={0x92, 0x24, "6e2d0687d1fad475d2c59ebf48c988f4fc106d21fb6fba3a1143a644787e73d9a7e565158b194a2251ae767e7a6b3f0e1267ba2d521c5dd2dae4e00f143dc0484df47b8188bae0b2ed5ccd450de43c85cf16d7c5d491f9798ef2623c6b4d7456c97114bdf31fd6b131f469bf3b975215da577e94acd042a9bcd7b052aff6d8c9eaf8a8100c21d6153748b51808afd6fa"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x2, 0x60, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x5, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x0, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xdb2d6f3c68819557, 0x3, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x1, 0x3, 0xfc}}, {{0x9, 0x5, 0x7, 0x4, 0x48, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x3, 0x7, 0x6, [@generic={0x2d, 0x11, "7dd7d4582fc7322c004201407cb73f9de890d6c03dba63ecaec44aaebf687741157076eae5337f75f56ea5"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x7ff, 0xb9, 0x5, 0x5}}, {{0x9, 0x5, 0xff131b9abc11a648, 0x1, 0x400, 0x3, 0x2, 0x3}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x6, 0x1, 0x9, [@generic={0x20, 0x22, "f256c4fa8578b3762d113f784055797c993f0c6dd726281a41f06b4e8776"}, @generic={0x6e, 0x23, "e7f9e45f22e7f0f2d90412febfb562807a63dc072c3aeff8fa20032a6256bb31035868f0e734aa0e5759fbb37e9df8b01919094f44a63d630fb8a9d323ac951a4ca42f13f58a2bc60de63c604ac12b258d6b0e6f8f3f8e8681e490ffdb26e24f90f400e635855142c574449f"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x10, 0x7}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x9, 0x34, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfd6f}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x6, 0xf7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x401}, @generic={0x24, 0x0, "f14e463afd57f25741a938ccafcf3c3160ea7476f2c6665a114ba1d3deaae072358c"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x50, 0xfb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x101}, @generic={0x3d, 0xa, "97fa90412d56f7f8b2d4950f8d2f736d078bbb0bb06903201cf98cf2677528944997279a979f53d7e2dd5a342cb9fd9ddd854e8e0e8ddeb0f8ca47"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x3, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}]}}, {{0x9, 0x4, 0xc, 0x81, 0x1, 0x6e, 0xd6, 0xf6, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x5}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0xa0, "5efa0f"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x7, 0x9, 0x4, 0x9, 0x87d36daeb16d373f, 0x1], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0xca, "47ed4e735c"}]}, @generic={0x9e, 0x10, "1673c96f8d9f54b5e010dc6e5216910765bd0ed163d3a9acd2640ad2e9883c4d5a225b0990c712e59763553b36c9620a64b79fbaf13c0b817e77d8f0d58baa504827fb8f727581d0e8119268b1149bf4ca3ffab9f56cbf88c0abedad20a4eb0a8a4a8008ed2a141169d6c23a8a448134e398716ba0eb05a3dd5b8d26e84a71b641c085702566bf93245275c051468febe2a8c371fa6ed6782199ed7d"}], [{{0x9, 0x5, 0x80, 0x4, 0x200, 0x99, 0x7f, 0x10}}]}}, {{0x9, 0x4, 0x77, 0x1, 0xb, 0x7a, 0x63, 0x46, 0x7, [@generic={0x70, 0x6, "e827384d49b44ec0c4328f450d5665e27236631c44bb197ec9166c9fe62998bce6ef5dc9036a188e444013f3b9a1dbc56331fe74a93b718a65406eb473a8594f24f11171c6e3c908576dbfce597337b1548c449996eaf513c5a34b80bcab3434039fcf51b1ddbe4ead913ecdc605"}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "2427ef67abfb"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3ff, 0xfff3, 0x3}, [@acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x8f1, 0x5, 0xc}, @dmm={0x7, 0x24, 0x14, 0x6, 0x3ff}, @country_functional={0x12, 0x24, 0x7, 0x8, 0x80, [0x8, 0x9, 0x55c9, 0x2, 0xc0e, 0x3]}, @mdlm_detail={0xb0, 0x24, 0x13, 0xf9, "9786e0149bca0e9120c7db6f3e1a62ce7a7fb0bcbafd06595c60128bc5106a29e439592ec7ebab8aec95d293af1caa1b8aa94dc1ab82f994fafd4ba7c833eb8ccd72277788536c664c3be16fa2657ce146a360fadcd049976e2c5320780dbdf33ce15fb351cd974853089381bb2d6c73b9100c5991a3be366395004fcf0598808063f8c26c372586ba1579913822ca195e7c75f91253c87ad5a751e3524366dec5cbb2bbcc1752b7a42092ec"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x400, 0x9, 0xc}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xa, 0x3, 0x8, [@generic={0x56, 0x21, "6f6a0ac51790a4a17041f33232b12c0200e192e49b0e165aea04b0e1f896565b507eb687866f94918f231fc00f9b9e62c17753cb368aac5ffee8784248a3aed8ab2bebbd6ff3e5df079ed8331a06ee168356a909"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd9, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x9b, 0xff, 0xfd}}, {{0x9, 0x5, 0xd, 0xc, 0x0, 0x8, 0x3, 0x91}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x10, 0xd}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x6, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x7, 0xfd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x56b5}, @generic={0x81, 0x22, "09cfee9aa2910ff5462f6af839a1ec49f54e557c859665087ceb1441665cc3bfc7415b2fd7ba848c2b01d93e263d8030ad8a0ec28638b3b1ff0f23f9dc4db2da3f4101b9690f916bff39714d9a22623ad45b7c933a5769923da1aba31a1a2ab99b0e11107a916fe6781b09057d423f18de17b5cae4ab8318766775506f8393"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0xe5, 0x9, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x7f, 0x5, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x80, 0x8f, 0x3, [@generic={0xaa, 0x10, "a88797479b61872257c046c870a83af285320a0243b38848d3b7cda3506e99aa61e8fa2b05cb46aea63b4b9a538189a46842babd57bda965327a2900120876838250dbbf3b4609aa89114ae434b64a0186759ca8e447032c23df764a77e4e3f0783c4e3229e57eb29820de9a007cb1462706eb6474f49ec414ab5f981ca6a8f74ea9d7a237e502da730e01352d55dabf1c82b8dc005aac170dc5c03874fc84cfa7cfa8d2d9393077"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0xd1, 0x1, 0xff, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc1a}}, {0xc5, &(0x7f00000008c0)=@string={0xc5, 0x3, "5acbe96a212115cf0317e1dabec74670b78f10e3c6546a411b2c36783801ecc1b5e2071fc31f4f6784fb19e75958ab4f886f064dd111258fe622bc0a02c8aabd86296aa40f24d586a769292bee4e424cde5aff4bfb1ddb02361b56b872ea9ee64138e676e633f3983ae24fb83b1444e3891cf49ec79d433f6555508b6830f70960295a4cde9f4f29c7697a2be71f394f89a0fa89d742523cd63e21e36f7e4925cb630bf277ef9a9e5a0eda757b2aac4b8f560e80168152cd0ad010491cc288e21b1dd9"}}]}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x5e2) 6.385902759s ago: executing program 1 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4239, &(0x7f0000000380)={0x0, 0xce0a, 0x0, 0x3, 0x370, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x28, "c9e40ceccaf2cf18c1312929801b2dbcb95e8b2725d2e3c38bc20f1acdd8"}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0xff25, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0xd62e, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) 6.007401208s ago: executing program 0 (id=1027): prctl$PR_SET_MM(0x4e, 0x1, &(0x7f00002d5000/0x2000)=nil) r0 = socket(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001006269747769736500080002"], 0xe0}}, 0x880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000e1ffffffff06000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008015}, 0x4) 5.891153623s ago: executing program 0 (id=1028): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="600b1f40001203"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @mac=@remote, @rand_addr=0x64010102, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.203542148s ago: executing program 2 (id=1029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000010000085000000d4000000bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 5.07930661s ago: executing program 1 (id=1030): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0), 0x0, 0x40) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff20000000000000", 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002580), 0x20101, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="fe804490e8aeea07", 0x8}], 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x2e9c}, 0x8) shutdown(0xffffffffffffffff, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000000)=0xfff, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r5) r6 = fsopen(&(0x7f0000000040)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r8, &(0x7f0000000000)='.\x00', 0x0) timerfd_settime(r5, 0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 5.054396919s ago: executing program 2 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x30c00000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000090c0)={0x0, 0x0, &(0x7f0000009080)={&(0x7f00000004c0)=@newtaction={0x18, 0x4e, 0x334239e91bf4481f, 0x0, 0x0, {0x0, 0x1b}, [{0x4}]}, 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.969562189s ago: executing program 4 (id=1032): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="40000100000056"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000100013040010000000000000fc020000000000000000000000000000000001000000004e240000020000202b0048649588000000000080ff00000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac14140f0000000000000000000000000000000000000000000000000000000006000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000580)={@val={0x1c, 0xf5}, @val={0x0, 0x1, 0x0, 0x0, 0x4}, @mpls={[], @ipv6=@gre_packet={0x3, 0x6, "395ca6", 0x44, 0x2f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0xe, 0x1, 0x5f, 0x2, 0x0, 0x2, 0x5}, 0x1, {0x80800000}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0x1, 0x3, 0x1, 0x0, 0x5, 0x7}, 0x2, {0x5, 0x9, 0x3, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x7a) 4.915198739s ago: executing program 1 (id=1033): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140)}, 0x4008010) r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000240), &(0x7f0000000380)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x802, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)='Y', 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}, {{&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000280)="9ad55111e216a2d421dc5babd91c130bcf6e9bd290d464d1101a65637fc80a13e6f92fcb5d9fc32381761e049eb10d777aff6a003a57bdcd73fa0b71e298e707a265935daf03c43ab5c42f28c25952510b293a08fad461d823e95ecd51a548303bafc612086255c87394e7c3a26efc90454344a4384d4f3b559b07b4", 0x7c}, {&(0x7f0000000600)="6d4ad9d4dc2089085a4fe0feb314384332f7eb4f134d9d0e0c309e5973656a1d08f428022f630ba270df5be57c50aaa0133dc25004aa69dcebdd6efd582ac0b3e3e34a5f5e99ed135077bdb4c69d423e395e7c77841986ada82133493db11476b8d053a8795819ff79ec87b12c4f9a9a03", 0x71}, {&(0x7f0000000680)="aded740270e1b18df2485c36e9cdc9b24db67ffbbe776b7e27742d2f9a6c8a9e9b0ddc834b3272d3fa6a1a19876609d78926c4497e8461d18332d698d87e383ddd9c82b19acb16f51de2babbd2cda0b570629f2081c91b572650064dbd5061", 0x5f}, {&(0x7f0000000700)="c515bd25db9ce6f53149ad2699b1f35c84e6d943306521eb46468bf022308a1db98aeea368feda1f40897594f69e34e1041a20046023918d5a770654e4ef124f9f96ff09295ee41562b2e266887cd62fe74844cbd81b8378820cdc8ba02bcbcb3d14330d92aef3c7d1df8f8652c6d025187ccccbb528926a293301d87611037b", 0x80}, {&(0x7f0000000780)="cad17d9c8dfe545d8f9cb3caf1da72a35872010bc2b25bee1aa9958e5bf2daa9fd332bc6d7baa6f60e43e231dbd08c8caad934088a089d0de61d0d46c22fa0e284cbc91d86d8ebc97a0372bbb3a02d3f5fbe6a96799c6edbc553bb8e8f1ec09e30961a9c788ca65ddc8c63e161", 0x6d}, {&(0x7f0000000840)="e64a622f078c19b24f3ac0e5a77dd5fbb196b2cb81b683e793a27350ba2299379a80877503093c191bc16c41c7c055f6f4a993e5eaf6592d8520ee8d2ae0dc0b64c26c9d8b2cb70374fef7d98b9fd18d1b0fd105297561196be8419f1613da4bc33952213d67b3be0ca19077aa90c06c2e2aa56d29c1b2478c52b2342e200687c7f4565062c36125d3cbf6ff1d7553d268d2697173db967ddaad52328d83d0e14dc88491d5d1314c49dfb0006800e7a241b2e566", 0xb4}, {&(0x7f0000000900)="4f161cd9f999fe63ba04e3b07b7178cde4b85e478c9ab8bb6afba8315ec93dec8057457ca734d57f179f3992675fc5124945f1888c4261494f72a8fb1cabef543f2e6ecd13a88f98ad25e1c26a36128fd3403b39515564cf8a65743cab8c3d76e67c01877665a33b4d6730bd26f9b051ef71323d802c3e6dcca96d7af18f1c90a222f34a9206103ed958c52cc6bb83cfd765c3fd8a10db7ba8215adf4f5746fe84a3296e5a78ab209ba97335220c7732b27bd88cc1642cd1ff26", 0xba}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xb5, [@dev={0xac, 0x14, 0x14, 0x1f}]}, @cipso={0x86, 0x2f, 0x3, [{0x7, 0x9, "f61c72ffd80438"}, {0x7, 0x7, "ebe1ea61c9"}, {0x5, 0xe, "acad99f488b397d4c5b5dfe7"}, {0x5, 0x8, "e882bb46f042"}, {0x5, 0x3, "b3"}]}, @timestamp_addr={0x44, 0x2c, 0xf6, 0x1, 0xe, [{@multicast2, 0x2}, {@empty, 0x7}, {@private=0xa010102, 0x7}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0x5, [{@empty, 0xb}, {@remote, 0x2}, {@private=0xa010101, 0x6}, {@remote, 0x6}, {@loopback, 0x10}, {@private=0xa010101, 0x401}, {@broadcast, 0xfffff6e0}]}, @rr={0x7, 0xf, 0x65, [@broadcast, @remote, @multicast1]}, @lsrr={0x83, 0x27, 0x52, [@private=0xa010101, @empty, @multicast2, @loopback, @remote, @empty, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x24}]}, @generic={0x94, 0xb, "968df05aa2e47f5caa"}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xb0, [@multicast1, @empty, @multicast2, @private=0xa010100]}, @ssrr={0x89, 0x13, 0xfa, [@rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0xf, 0xc3, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2]}, @end, @rr={0x7, 0x17, 0x38, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @loopback]}, @ssrr={0x89, 0x17, 0xa4, [@rand_addr=0x64010102, @multicast1, @multicast2, @rand_addr=0x64010102, @multicast1]}]}}}], 0x1b8}}, {{&(0x7f0000000500)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)="aedef6064af2389048772f56bfc3360eed82520131980ae4e546a9012834bfa0968e67fbd8dec83b194090fc1aacca", 0x2f}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414bb0000000020000000000000000000000007000000830fa70000000064010102e0000002001c00000000000000000000000700000094040100820593f62b000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000ac1414bb0000000032858718a9389d1713b624a30b5e95b395d089341cd9d610708aa4938686639baeae0ecfa5ec0820ce8c54feb1f7ae6eb1520b5947d74d2d5ed43621c3c6f11476d716c009988b36438d626eb31ba4ec374dd85c952b62d97cdd4c9097c46b45c74efdf72c69eb4b06d35d4278624f064b6a7f36704f6de71662a35f8fa69ae9"], 0x98}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000540)=@assoc_value, &(0x7f0000000580)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000800)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000", @ANYBLOB="0000000000000000140040800b0001006272696467650000040002800c001a80"], 0x60}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x50}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 4.04331581s ago: executing program 3 (id=1034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) 3.732869758s ago: executing program 3 (id=1035): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fcntl$setstatus(r4, 0x4, 0x800) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 3.631565053s ago: executing program 1 (id=1036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e00010000000000000000000000000000000000000000020000"], 0xb8}}, 0x0) 3.490753116s ago: executing program 1 (id=1037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x200400, @loopback}, @in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}], 0x38) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 21) 2.831453732s ago: executing program 1 (id=1038): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000010000085000000d4000000bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000000), &(0x7f0000001200), 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292100090509"], 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r6, 0x80045440, &(0x7f0000000000)={0x8, 0x1, 0x4}) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000180)={0x3, 0xca}) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) r9 = socket$inet(0x2, 0xa, 0x2) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x8919, &(0x7f0000000080)) 2.499407765s ago: executing program 4 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001020102000000000000000002000007300001802c000180140001"], 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xe52, 0x80000) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000200)=0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0), 0x841, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000340)={0x2, 0x3}, 0x2) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe6f, 0xb, 0x8001}, {0x3, 0x11, 0x40}}, {@pci, {0x0, 0xb, 0xfba2}, {0x0, 0x11, 0x5}}, {@pci, {0x0, 0xb, 0x2}, {0x0, 0x11, 0xffff}}, {@pci, {0x0, 0xb, 0x8000}, {0x0, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "6594844326f4a23ff094cd183f5a6a24"}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r10, @ANYBLOB="20e00000", @ANYRES32=r10, @ANYBLOB="000002000000000000000000000000000000000108000000"], 0x38}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.444128668s ago: executing program 2 (id=1040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0x0) gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xb, 0x0, 0x7, 0x3, &(0x7f0000000380)="976ae6bd94ee2002da3af17a1b38fbcaac524923a1338f6abcd2aefbfbb67245072ad38d82c379b108051c0d1d1bb10dd5000160ff07dd0a2f45225faaaae28d0db1b22f0b908d74a2270118ae8457d13a1288537a827536ac9fd03597f668c488b54a9ebdcd95ab4993c32f27d27990a924fe441f7c68b28c9f1e5e28d394212dba5e967b74e5331f33354c6e906d87c89faf91e60ef20e9dd30cf11c54508e767b0f0f3a56990a028a1c820883b9f727f7c24750e5cc1212301fd0492a5ea8e140aa614e86d4f371970bac9ce43afce304185b0e", 0x4, 0x0, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e01000008240607", @ANYBLOB], 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000200), 0x4c0000000000000, 0x800) pread64(r10, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) 1.516733964s ago: executing program 0 (id=1041): close(0xffffffffffffffff) userfaultfd(0x80801) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000080)={0x0, 0x2c98, 0x10101, 0x3, 0x368}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x32}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000200)=""/74, 0x4a) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x404c840) 147.157304ms ago: executing program 0 (id=1042): mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, 0xffffffffffffffff, 0x83000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) sync_file_range(r0, 0x77a44059, 0x4, 0x4) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) write$sequencer(r0, &(0x7f00000000c0)=[@generic={0x8}, @e={0xff, 0x3, 0xc, 0x2, @generic=0x1, 0x6, 0x7, 0x3}, @t={0x85, 0x1, 0xc3, 0x71, @generic=0x7d}, @n={0x1, 0x8, @generic=0x7, 0x3}, @raw={0xfe, 0xc, "826f6a19626c"}], 0x1d) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x34, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0xf91, 0xffff, 0x2, 'snmp_trap\x00', 'syz1\x00', {0xf2}}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x35, 0x3, 0x0, [0x1, 0x0, 0x81, 0x200, 0x3, 0x3d9b, 0x9, 0x1, 0x60d, 0x2, 0xd261, 0x663, 0x0, 0x7, 0x5, 0xb], 0xb}}, @common=@icmp6={{0x28}, {0xb, "1a65", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000500)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000640)={r1, 0x6, &(0x7f0000000580)=[0x8, 0x7, 0x1, 0x800, 0x8, 0x7], &(0x7f00000005c0)=[0x3, 0x3, 0x7, 0x4, 0x81, 0x3, 0x3, 0xe5, 0x34], &(0x7f0000000600)=[0x3, 0x4]}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timerfd_settime(r0, 0x2, &(0x7f00000006c0)={{}, {r2, r3+60000000}}, &(0x7f0000000700)) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000840)={r1, 0x2, &(0x7f0000000780)=[0x2, 0xb], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x401, 0x401, 0xc3, 0x3, 0x4, 0x3, 0x6]}) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000880)="0e52f419b0f1efa7ec475bd9d577732fe1ed3584ef1e595cbedb0da3da86fef314f79836cbfc7c7440465d41e3306ad31cdc2a09679e192c88cd71e17a99e9f46abdcec9e8dc954609eef46028688d2e9e4f6f55482bdd21bc5616bddec67f30ee7a77c5e62cae91f6b138d86fc07d5a8c2143eb523138c7f36731f890663315cfc7f9ac04e6d194b8c8c4c4e8ae17ebd172") sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20040040) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a80), 0x101100, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000ac0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000b00)={r1, 0x10000, 0x0, 0x8, 0x0, [], [0x6bc, 0x5, 0x7, 0x80000000], [0x3, 0x3, 0x3], [0x4, 0xad85, 0x80000001, 0x2]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x12, 0x7, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x30, &(0x7f0000000c00)=""/48, 0x40f00, 0x79, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x1, 0x4, 0x4, 0x100}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000c80)=[r0], &(0x7f0000000cc0)=[{0x2, 0x5, 0xd, 0x7}], 0x10, 0x4087, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {0x1, 0xa, 0x9, 0xc1}, 0x10, [0x80000001, 0x7, 0x1, 0x7, 0x10, 0x4, 0x9, 0x3, 0x3, 0xffffffff, 0x7880, 0x7, 0x54c25f71, 0xc97e, 0xdce5, 0x7, 0x3, 0x2, 0x5, 0x4, 0x9, 0x3ff, 0x8001, 0xf6, 0x9, 0xc98e, 0x1, 0x9, 0x100, 0x7, 0xfffffffa, 0x0, 0x401, 0x9, 0xff, 0x9, 0x1ff, 0x5, 0xc, 0x100, 0x5, 0x1, 0x2, 0x7fff, 0x8, 0x3, 0x6, 0x1, 0x4, 0x1, 0xfffffff7, 0x8, 0x80000001, 0x1e9b, 0xd7e, 0xd, 0x8, 0x77c, 0x7, 0x3, 0x7, 0xffff, 0x80, 0x8], [0x100, 0x1, 0x400, 0x6, 0x7fffffff, 0x8, 0x0, 0x3, 0x2, 0x7, 0x0, 0x80000001, 0x81, 0x80000001, 0x4, 0x3, 0x5, 0x9, 0x7, 0x6, 0x80000000, 0x1ff, 0x215, 0x1, 0x7ff, 0x1, 0x9b68, 0x200, 0x5, 0x80000001, 0x3, 0xd, 0xfffffffb, 0x6, 0x6, 0x7, 0xd, 0xf, 0xfffffffa, 0x4235, 0x2, 0x7, 0x1, 0x1000, 0x7f, 0x5f80, 0x9, 0x8, 0x9, 0x33, 0x7, 0x7, 0x7, 0x6, 0x10000, 0x9, 0x10001, 0x7f, 0x47c2, 0xfff, 0x8, 0x3, 0x73, 0x9], [0x2, 0x5, 0x8, 0xc1a, 0xffffffff, 0xffffffff, 0x80, 0x5, 0x6, 0x5, 0x0, 0xc, 0x6, 0x5, 0xffffffff, 0xca1a, 0x8, 0x3, 0xffff2fae, 0x40, 0xe, 0x3, 0x0, 0x6, 0x400, 0x1, 0x7ba, 0xd8ad, 0x1, 0x1, 0x74, 0x3, 0xb73, 0xffffffff, 0x2, 0x7f, 0x200, 0x7, 0x0, 0x101, 0x5, 0x0, 0x101, 0x401, 0x1, 0x7, 0x8, 0x9bc6, 0x1, 0x7, 0x6, 0x6, 0x72b9a2cb, 0x7, 0xfff, 0x8001, 0x0, 0x9, 0x7d, 0x5, 0x5, 0x6607, 0x7fffffff, 0x3], [0x0, 0x8, 0xf70, 0x1, 0x1, 0x8000, 0xb5, 0x8, 0xfffffffa, 0x54, 0x1, 0x44b, 0x8, 0x3, 0x1, 0x1, 0x5, 0x28a, 0x1000, 0x3ff, 0x3, 0x5, 0x0, 0x81, 0x3, 0x40, 0xd, 0x3ff, 0xd, 0x51, 0x1, 0x101, 0x0, 0x0, 0x4, 0xec, 0x3, 0xfffffffc, 0x0, 0x5c, 0x7, 0x9, 0x7fff, 0x3, 0x1, 0x6, 0x0, 0x8, 0xed87, 0x797, 0x2, 0xff, 0x0, 0xc1, 0xd65, 0x3, 0x200, 0xeff, 0xc8d, 0x1, 0x4, 0x1, 0x8]}, 0x45c) r7 = creat(&(0x7f0000001580)='./file0\x00', 0x10) bind$pptp(r0, &(0x7f00000015c0)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001640)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x118, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000001600), {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xf2, 0x7f, 0x0, 0x1, 0x0, "a975db1bcec556ea8c47e2c3a35e1df343265aea05fa991c19fab6e7588e4910e0e29108cb5970d77e069b2f08fe78723a26270e4b23a7cafb5bb95bd78cfc4a"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0xc1, 0x3ff}}}, {{@ipv6={@empty, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0x0, 0xff, 0xffffff00, 0xff], 'batadv_slave_0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x8, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x10, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001a40)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x8, [@restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa}, {0x2}, {0x10, 0x4}, {0xc, 0x3}, {0x8, 0x1}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x0, 0x1e, 0x1e, 0x0, 0x61]}}, &(0x7f0000001b40)=""/157, 0x84, 0x9d, 0x0, 0xfffffff9, 0x10000, @value=r0}, 0x28) symlink(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)='./file0\x00') ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000001cc0)=0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001d00)={0x6, 'dvmrp0\x00', {0x1}, 0x27e}) connect$pptp(r0, &(0x7f0000001d40)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) 42.252535ms ago: executing program 0 (id=1043): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000200)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x104, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x7, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xffffffffffffff1e, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 3 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @private=0xa010102}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000020120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): e's hardware PID filter (table count: 16). [ 308.330682][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.344070][ T5924] usb 2-1: media controller created [ 308.353177][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.566409][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 308.575498][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.596682][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 308.613797][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 308.638406][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.659605][ T5924] usb 2-1: USB disconnect, device number 43 [ 308.715717][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 308.946996][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.035245][ T5924] usb 5-1: USB disconnect, device number 80 [ 309.118304][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.165467][ T30] audit: type=1326 audit(1749351620.962:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.281174][ T30] audit: type=1326 audit(1749351620.962:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.420538][ T30] audit: type=1326 audit(1749351621.002:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.534134][ T3401] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 309.565157][ T30] audit: type=1326 audit(1749351621.002:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.685438][ T30] audit: type=1326 audit(1749351621.002:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.800645][ T5829] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 309.810582][ T3401] usb 2-1: Using ep0 maxpacket: 16 [ 309.859207][ T30] audit: type=1326 audit(1749351621.002:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 309.910809][ T3401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.930575][ T3401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.972233][ T3401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.995419][ T30] audit: type=1326 audit(1749351621.002:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 310.047212][ T5829] usb 5-1: config 0 has no interfaces? [ 310.090380][ T5829] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.150226][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.158928][ T3401] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.229748][ T5829] usb 5-1: Product: syz [ 310.234279][ T3401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.235144][ T30] audit: type=1326 audit(1749351621.002:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 310.250816][ T5829] usb 5-1: Manufacturer: syz [ 310.396931][ T30] audit: type=1326 audit(1749351621.002:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f575ab8e929 code=0x7ffc0000 [ 310.400209][ T3401] usb 2-1: config 0 descriptor?? [ 310.475451][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.484551][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.527967][ T5829] usb 5-1: SerialNumber: syz [ 310.556022][ T5829] usb 5-1: config 0 descriptor?? [ 311.149889][ T3401] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 311.157293][ T3401] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 311.170959][ T3401] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 311.193148][ T3401] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 311.226427][ T3401] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 311.247411][ T3401] microsoft 0003:045E:07DA.0010: no inputs found [ 311.260606][ T5829] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 311.275298][ T3401] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 311.378835][ T3401] usb 2-1: USB disconnect, device number 44 [ 311.419723][ T5829] usb 1-1: device descriptor read/64, error -71 [ 311.680714][ T5829] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 311.796629][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 311.802829][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.814502][ T5914] usb 3-1: USB disconnect, device number 39 [ 311.830638][ T5829] usb 1-1: device descriptor read/64, error -71 [ 311.993439][ T5829] usb usb1-port1: attempt power cycle [ 312.232725][ T5914] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 312.740684][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 312.757375][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 312.760706][ T5829] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 312.768102][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.791187][ T5829] usb 1-1: device descriptor read/8, error -71 [ 312.817938][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.863607][ T5914] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 312.914688][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.923368][ T24] usb 5-1: USB disconnect, device number 81 [ 313.016791][ T5914] usb 3-1: config 0 descriptor?? [ 313.060683][ T5829] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 313.095680][ T5829] usb 1-1: device descriptor read/8, error -71 [ 313.211539][ T5829] usb usb1-port1: unable to enumerate USB device [ 313.235975][ T8507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.243625][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 313.251287][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 313.258596][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 313.269974][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 313.449833][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 313.460150][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 313.477815][ T5914] usb 3-1: USB disconnect, device number 40 [ 313.592987][ T8512] usb usb8: usbfs: process 8512 (syz.1.710) did not claim interface 0 before use [ 313.941688][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.071170][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.427676][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 314.592347][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.608509][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.638972][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.672640][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.712329][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.721801][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.735477][ T10] usb 1-1: Product: syz [ 314.750599][ T10] usb 1-1: Manufacturer: syz [ 314.761769][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 314.767143][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 314.778558][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 314.783976][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 315.812925][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 316.046520][ T8549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.093027][ T8549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.170628][ T5914] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 316.340284][ T5914] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 316.357767][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.367633][ T5914] usb 5-1: Product: syz [ 316.377728][ T5914] usb 5-1: Manufacturer: syz [ 316.383916][ T5914] usb 5-1: SerialNumber: syz [ 316.398599][ T5914] usb 5-1: config 0 descriptor?? [ 316.417228][ T5914] rndis_host 5-1:0.0: More than one union descriptor, skipping ... [ 316.428379][ T5914] usb 5-1: bad CDC descriptors [ 316.439897][ T5914] cdc_acm 5-1:0.0: More than one union descriptor, skipping ... [ 316.623489][ T5914] usb 5-1: USB disconnect, device number 82 [ 317.222393][ T10] usb 1-1: USB disconnect, device number 79 [ 317.370595][ T5829] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 317.450743][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 317.530708][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 317.542477][ T5829] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 317.555458][ T5829] usb 2-1: config 0 has no interface number 0 [ 317.563426][ T5829] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.578375][ T5829] usb 2-1: config 0 interface 85 has no altsetting 0 [ 317.588843][ T5829] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 317.600879][ T5914] usb 3-1: device descriptor read/64, error -71 [ 317.614057][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.626461][ T5829] usb 2-1: Product: syz [ 317.634343][ T5829] usb 2-1: Manufacturer: syz [ 317.638962][ T5829] usb 2-1: SerialNumber: syz [ 317.688112][ T5829] usb 2-1: config 0 descriptor?? [ 317.693507][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 317.740553][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 317.788637][ T8570] binder: 8569:8570 ioctl c018620c 200000000000 returned -1 [ 317.850754][ T24] usb 5-1: device descriptor read/64, error -71 [ 317.861072][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 317.890545][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 317.919187][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 317.942045][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.950296][ T10] usb 1-1: Product: syz [ 317.955500][ T10] usb 1-1: Manufacturer: syz [ 317.960215][ T10] usb 1-1: SerialNumber: syz [ 317.968837][ T10] usb 1-1: config 0 descriptor?? [ 317.979292][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 318.000700][ T5914] usb 3-1: device descriptor read/64, error -71 [ 318.099295][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 318.131288][ T5914] usb usb3-port1: attempt power cycle [ 318.320186][ T5829] appletouch 2-1:0.85: Geyser mode initialized. [ 318.326829][ T24] usb 5-1: device descriptor read/64, error -71 [ 318.406434][ T5829] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input34 [ 318.510833][ T5914] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 318.511133][ T24] usb usb5-port1: attempt power cycle [ 318.533800][ T5914] usb 3-1: device descriptor read/8, error -71 [ 318.542031][ T5829] usb 2-1: USB disconnect, device number 45 [ 318.595210][ T5829] appletouch 2-1:0.85: input: appletouch disconnected [ 318.853629][ T5914] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 318.904876][ T5914] usb 3-1: device descriptor read/8, error -71 [ 318.911587][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 318.956578][ T24] usb 5-1: device descriptor read/8, error -71 [ 319.042792][ T5914] usb usb3-port1: unable to enumerate USB device [ 319.081037][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.090162][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.282113][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 319.311961][ T24] usb 5-1: device descriptor read/8, error -71 [ 319.324416][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 319.340770][ T10] gspca_sonixj: reg_w1 err -110 [ 319.380655][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 319.421021][ T24] usb usb5-port1: unable to enumerate USB device [ 320.080989][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 320.242949][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 320.258778][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.296829][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.313358][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 320.313375][ T30] audit: type=1326 audit(1749351632.122:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.341613][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.349448][ T10] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 320.370210][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.382660][ T30] audit: type=1326 audit(1749351632.122:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.404929][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.411959][ T10] usb 2-1: config 0 descriptor?? [ 320.431287][ T30] audit: type=1326 audit(1749351632.122:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.458892][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.469044][ T30] audit: type=1326 audit(1749351632.122:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.491294][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.586232][ T5829] usb 1-1: USB disconnect, device number 80 [ 320.594594][ T30] audit: type=1326 audit(1749351632.122:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.672651][ T30] audit: type=1326 audit(1749351632.122:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.767910][ T30] audit: type=1326 audit(1749351632.122:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.790191][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.820686][ T30] audit: type=1326 audit(1749351632.122:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67058e929 code=0x7ffc0000 [ 320.842886][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.870268][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.879890][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.896666][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.904081][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.911902][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.919089][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.926548][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.934744][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.942133][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.949209][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.972514][ T10] aureal 0003:0755:2626.0011: unknown main item tag 0x0 [ 320.980676][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 320.999552][ T10] aureal 0003:0755:2626.0011: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 321.024601][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.033801][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.049617][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 321.058839][ T8610] netlink: 'syz.3.740': attribute type 7 has an invalid length. [ 321.067015][ T8610] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 321.075060][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 321.086340][ T10] usb 2-1: USB disconnect, device number 46 [ 321.121027][ T5914] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 321.152882][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.161943][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.172304][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.185205][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.206143][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.215288][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.223434][ T24] usb 5-1: Product: syz [ 321.227615][ T24] usb 5-1: Manufacturer: syz [ 321.237216][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 321.242584][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 321.247834][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 321.253204][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 321.290749][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 321.297397][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.309130][ T5914] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.318791][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.330280][ T5914] usb 1-1: config 0 descriptor?? [ 321.541977][ T5914] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 321.559127][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a8bf000: rx timeout, send abort [ 321.572942][ T5914] usb 1-1: USB disconnect, device number 81 [ 321.728996][ T8619] loop2: detected capacity change from 0 to 7 [ 321.755681][ T8619] Dev loop2: unable to read RDB block 7 [ 321.774333][ T8619] loop2: unable to read partition table [ 321.794521][ T8619] loop2: partition table beyond EOD, truncated [ 321.817547][ T8619] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 321.826801][ T8622] netlink: 'syz.3.743': attribute type 21 has an invalid length. [ 321.847495][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.3.743'. [ 321.891451][ T8622] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 321.905049][ T8622] netlink: 3 bytes leftover after parsing attributes in process `syz.3.743'. [ 322.068706][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a8bf000: abort rx timeout. Force session deactivation [ 322.250619][ T5914] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 322.414693][ T5914] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 322.436695][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.545373][ T5914] usb 2-1: config 0 descriptor?? [ 322.558041][ T5914] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 322.610654][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 322.692273][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.713101][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.750426][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.759080][ T5914] gspca_sn9c2028: read1 error -71 [ 322.771206][ T5914] gspca_sn9c2028: read1 error -71 [ 322.785130][ T5914] gspca_sn9c2028: read1 error -71 [ 322.794064][ T5914] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 322.805343][ T5914] usb 2-1: USB disconnect, device number 47 [ 322.839171][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.885489][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.891904][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.917209][ T24] usb 3-1: config 0 has no interfaces? [ 322.950626][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.959712][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.008159][ T24] usb 3-1: Product: syz [ 323.019360][ T24] usb 3-1: Manufacturer: syz [ 323.039665][ T24] usb 3-1: SerialNumber: syz [ 323.058205][ T24] usb 3-1: config 0 descriptor?? [ 323.378839][ T8652] netlink: 388 bytes leftover after parsing attributes in process `syz.0.751'. [ 323.566337][ T8655] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 323.745838][ T10] usb 5-1: USB disconnect, device number 87 [ 323.827444][ T8664] loop2: detected capacity change from 0 to 7 [ 323.840333][ T8664] Dev loop2: unable to read RDB block 7 [ 323.849402][ T8664] loop2: unable to read partition table [ 323.858523][ T8664] loop2: partition table beyond EOD, truncated [ 323.870299][ T8664] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 323.945244][ T8666] binder: 8665:8666 ioctl c0306201 2000000003c0 returned -14 [ 324.051031][ T5829] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 324.189813][ T8673] loop7: detected capacity change from 0 to 7 [ 324.196576][ T24] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 324.209771][ T8673] Dev loop7: unable to read RDB block 7 [ 324.215697][ T8673] loop7: AHDI p1 p2 [ 324.220104][ T8673] loop7: partition table partially beyond EOD, truncated [ 324.227417][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 324.234608][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.245696][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 324.258850][ T8673] loop7: p1 start 1702000233 is beyond EOD, truncated [ 324.267978][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.295277][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.353013][ T24] usb 5-1: config 0 has an invalid interface number: 248 but max is 0 [ 324.370003][ T24] usb 5-1: config 0 has no interface number 0 [ 324.384721][ T5829] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 324.400716][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.401314][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 324.410561][ T24] usb 5-1: config 0 interface 248 has no altsetting 0 [ 324.437912][ T5829] usb 2-1: Product: syz [ 324.466973][ T5829] usb 2-1: Manufacturer: syz [ 324.488556][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=10.98 [ 324.508218][ T5829] usb 2-1: SerialNumber: syz [ 324.530109][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.569529][ T5829] usb 2-1: config 0 descriptor?? [ 324.580391][ T8678] binder: 8677:8678 ioctl c0306201 200000000280 returned -14 [ 324.588133][ T24] usb 5-1: Product: syz [ 324.588155][ T24] usb 5-1: Manufacturer: syz [ 324.605416][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.623497][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.637317][ T5829] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 324.639411][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.649880][ T24] usb 5-1: SerialNumber: syz [ 324.677641][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.690168][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 324.701590][ T24] usb 5-1: config 0 descriptor?? [ 324.704100][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.734712][ T10] usb 1-1: config 0 descriptor?? [ 324.806760][ T5829] imon:send_packet: packet tx failed (-71) [ 324.830724][ T5829] imon 2-1:0.0: panel buttons/knobs setup failed [ 324.960727][ T5829] rc_core: IR keymap rc-imon-pad not found [ 324.967129][ T5829] Registered IR keymap rc-empty [ 324.977568][ T5829] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 324.994593][ T5829] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 325.005261][ T5829] imon:send_packet: packet tx failed (-71) [ 325.040987][ T5829] imon 2-1:0.0: remote input dev register failed [ 325.048152][ T5829] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 325.121566][ T5829] imon 2-1:0.0: unable to initialize intf0, err 0 [ 325.128290][ T5829] imon:imon_probe: failed to initialize context! [ 325.137819][ T5829] imon 2-1:0.0: unable to register, err -19 [ 325.167476][ T5829] usb 2-1: USB disconnect, device number 48 [ 325.363587][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 325.385258][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 325.430625][ T10] usb 1-1: USB disconnect, device number 82 [ 325.704774][ T10] usb 3-1: USB disconnect, device number 45 [ 325.868436][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.901646][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.630651][ T5914] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 326.741829][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.749428][ T8706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.819709][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.827526][ T8706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.875174][ T5914] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.937352][ T5914] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 326.948481][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.966880][ T5914] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.980383][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 327.036683][ T5914] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.088956][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.126831][ T5914] usb 1-1: Product: syz [ 327.140690][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 327.179476][ T5914] usb 1-1: Manufacturer: syz [ 327.408840][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 327.416555][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 327.425407][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 327.436685][ T5914] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 327.470788][ T24] usb 5-1: USB disconnect, device number 88 [ 327.677334][ T8711] loop2: detected capacity change from 0 to 7 [ 327.709499][ T8711] Dev loop2: unable to read RDB block 7 [ 327.740403][ T8711] loop2: unable to read partition table [ 327.770302][ T8711] loop2: partition table beyond EOD, truncated [ 327.790637][ T8711] loop_reread_partitions: partition scan of loop2 (被) failed (rc=-5) [ 328.790698][ T5969] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 328.975621][ T5969] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 329.026778][ T5969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 329.067477][ T5969] usb 3-1: can't read configurations, error -61 [ 329.158590][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.179747][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.230920][ T5969] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 329.272603][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 329.408633][ T5914] usb 1-1: USB disconnect, device number 83 [ 329.440635][ T5969] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 329.469516][ T5969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 329.481083][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 329.536898][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.551692][ T10] usb 2-1: too many configurations: 192, using maximum allowed: 8 [ 329.562007][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 329.569712][ T10] usb 2-1: can't read configurations, error -71 [ 329.585776][ T5969] usb 3-1: can't read configurations, error -61 [ 329.606913][ T24] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 329.626004][ T5969] usb usb3-port1: attempt power cycle [ 329.634645][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.667031][ T24] usb 5-1: Product: syz [ 329.678463][ T24] usb 5-1: Manufacturer: syz [ 329.689885][ T24] usb 5-1: SerialNumber: syz [ 329.726111][ T8738] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 329.738890][ T24] usb 5-1: config 0 descriptor?? [ 329.758837][ T24] empeg 5-1:0.0: empeg converter detected [ 329.767915][ T24] usb 5-1: active config #0 != 1 ?? [ 329.795294][ T8738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.777'. [ 329.846585][ T8738] dummy0: entered promiscuous mode [ 329.855959][ T8738] bridge0: port 3(dummy0) entered blocking state [ 329.862536][ T8738] bridge0: port 3(dummy0) entered disabled state [ 329.879534][ T8738] dummy0: entered allmulticast mode [ 329.896558][ T8738] bridge0: port 3(dummy0) entered blocking state [ 329.903365][ T8738] bridge0: port 3(dummy0) entered forwarding state [ 329.984114][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.999987][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.113959][ T5969] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 330.170407][ T5969] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 330.186354][ T5969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 330.193501][ T8748] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 330.196191][ T5969] usb 3-1: can't read configurations, error -61 [ 330.310696][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 330.370959][ T5969] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 330.407417][ T5969] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 330.427579][ T5969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 330.445722][ T5969] usb 3-1: can't read configurations, error -61 [ 330.456616][ T5969] usb usb3-port1: unable to enumerate USB device [ 330.956227][ T8756] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.783' sets config #262151 [ 331.030574][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 331.106354][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.153812][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.221743][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 331.287712][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.305984][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.320241][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 331.350138][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.372684][ T10] usb 2-1: config 0 descriptor?? [ 331.669317][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.719136][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.800772][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 331.813089][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 331.846186][ T10] usb 2-1: USB disconnect, device number 51 [ 332.300619][ T5969] usb 5-1: USB disconnect, device number 89 [ 332.733530][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.760691][ T5969] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 332.811716][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.936468][ T5969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.974082][ T5969] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.033061][ T5969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.091407][ T5969] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 333.142824][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 333.197384][ T5969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.215703][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.256583][ T5969] usb 5-1: Product: syz [ 333.274352][ T5969] usb 5-1: Manufacturer: syz [ 333.357774][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 333.403927][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 333.460223][ T5969] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 333.510677][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 333.715228][ T24] usb 2-1: config 0 has no interfaces? [ 333.764811][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 333.774190][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.783998][ T24] usb 2-1: Product: syz [ 333.788330][ T24] usb 2-1: Manufacturer: syz [ 333.793595][ T24] usb 2-1: SerialNumber: syz [ 333.846647][ T24] usb 2-1: config 0 descriptor?? [ 333.962847][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 334.017116][ T3401] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 334.230656][ T3401] usb 3-1: Using ep0 maxpacket: 8 [ 334.244518][ T3401] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 334.262888][ T3401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.285967][ T3401] usb 3-1: Product: syz [ 334.303620][ T3401] usb 3-1: Manufacturer: syz [ 334.316151][ T3401] usb 3-1: SerialNumber: syz [ 334.343048][ T3401] usb 3-1: config 0 descriptor?? [ 334.359985][ T3401] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 334.379717][ T3401] usb 3-1: setting power ON [ 334.387554][ T3401] dvb-usb: bulk message failed: -22 (2/0) [ 334.409987][ T3401] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.421905][ T3401] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 334.432367][ T3401] usb 3-1: media controller created [ 334.478967][ T3401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.535489][ T3401] usb 3-1: selecting invalid altsetting 6 [ 334.546164][ T3401] usb 3-1: digital interface selection failed (-22) [ 334.563745][ T3401] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 334.579255][ T3401] usb 3-1: setting power OFF [ 334.586821][ T3401] dvb-usb: bulk message failed: -22 (2/0) [ 334.594751][ T3401] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 334.600612][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 334.629723][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 334.656242][ T3401] (NULL device *): no alternate interface [ 334.707342][ T3401] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 334.793966][ T10] usb 1-1: config 8 has an invalid interface number: 153 but max is 2 [ 334.804319][ T10] usb 1-1: config 8 has an invalid interface number: 227 but max is 2 [ 334.812735][ T10] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 334.822413][ T10] usb 1-1: config 8 has an invalid interface number: 5 but max is 2 [ 334.830613][ T10] usb 1-1: config 8 has no interface number 0 [ 334.840712][ T10] usb 1-1: config 8 has no interface number 1 [ 334.847049][ T10] usb 1-1: config 8 has no interface number 2 [ 334.853491][ T10] usb 1-1: config 8 interface 227 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 334.876992][ T10] usb 1-1: config 8 interface 227 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 334.888404][ T10] usb 1-1: config 8 interface 227 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 334.965778][ T10] usb 1-1: config 8 interface 227 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 334.977746][ T10] usb 1-1: config 8 interface 227 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 334.991742][ T10] usb 1-1: config 8 interface 227 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 335.003284][ T10] usb 1-1: config 8 interface 227 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 335.017027][ T10] usb 1-1: config 8 interface 5 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 335.028355][ T10] usb 1-1: config 8 interface 153 has no altsetting 0 [ 335.036767][ T10] usb 1-1: config 8 interface 227 has no altsetting 0 [ 335.044635][ T10] usb 1-1: config 8 interface 5 has no altsetting 0 [ 335.054269][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0095, bcdDevice=da.27 [ 335.063665][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.073952][ T10] usb 1-1: Product: syz [ 335.078256][ T10] usb 1-1: Manufacturer: syz [ 335.083722][ T10] usb 1-1: SerialNumber: syz [ 335.304924][ T10] option 1-1:8.153: GSM modem (1-port) converter detected [ 335.322729][ T10] option 1-1:8.227: GSM modem (1-port) converter detected [ 335.358468][ T10] option 1-1:8.5: GSM modem (1-port) converter detected [ 335.374436][ T10] usb 1-1: USB disconnect, device number 84 [ 335.383136][ T10] option 1-1:8.153: device disconnected [ 335.399218][ T10] option 1-1:8.227: device disconnected [ 335.417624][ T10] option 1-1:8.5: device disconnected [ 335.435811][ T3401] usb 5-1: USB disconnect, device number 90 [ 335.640937][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.649751][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.773637][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.783381][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.910692][ T3401] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 336.090701][ T3401] usb 5-1: Using ep0 maxpacket: 16 [ 336.097707][ T3401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.151234][ T10] usb 2-1: USB disconnect, device number 52 [ 336.173292][ T3401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.208735][ T3401] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 336.271979][ T3401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.287442][ T3401] usb 5-1: config 0 descriptor?? [ 336.422479][ T8823] netlink: 80 bytes leftover after parsing attributes in process `syz.1.803'. [ 336.435385][ T8823] netlink: 80 bytes leftover after parsing attributes in process `syz.1.803'. [ 336.716699][ T3401] usbhid 5-1:0.0: can't add hid device: -71 [ 336.765010][ T24] usb 3-1: USB disconnect, device number 50 [ 336.856128][ T3401] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.926309][ T3401] usb 5-1: USB disconnect, device number 91 [ 337.272939][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 337.450741][ T3401] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 337.458501][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 337.480029][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.492277][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.527365][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.557135][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.589917][ T24] usb 3-1: Product: syz [ 337.608741][ T24] usb 3-1: Manufacturer: syz [ 337.620593][ T5829] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 337.650791][ T24] usb 3-1: SerialNumber: syz [ 337.656879][ T3401] usb 2-1: unable to get BOS descriptor set [ 337.682760][ T3401] usb 2-1: not running at top speed; connect to a high speed hub [ 337.748812][ T3401] usb 2-1: config 1 has an invalid interface number: 22 but max is 0 [ 337.781218][ T3401] usb 2-1: config 1 has no interface number 0 [ 337.816317][ T3401] usb 2-1: config 1 interface 22 has no altsetting 0 [ 337.826087][ T5829] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.835327][ T5829] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 337.848775][ T3401] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 337.887392][ T3401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.899433][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.918550][ T3401] usb 2-1: Product: syz [ 337.923504][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 337.935720][ T3401] usb 2-1: Manufacturer: syz [ 337.940799][ T3401] usb 2-1: SerialNumber: syz [ 337.945825][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 337.965718][ T5829] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.996792][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.005658][ T5829] usb 5-1: Product: syz [ 338.009996][ T5829] usb 5-1: Manufacturer: syz [ 338.102475][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 338.109472][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 338.115426][ T5829] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.162907][ T24] usb 3-1: 0:2 : does not exist [ 338.189743][ T30] audit: type=1800 audit(1749351649.992:497): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name="nullb0" dev="devtmpfs" ino=2839 res=0 errno=0 [ 338.201442][ T24] usb 3-1: USB disconnect, device number 51 [ 338.234037][ T8832] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.248305][ T8832] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.258093][ T8832] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.267061][ T8832] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.699223][ T8854] fuse: Bad value for 'group_id' [ 338.708301][ T8854] fuse: Bad value for 'group_id' [ 338.753678][ T30] audit: type=1326 audit(1749351650.562:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.0.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x0 [ 338.839554][ T8856] netlink: 'syz.2.814': attribute type 10 has an invalid length. [ 338.885814][ T3401] usb 2-1: USB disconnect, device number 53 [ 339.401239][ T3401] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 339.630572][ T3401] usb 3-1: Using ep0 maxpacket: 16 [ 339.649569][ T30] audit: type=1326 audit(1749351651.452:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x0 [ 339.652625][ T3401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.671310][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.768844][ T3401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.785293][ T8877] syz_tun: entered allmulticast mode [ 339.792606][ T3401] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 339.810352][ T3401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.835001][ T3401] usb 3-1: config 0 descriptor?? [ 340.336238][ T5924] usb 5-1: USB disconnect, device number 92 [ 340.339129][ T3401] usbhid 3-1:0.0: can't add hid device: -71 [ 340.409341][ T3401] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.451080][ T3401] usb 3-1: USB disconnect, device number 52 [ 340.491979][ T8877] syz_tun: left allmulticast mode [ 340.703819][ T8886] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 340.933844][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 341.428951][ T5914] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 342.193058][ T5914] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.210066][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.220067][ T5914] usb 1-1: Product: syz [ 342.230141][ T5914] usb 1-1: Manufacturer: syz [ 342.242793][ T5914] usb 1-1: SerialNumber: syz [ 342.277473][ T5914] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.317089][ T5924] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.434721][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.484358][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.790220][ T5829] usb 1-1: USB disconnect, device number 85 [ 343.060994][ T5914] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 343.220982][ T3401] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 343.239591][ T5914] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.270563][ T5914] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 343.287047][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 343.315460][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.334758][ T5914] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 343.355686][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 343.377630][ T5914] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.390533][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.399958][ T5914] usb 5-1: Product: syz [ 343.405262][ T5914] usb 5-1: Manufacturer: syz [ 343.418598][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 343.425379][ T3401] usb 2-1: Using ep0 maxpacket: 8 [ 343.438345][ T3401] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.440683][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 343.448731][ T3401] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.457703][ T5924] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 343.484257][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 343.489572][ T5914] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 343.495378][ T3401] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.514750][ T5924] ath9k_htc: Failed to initialize the device [ 343.521145][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 343.529264][ T10] usb 3-1: config 0 has no interface number 0 [ 343.545942][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 343.562333][ T5829] usb 1-1: ath9k_htc: USB layer deinitialized [ 343.585352][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 343.585585][ T3401] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.622721][ T3401] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.623201][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.635758][ T3401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.642822][ T8937] netlink: 104 bytes leftover after parsing attributes in process `syz.3.835'. [ 343.658717][ T8939] loop7: detected capacity change from 0 to 7 [ 343.663643][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 343.676736][ T10] usb 3-1: Product: syz [ 343.682582][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.835'. [ 343.686351][ T8939] Dev loop7: unable to read RDB block 7 [ 343.702634][ T10] usb 3-1: Manufacturer: syz [ 343.707559][ T10] usb 3-1: SerialNumber: syz [ 343.718722][ T8939] loop7: AHDI p1 p2 [ 343.726837][ T10] usb 3-1: config 0 descriptor?? [ 343.732349][ T8939] loop7: partition table partially beyond EOD, truncated [ 343.744649][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.755911][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.792820][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 343.805917][ T8939] loop7: p1 start 1702000233 is beyond EOD, truncated [ 343.815246][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 343.895951][ T3401] usb 2-1: GET_CAPABILITIES returned 0 [ 343.904602][ T3401] usbtmc 2-1:16.0: can't read capabilities [ 343.992262][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.007837][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.081597][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 344.169180][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 344.178243][ T10] em28xx 3-1:0.89: board has no eeprom [ 344.189210][ T5829] usb 2-1: USB disconnect, device number 54 [ 344.243095][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 344.254181][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 344.895498][ T5914] em28xx 3-1:0.89: Registering V4L2 extension [ 344.917042][ T10] usb 3-1: USB disconnect, device number 53 [ 344.925167][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 345.237692][ T5914] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 345.248209][ T5914] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 345.269234][ T5914] em28xx 3-1:0.89: No AC97 audio processor [ 345.759408][ T5914] usb 3-1: Decoder not found [ 345.786734][ T5914] em28xx 3-1:0.89: failed to create media graph [ 345.798425][ T5914] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 345.848322][ T5914] em28xx 3-1:0.89: Registering snapshot button... [ 345.856922][ T7533] usb 5-1: USB disconnect, device number 93 [ 345.898524][ T5914] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input38 [ 345.918918][ T5914] em28xx 3-1:0.89: Remote control support is not available for this card. [ 345.975871][ T10] em28xx 3-1:0.89: Closing input extension [ 345.994127][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 346.262542][ T8959] loop6: detected capacity change from 0 to 7 [ 346.285417][ T10] em28xx 3-1:0.89: Freeing device [ 346.288866][ T8959] Dev loop6: unable to read RDB block 7 [ 346.310227][ T8959] loop6: AHDI p1 p2 [ 346.316800][ T8959] loop6: partition table partially beyond EOD, truncated [ 346.326462][ T8959] loop6: p1 start 926365495 is beyond EOD, truncated [ 346.670563][ T3401] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 346.830599][ T3401] usb 2-1: device descriptor read/64, error -71 [ 346.870269][ T30] audit: type=1326 audit(1749351658.632:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 347.070615][ T3401] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 347.132142][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.188609][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.230551][ T3401] usb 2-1: device descriptor read/64, error -71 [ 347.348244][ T3401] usb usb2-port1: attempt power cycle [ 347.450704][ T5829] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 347.612469][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.648117][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.688992][ T5829] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 347.698254][ T3401] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 347.711025][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.754850][ T3401] usb 2-1: device descriptor read/8, error -71 [ 347.770997][ T5829] usb 3-1: config 0 descriptor?? [ 347.810932][ T8983] netlink: 'syz.4.845': attribute type 21 has an invalid length. [ 347.818726][ T8983] netlink: 128 bytes leftover after parsing attributes in process `syz.4.845'. [ 347.860892][ T8983] netlink: 'syz.4.845': attribute type 4 has an invalid length. [ 347.868954][ T8983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.845'. [ 347.978882][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.849'. [ 347.992217][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.849'. [ 348.003761][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.849'. [ 348.047774][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.056470][ T3401] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 348.085330][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.199556][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.849'. [ 348.218993][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.3.849'. [ 348.258953][ T3401] usb 2-1: device descriptor read/8, error -71 [ 348.405710][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 348.415036][ T3401] usb usb2-port1: unable to enumerate USB device [ 348.431439][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.616985][ T5829] usb 3-1: USB disconnect, device number 54 [ 349.461127][ T5829] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 349.610530][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 349.621614][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.640676][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.654716][ T8958] delete_channel: no stack [ 349.683626][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.728004][ T5829] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 349.745306][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.791032][ T5829] usb 3-1: config 0 descriptor?? [ 350.247724][ T5829] shield 0003:0955:7214.0012: unknown main item tag 0x1 [ 350.294760][ T5829] shield 0003:0955:7214.0012: item fetching failed at offset 1/5 [ 350.351211][ T5829] shield 0003:0955:7214.0012: Parse failed [ 350.387097][ T5829] shield 0003:0955:7214.0012: probe with driver shield failed with error -22 [ 350.444326][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.504367][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.509987][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.568473][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.569230][ T5924] usb 3-1: USB disconnect, device number 55 [ 350.585134][ T7533] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 350.614254][ T5914] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 350.755099][ T7533] usb 5-1: config 180 has an invalid descriptor of length 0, skipping remainder of the config [ 350.782944][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 350.790592][ T7533] usb 5-1: config 180 has 0 interfaces, different from the descriptor's value: 14 [ 350.821274][ T7533] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 350.834302][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.853609][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.870479][ T7533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.889411][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.914194][ T5914] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.933664][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.953405][ T5914] usb 2-1: config 0 descriptor?? [ 351.153392][ T5924] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 351.253972][ T9034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.269974][ T9034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.327398][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.348872][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.348927][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 351.348980][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.356400][ T5924] usb 3-1: config 0 descriptor?? [ 351.508975][ T5914] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 351.517328][ T7533] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 351.528269][ T5914] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 351.536654][ T5914] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 351.547259][ T5914] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 351.557350][ T5914] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 351.568988][ T5914] microsoft 0003:045E:07DA.0013: no inputs found [ 351.575830][ T5914] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 351.690573][ T7533] usb 1-1: Using ep0 maxpacket: 8 [ 351.698743][ T7533] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 351.707340][ T7533] usb 1-1: config 179 has no interface number 0 [ 351.713739][ T7533] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 351.724997][ T7533] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 351.736425][ T7533] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.747757][ T7533] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 351.750599][ T24] usb 2-1: USB disconnect, device number 59 [ 351.759530][ T7533] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 351.783393][ T7533] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 351.793234][ T7533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.817555][ T9035] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 352.040193][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 352.059855][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.088257][ T7533] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input40 [ 352.101482][ T5924] usb 3-1: USB disconnect, device number 56 [ 352.159913][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.171652][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.183826][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.195114][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.206849][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.218625][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.255817][ T24] usb 1-1: USB disconnect, device number 86 [ 352.255876][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.271064][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 352.275836][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 352.548486][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.594524][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.638248][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.647740][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.178869][ T5924] usb 5-1: USB disconnect, device number 94 [ 353.380828][ T7533] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 353.546844][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.560993][ T7533] usb 2-1: Using ep0 maxpacket: 16 [ 353.562088][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.578785][ T7533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.581517][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.611317][ T7533] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 353.613061][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.629886][ T7533] usb 2-1: can't read configurations, error -22 [ 353.775376][ T7533] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 353.844892][ T9071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.945055][ T7533] usb 2-1: Using ep0 maxpacket: 16 [ 353.967919][ T7533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.980288][ T7533] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 353.996635][ T7533] usb 2-1: can't read configurations, error -22 [ 354.003967][ T7533] usb usb2-port1: attempt power cycle [ 354.230597][ T5924] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 354.334907][ T9082] loop6: detected capacity change from 0 to 7 [ 354.351361][ T7533] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 354.359745][ T9082] Dev loop6: unable to read RDB block 7 [ 354.376961][ T9082] loop6: AHDI p1 p2 [ 354.382984][ T7533] usb 2-1: Using ep0 maxpacket: 16 [ 354.395866][ T7533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.404448][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 354.413679][ T9082] loop6: partition table partially beyond EOD, truncated [ 354.418366][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.440690][ T7533] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 354.445956][ T9082] loop6: p1 start 926365495 is beyond EOD, truncated [ 354.456753][ T7533] usb 2-1: can't read configurations, error -22 [ 354.464460][ T5924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.479360][ T5924] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 354.513857][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.547646][ T5924] usb 5-1: config 0 descriptor?? [ 354.600807][ T7533] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 354.660634][ T7533] usb 2-1: Using ep0 maxpacket: 16 [ 354.677640][ T7533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.677804][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.721988][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.724169][ T7533] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 354.738947][ T7533] usb 2-1: can't read configurations, error -22 [ 354.747698][ T7533] usb usb2-port1: unable to enumerate USB device [ 354.816337][ T9086] __nla_validate_parse: 4 callbacks suppressed [ 354.816356][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 354.834774][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.880'. [ 355.350821][ T7533] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 355.403248][ T9102] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.511017][ T7533] usb 1-1: Using ep0 maxpacket: 16 [ 355.518435][ T7533] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 355.527444][ T7533] usb 1-1: config 0 has no interface number 0 [ 355.548656][ T7533] usb 1-1: config 0 interface 190 has no altsetting 0 [ 355.561728][ T7533] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=cf.45 [ 355.571030][ T7533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.579071][ T7533] usb 1-1: Product: syz [ 355.614558][ T7533] usb 1-1: Manufacturer: syz [ 355.619364][ T7533] usb 1-1: SerialNumber: syz [ 355.651772][ T7533] usb 1-1: config 0 descriptor?? [ 356.530630][ T24] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 356.607664][ T9117] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in; [ 356.607664][ T9117] program syz.2.888 not setting count and/or reply_len properly [ 356.684194][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 356.704482][ T24] usb 2-1: config 1 has an invalid interface number: 74 but max is 0 [ 356.733704][ T24] usb 2-1: config 1 has no interface number 0 [ 356.745691][ T24] usb 2-1: config 1 interface 74 has no altsetting 0 [ 356.756030][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be [ 356.775871][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.786128][ T24] usb 2-1: Product: syz [ 356.790613][ T24] usb 2-1: Manufacturer: syz [ 356.795366][ T24] usb 2-1: SerialNumber: syz [ 357.066825][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.099216][ T9124] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.889'. [ 357.118437][ T9124] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.889'. [ 357.121716][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.167116][ T3401] usb 5-1: USB disconnect, device number 95 [ 357.293142][ T9128] loop6: detected capacity change from 0 to 7 [ 357.315003][ T9128] Dev loop6: unable to read RDB block 7 [ 357.325470][ T9128] loop6: AHDI p1 p2 [ 357.343740][ T9128] loop6: partition table partially beyond EOD, truncated [ 357.353376][ T9128] loop6: p1 start 926365495 is beyond EOD, truncated [ 357.573503][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.805931][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.090010][ T24] usb 2-1: unknown interface protocol 0x55, assuming v1 [ 358.135562][ T24] usb 2-1: cannot find UAC_HEADER [ 358.266402][ T7533] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.190/input/input41 [ 358.331848][ T24] snd-usb-audio 2-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 358.360120][ T5193] bcm5974 1-1:0.190: could not read from device [ 358.380054][ T24] usb 2-1: USB disconnect, device number 64 [ 358.394753][ T7533] usb 1-1: USB disconnect, device number 87 [ 358.515343][ T9139] usb usb8: usbfs: process 9139 (syz.4.894) did not claim interface 0 before use [ 358.870710][ T7533] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 359.074823][ T7533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.101377][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 359.118106][ T7533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.191250][ T7533] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 359.207142][ T7533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.221179][ T9160] xt_socket: unknown flags 0xd0 [ 359.236179][ T7533] usb 1-1: config 0 descriptor?? [ 359.259519][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 359.270977][ T9162] vcan0: entered promiscuous mode [ 359.277826][ T9162] vcan0: entered allmulticast mode [ 359.283246][ T24] usb 5-1: device descriptor read/64, error -71 [ 359.318403][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 359.590561][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 359.758305][ T24] usb 5-1: device descriptor read/64, error -71 [ 359.881008][ T24] usb usb5-port1: attempt power cycle [ 359.888927][ T7533] usbhid 1-1:0.0: can't add hid device: -71 [ 359.908640][ T7533] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 359.955504][ T7533] usb 1-1: USB disconnect, device number 88 [ 360.221603][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 360.252494][ T24] usb 5-1: device descriptor read/8, error -71 [ 360.340732][ T5848] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 360.500678][ T3401] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 360.508936][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 360.525761][ T9187] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9187 comm: syz.2.907) [ 360.543622][ T24] usb 5-1: device descriptor read/8, error -71 [ 360.550123][ T30] audit: type=1800 audit(1749351672.352:501): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.907" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29854 res=0 errno=0 [ 360.581734][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.730101][ T3401] usb 2-1: device descriptor read/64, error -71 [ 360.736503][ T24] usb usb5-port1: unable to enumerate USB device [ 360.774183][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 360.783986][ T9194] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 360.990754][ T3401] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 361.190679][ T3401] usb 2-1: device descriptor read/64, error -71 [ 361.300878][ T3401] usb usb2-port1: attempt power cycle [ 361.670742][ T3401] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 361.745557][ T3401] usb 2-1: device descriptor read/8, error -71 [ 361.799447][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 362.000752][ T3401] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 362.043862][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.057226][ T3401] usb 2-1: device descriptor read/8, error -71 [ 362.069415][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.080353][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.104120][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.115586][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.123464][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.134452][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.150340][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.162000][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.169592][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.179700][ T3401] usb usb2-port1: unable to enumerate USB device [ 362.189536][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.190625][ T7533] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 362.223393][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.231875][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.239309][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.250275][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.258697][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.270759][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.361645][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.373882][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.383895][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.392814][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.401865][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.410047][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.419812][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.429640][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.438168][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.442901][ T7533] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 362.458105][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.459058][ T7533] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.477619][ T7533] usb 1-1: config 0 has no interface number 0 [ 362.484201][ T7533] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64 [ 362.495574][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.495989][ T7533] usb 1-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.516657][ T7533] usb 1-1: config 0 interface 11 has no altsetting 0 [ 362.523654][ T7533] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 362.523757][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.543630][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.552282][ T7533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.552303][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.572591][ T7533] usb 1-1: config 0 descriptor?? [ 362.579238][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.587407][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.588639][ T7533] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 362.594865][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.594895][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.619588][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.620130][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 7 [ 362.634898][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.634930][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.634957][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.662039][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.662454][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 362.670103][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.690806][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 362.692443][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.708307][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 362.708578][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.724797][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.728199][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 362.740228][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.740319][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 362.771242][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 362.789648][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.835514][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.850614][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.859676][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.877791][ T7533] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 362.880515][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.911192][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.918652][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.922720][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 362.955768][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.977174][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 362.985716][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.985766][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.985793][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.985819][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.985846][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 362.985872][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.038826][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 363.067510][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 363.081405][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 363.097117][ T7533] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 363.107323][ T7533] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 363.109480][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.127395][ T7533] usb 1-1: USB disconnect, device number 89 [ 363.153143][ T7533] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 363.160045][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.171842][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.179276][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.187250][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.196325][ T7533] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 363.205773][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205804][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205830][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205855][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205880][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205957][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.205981][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206005][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206030][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206055][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206081][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206107][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206133][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206158][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206184][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206209][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.206235][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.215318][ T7533] keyspan 1-1:0.11: device disconnected [ 363.333393][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.383246][ T5926] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 363.514798][ T5926] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 363.538459][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 363.800580][ T7533] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 363.962273][ T7533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.979939][ T7533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.990387][ T5914] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 364.016206][ T7533] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 364.037224][ T7533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.063373][ T7533] usb 1-1: config 0 descriptor?? [ 364.100641][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 364.150601][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 364.167095][ T5914] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.184861][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.202267][ T5914] usb 5-1: Product: syz [ 364.210100][ T5914] usb 5-1: Manufacturer: syz [ 364.221282][ T5914] usb 5-1: SerialNumber: syz [ 364.242177][ T5914] usb 5-1: config 0 descriptor?? [ 364.289888][ T9] usb 3-1: config 0 has no interfaces? [ 364.299848][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 364.319239][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.337158][ T9] usb 3-1: Product: syz [ 364.348605][ T9] usb 3-1: Manufacturer: syz [ 364.359462][ T9] usb 3-1: SerialNumber: syz [ 364.381446][ T9] usb 3-1: config 0 descriptor?? [ 364.467771][ T5914] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.697280][ T7533] usbhid 1-1:0.0: can't add hid device: -71 [ 364.707659][ T7533] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 364.738317][ T7533] usb 1-1: USB disconnect, device number 90 [ 365.620774][ T7533] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 365.780698][ T7533] usb 1-1: Using ep0 maxpacket: 32 [ 365.798553][ T9242] loop2: detected capacity change from 0 to 7 [ 365.809139][ T9242] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 365.820707][ T9242] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 365.832795][ T9242] Dev loop2: unable to read RDB block 7 [ 365.838442][ T9242] loop2: unable to read partition table [ 365.846754][ T9242] loop2: partition table beyond EOD, truncated [ 365.855348][ T9242] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 365.873768][ T7533] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.893059][ T7533] usb 1-1: too many configurations: 105, using maximum allowed: 8 [ 365.917202][ T7533] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 365.925423][ T7533] usb 1-1: can't read configurations, error -71 [ 366.479894][ T30] audit: type=1326 audit(1749351678.282:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.502147][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.515969][ T30] audit: type=1326 audit(1749351678.282:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.538185][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.557822][ T30] audit: type=1326 audit(1749351678.302:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.593219][ T30] audit: type=1326 audit(1749351678.302:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.669312][ T30] audit: type=1326 audit(1749351678.302:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.722471][ T30] audit: type=1326 audit(1749351678.302:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.782893][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.807368][ T30] audit: type=1326 audit(1749351678.302:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.830386][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.855617][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.870408][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.878775][ T30] audit: type=1326 audit(1749351678.302:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 366.916377][ T5926] usb 3-1: USB disconnect, device number 57 [ 366.971804][ T30] audit: type=1326 audit(1749351678.302:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 367.023510][ T30] audit: type=1326 audit(1749351678.302:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f806e58e929 code=0x7ffc0000 [ 367.200875][ T5829] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 367.228423][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.247515][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 367.257153][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 367.275342][ T9260] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 367.330804][ T5926] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 367.356551][ T5914] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 367.362798][ T5829] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 367.380270][ T5829] usb 2-1: config 150 has no interface number 0 [ 367.391290][ T5914] usb 5-1: USB disconnect, device number 100 [ 367.393550][ T5829] usb 2-1: config 150 interface 204 has no altsetting 0 [ 367.427862][ T5829] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 367.437422][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.445968][ T5829] usb 2-1: Product: syz [ 367.450174][ T5829] usb 2-1: Manufacturer: syz [ 367.455224][ T5829] usb 2-1: SerialNumber: syz [ 367.470553][ T5926] usb 3-1: device descriptor read/64, error -71 [ 367.676849][ T5829] usb 2-1: USB disconnect, device number 69 [ 367.710738][ T5926] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 367.841009][ T5926] usb 3-1: device descriptor read/64, error -71 [ 367.951765][ T5926] usb usb3-port1: attempt power cycle [ 368.150741][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 368.277920][ T9274] netlink: 428 bytes leftover after parsing attributes in process `syz.1.939'. [ 368.288297][ T9274] netlink: 'syz.1.939': attribute type 2 has an invalid length. [ 368.296264][ T5926] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 368.296607][ T9274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.939'. [ 368.322495][ T5926] usb 3-1: device descriptor read/8, error -71 [ 368.330556][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 368.337375][ T9] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 368.345636][ T5914] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 368.353398][ T9] usb 5-1: config 0 has no interface number 0 [ 368.363940][ T9] usb 5-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 368.374349][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.382702][ T9] usb 5-1: Product: syz [ 368.387629][ T9] usb 5-1: Manufacturer: syz [ 368.395245][ T9] usb 5-1: SerialNumber: syz [ 368.405959][ T9] usb 5-1: config 0 descriptor?? [ 368.415069][ T9] usb-storage 5-1:0.236: USB Mass Storage device detected [ 368.511529][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 368.520381][ T5914] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 368.542369][ T5914] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 368.553242][ T5914] usb 1-1: config 4 has no interface number 0 [ 368.559425][ T5914] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.562239][ T5926] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 368.574122][ T5914] usb 1-1: config 4 interface 51 has no altsetting 0 [ 368.593423][ T5914] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 368.602278][ T5926] usb 3-1: device descriptor read/8, error -71 [ 368.605306][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.616979][ T5914] usb 1-1: Product: syz [ 368.621822][ T5914] usb 1-1: Manufacturer: syz [ 368.632904][ T5914] usb 1-1: SerialNumber: syz [ 368.645898][ T5914] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 368.710940][ T5926] usb usb3-port1: unable to enumerate USB device [ 368.924951][ T9282] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 369.330227][ T9293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 369.480646][ T3401] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 369.663137][ T3401] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.671522][ T3401] usb 2-1: config 0 has no interface number 0 [ 369.690810][ T3401] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.700243][ T3401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.708792][ T3401] usb 2-1: Product: syz [ 369.714567][ T3401] usb 2-1: Manufacturer: syz [ 369.722227][ T3401] usb 2-1: SerialNumber: syz [ 369.732282][ T3401] usb 2-1: config 0 descriptor?? [ 369.955040][ T3401] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 369.985082][ T3401] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 370.011625][ T3401] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 370.019999][ T3401] usb 2-1: media controller created [ 370.091388][ T3401] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.253147][ T3401] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 370.354807][ T3401] usb 2-1: USB disconnect, device number 70 [ 370.625112][ T9315] veth1_to_batadv: mtu greater than device maximum [ 371.131332][ T7533] usb 1-1: USB disconnect, device number 93 [ 371.189547][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.275365][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.327353][ T5914] usb 5-1: USB disconnect, device number 101 [ 371.516202][ T9318] kvm: user requested TSC rate below hardware speed [ 371.534507][ T9328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.830664][ T5829] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 371.993318][ T5914] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 372.012787][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 372.027203][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 372.040248][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 372.063658][ T5829] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 372.080491][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.088767][ T5829] usb 5-1: Product: syz [ 372.097338][ T5829] usb 5-1: Manufacturer: syz [ 372.103202][ T5829] usb 5-1: SerialNumber: syz [ 372.115137][ T5829] usb 5-1: config 0 descriptor?? [ 372.120985][ T9326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.128327][ T9326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.146652][ T5829] usb 5-1: ucan: probing device on interface #0 [ 372.160713][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 372.169783][ T5914] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 372.210083][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 372.219401][ T5914] usb 2-1: Product: syz [ 372.226984][ T5914] usb 2-1: Manufacturer: syz [ 372.237990][ T5914] usb 2-1: SerialNumber: syz [ 372.259188][ T5914] usb 2-1: config 0 descriptor?? [ 372.359637][ T7533] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 372.404610][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.566146][ T3401] usb 2-1: USB disconnect, device number 71 [ 372.573682][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.608374][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.662161][ T9] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 372.695199][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.710574][ T7533] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.818141][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.826693][ T7533] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 372.838251][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.846823][ T7533] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.875495][ T7533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.929953][ T5829] usb 5-1: ucan: could not read protocol version, ret=-71 [ 372.948225][ T9349] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.964777][ T7533] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.976254][ T5829] usb 5-1: ucan: probe failed; try to update the device firmware [ 373.012128][ T9] usb 1-1: config 0 has no interfaces? [ 373.026112][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 373.053293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.191252][ T9] usb 1-1: Product: syz [ 373.205154][ T9] usb 1-1: Manufacturer: syz [ 373.215879][ T9] usb 1-1: SerialNumber: syz [ 373.334955][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.351017][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.359292][ T9] usb 1-1: config 0 descriptor?? [ 373.375200][ T5829] usb 5-1: USB disconnect, device number 102 [ 373.723124][ T9357] program syz.0.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.803147][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.824030][ T5829] usb 3-1: USB disconnect, device number 62 [ 373.882865][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.319748][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 374.573541][ T9382] syzkaller1: entered promiscuous mode [ 374.622511][ T9382] syzkaller1: entered allmulticast mode [ 374.625002][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.657783][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.768086][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 375.410546][ T7533] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 375.427538][ T3401] usb 1-1: USB disconnect, device number 94 [ 375.545665][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.592490][ T7533] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.626634][ T7533] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 375.660266][ T7533] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.689032][ T7533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 375.720583][ T7533] usb 5-1: SerialNumber: syz [ 375.738881][ T7533] cdc_ether 5-1:1.0: skipping garbage [ 375.746834][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.755344][ T7533] usb 5-1: bad CDC descriptors [ 375.773684][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.845158][ T3401] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 376.000081][ T9409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.000243][ T9409] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 376.032126][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.977'. [ 376.041290][ T3401] usb 1-1: Using ep0 maxpacket: 16 [ 376.052188][ T9417] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 376.074376][ T3401] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 376.118829][ T3401] usb 1-1: config 0 has no interface number 0 [ 376.124014][ T9409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.125946][ T3401] usb 1-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 376.132796][ T9409] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 376.159113][ T9409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.166179][ T9409] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 376.174724][ T9409] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 376.194840][ T9409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.198635][ T3401] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 376.212597][ T9409] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 376.224588][ T9409] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.238868][ T9409] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 376.247567][ T3401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.258965][ T3401] usb 1-1: Product: syz [ 376.263977][ T3401] usb 1-1: Manufacturer: syz [ 376.268912][ T3401] usb 1-1: SerialNumber: syz [ 376.295475][ T3401] usb 1-1: config 0 descriptor?? [ 376.304042][ T9401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 376.314685][ T3401] kvaser_usb 1-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 376.340805][ T7533] usb 5-1: USB disconnect, device number 103 [ 376.513274][ T9] usb 1-1: USB disconnect, device number 95 [ 377.231937][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.264200][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.288006][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.313153][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.430711][ T3401] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 377.612585][ T3401] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.633335][ T3401] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.657865][ T3401] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 377.668119][ T3401] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.704009][ T9455] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 377.748986][ T3401] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 377.769439][ T3401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.798291][ T3401] usb 1-1: Product: syz [ 377.817122][ T3401] usb 1-1: Manufacturer: syz [ 377.826057][ T3401] usb 1-1: SerialNumber: syz [ 377.856697][ T3401] cdc_ncm 1-1:1.0: skipping garbage [ 377.920633][ T5158] Bluetooth: hci0: command 0x0406 tx timeout [ 378.081683][ T5829] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 378.170990][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 378.240630][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 378.241098][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 378.246717][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 378.280887][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 378.302883][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 378.334442][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 378.350737][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 378.386746][ T3401] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 378.404286][ T3401] cdc_ncm 1-1:1.0: bind() failure [ 378.426904][ T5829] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.447901][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.472769][ T3401] usb 1-1: USB disconnect, device number 96 [ 378.540569][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 378.548500][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.567699][ T5829] usb 2-1: Product: syz [ 378.572864][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.607097][ T5829] usb 2-1: Manufacturer: syz [ 378.637821][ T5829] usb 2-1: SerialNumber: syz [ 378.642880][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 378.670616][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.701148][ T9475] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 378.747032][ T9] usb 5-1: config 0 descriptor?? [ 378.838969][ T5829] usb 2-1: config 0 descriptor?? [ 378.956831][ T5829] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.982041][ T5829] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 379.060553][ T5914] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 379.245411][ T9463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.254023][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 379.279908][ T9463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.293879][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.356281][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 379.383107][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 379.389797][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.431513][ T9] usb 5-1: USB disconnect, device number 104 [ 379.445034][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 379.674990][ T5829] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 379.685813][ T9486] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 379.720554][ T5914] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 379.764556][ T5829] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 379.773339][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.795218][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.807023][ T5914] usb 3-1: Product: syz [ 379.815878][ T5914] usb 3-1: Manufacturer: syz [ 379.834479][ T5914] usb 3-1: SerialNumber: syz [ 379.840077][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.871719][ T5914] usb 3-1: config 0 descriptor?? [ 379.884847][ T9475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.920716][ T3401] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 380.001648][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 380.180619][ T3401] usb 1-1: Using ep0 maxpacket: 16 [ 380.260832][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 380.285348][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 380.325985][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 380.340566][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 380.341045][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 380.389292][ T5829] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 380.397036][ T5829] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 381.381301][ T5829] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 381.389709][ T5829] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 381.398545][ T5829] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 381.520176][ T5829] usb 2-1: USB disconnect, device number 72 [ 382.210342][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 382.288601][ T5914] usb 3-1: USB disconnect, device number 63 [ 382.400817][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 382.452128][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.608059][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.726914][ T3401] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.862739][ T3401] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 382.951526][ T3401] usb 1-1: can't read configurations, error -71 [ 382.995500][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 383.512748][ T9526] loop8: detected capacity change from 0 to 1 [ 383.524644][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.533301][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.543127][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.552598][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.561275][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.575963][ T9526] ldm_validate_partition_table(): Disk read failed. [ 383.576814][ T9527] futex_wake_op: syz.4.1004 tries to shift op by -33; fix this program [ 383.586884][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.602913][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.612788][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.622171][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.649574][ T9526] Dev loop8: unable to read RDB block 0 [ 383.657965][ T9526] Buffer I/O error on dev loop8, logical block 0, async page read [ 383.669275][ T9526] loop8: unable to read partition table [ 383.677485][ T9526] loop8: partition table beyond EOD, truncated [ 383.696589][ T9526] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 383.850561][ T3401] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 384.000538][ T3401] usb 1-1: Using ep0 maxpacket: 32 [ 384.020392][ T3401] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 384.048137][ T3401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 384.060171][ T5969] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 384.088697][ T3401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 384.098572][ T3401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 384.109836][ T3401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 384.124351][ T3401] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 384.134674][ T3401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.142981][ T3401] usb 1-1: Product: syz [ 384.147551][ T3401] usb 1-1: Manufacturer: syz [ 384.153126][ T3401] usb 1-1: SerialNumber: syz [ 384.165272][ T3401] usb 1-1: config 0 descriptor?? [ 384.232485][ T5969] usb 3-1: config 0 has an invalid interface number: 220 but max is 0 [ 384.251623][ T5969] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 384.268947][ T5969] usb 3-1: config 0 has no interface number 0 [ 384.276675][ T5969] usb 3-1: too many endpoints for config 0 interface 220 altsetting 240: 214, using maximum allowed: 30 [ 384.293968][ T5969] usb 3-1: config 0 interface 220 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 214 [ 384.311908][ T5969] usb 3-1: config 0 interface 220 has no altsetting 0 [ 384.326290][ T5969] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 384.330814][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.341921][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.343219][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.360538][ T5969] usb 3-1: Product: syz [ 384.368786][ T5969] usb 3-1: Manufacturer: syz [ 384.380565][ T5969] usb 3-1: SerialNumber: syz [ 384.389982][ T5969] usb 3-1: config 0 descriptor?? [ 384.583596][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 384.589719][ T3401] input input42: Device does not respond to id packet M [ 384.598010][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 384.609944][ T3401] input input42: Device does not respond to id packet P [ 384.629252][ T3401] input input42: Device does not respond to id packet B [ 384.751560][ T5914] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 384.901774][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 384.909737][ T3401] input input42: Device does not respond to id packet N [ 384.912347][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 384.917701][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 384.952408][ T5914] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 384.952798][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 384.968809][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 384.980026][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.002594][ T3401] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 385.009531][ T5914] usb 5-1: config 0 descriptor?? [ 385.030543][ T3401] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 385.076518][ T3401] usb 1-1: USB disconnect, device number 98 [ 385.233612][ T5914] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 385.238276][ T5969] mvusb_mdio 3-1:0.220: probe with driver mvusb_mdio failed with error -5 [ 385.296748][ T5969] usb 3-1: USB disconnect, device number 64 [ 386.004530][ T9551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 386.014015][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 386.178786][ T9] usb 2-1: config 0 has no interfaces? [ 386.200592][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.211197][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.219244][ T9] usb 2-1: Product: syz [ 386.233725][ T9] usb 2-1: Manufacturer: syz [ 386.238370][ T9] usb 2-1: SerialNumber: syz [ 386.258786][ T9] usb 2-1: config 0 descriptor?? [ 386.544961][ T9557] fuse: Unknown parameter '}' [ 386.573232][ T9564] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1018'. [ 387.057356][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.066375][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.076249][ T3401] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 387.089914][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.100318][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.118442][ T5914] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 387.188143][ T5914] asix 5-1:0.0: probe with driver asix failed with error -71 [ 387.236523][ T5914] usb 5-1: USB disconnect, device number 105 [ 387.273637][ T3401] usb 1-1: config 0 has no interfaces? [ 387.284900][ T3401] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.297870][ T3401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.391313][ T3401] usb 1-1: Product: syz [ 387.420622][ T3401] usb 1-1: Manufacturer: syz [ 387.425377][ T3401] usb 1-1: SerialNumber: syz [ 387.460725][ T3401] usb 1-1: config 0 descriptor?? [ 387.708159][ T9569] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 387.733906][ T9569] netlink: 'syz.0.1019': attribute type 2 has an invalid length. [ 387.901012][ T3401] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 388.071328][ T3401] usb 3-1: no configurations [ 388.080114][ T3401] usb 3-1: can't read configurations, error -22 [ 388.080539][ T5914] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 388.240944][ T3401] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 388.260688][ T5914] usb 5-1: Invalid ep0 maxpacket: 32 [ 388.390598][ T5914] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 388.401530][ T3401] usb 3-1: no configurations [ 388.406208][ T3401] usb 3-1: can't read configurations, error -22 [ 388.419233][ T3401] usb usb3-port1: attempt power cycle [ 388.570956][ T5914] usb 5-1: Invalid ep0 maxpacket: 32 [ 388.577562][ T5914] usb usb5-port1: attempt power cycle [ 388.817120][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.826145][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.848048][ T9587] kvm: user requested TSC rate below hardware speed [ 388.986795][ T3401] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 389.022393][ T3401] usb 3-1: no configurations [ 389.027124][ T3401] usb 3-1: can't read configurations, error -22 [ 389.040780][ T5914] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 389.081406][ T5914] usb 5-1: Invalid ep0 maxpacket: 32 [ 389.165234][ T3401] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 389.186341][ T7533] usb 2-1: USB disconnect, device number 73 [ 389.290836][ T5914] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 389.336880][ T3401] usb 3-1: no configurations [ 389.343708][ T3401] usb 3-1: can't read configurations, error -22 [ 389.351360][ T5914] usb 5-1: Invalid ep0 maxpacket: 32 [ 389.357168][ T5914] usb usb5-port1: unable to enumerate USB device [ 389.385071][ T3401] usb usb3-port1: unable to enumerate USB device [ 389.786505][ T5914] usb 1-1: USB disconnect, device number 99 [ 389.947867][ T9596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1027'. [ 390.250687][ T3401] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 390.405332][ T3401] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 390.416645][ T3401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.427818][ T3401] usb 1-1: config 0 descriptor?? [ 390.438167][ T3401] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 390.857687][ T3401] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 390.929375][ T9606] veth1_to_batadv: mtu greater than device maximum [ 391.049948][ T9608] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1033'. [ 391.244754][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 391.413379][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 391.442557][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 391.478215][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 391.567519][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 391.644923][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.799960][ T24] usb 5-1: Product: syz [ 391.804359][ T24] usb 5-1: Manufacturer: syz [ 391.812615][ T24] usb 5-1: SerialNumber: syz [ 391.898700][ T24] usb 5-1: config 0 descriptor?? [ 391.906757][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 391.916765][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 391.926936][ T3401] gspca_cpia1: usb_control_msg 01, error -110 [ 391.935833][ T3401] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 392.347601][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 392.357715][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 392.376438][ T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 392.420748][ T24] em28xx 5-1:0.0: No AC97 audio processor [ 392.486718][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.500096][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.556470][ T9628] FAULT_INJECTION: forcing a failure. [ 392.556470][ T9628] name failslab, interval 1, probability 0, space 0, times 0 [ 392.570763][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.1.1037 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 392.570783][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.570800][ T9628] Call Trace: [ 392.570807][ T9628] [ 392.570814][ T9628] dump_stack_lvl+0x189/0x250 [ 392.570841][ T9628] ? __pfx____ratelimit+0x10/0x10 [ 392.570865][ T9628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.570888][ T9628] ? __pfx__printk+0x10/0x10 [ 392.570914][ T9628] should_fail_ex+0x414/0x560 [ 392.570938][ T9628] should_failslab+0xa8/0x100 [ 392.570956][ T9628] __kmalloc_cache_noprof+0x70/0x3d0 [ 392.570972][ T9628] ? sctp_add_bind_addr+0x8c/0x370 [ 392.570991][ T9628] sctp_add_bind_addr+0x8c/0x370 [ 392.571010][ T9628] sctp_copy_local_addr_list+0x30b/0x4e0 [ 392.571028][ T9628] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 392.571043][ T9628] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 392.571061][ T9628] ? sctp_v6_is_any+0x64/0x80 [ 392.571079][ T9628] ? sctp_copy_one_addr+0x93/0x360 [ 392.571097][ T9628] sctp_bind_addr_copy+0xb3/0x3c0 [ 392.571114][ T9628] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 392.571139][ T9628] sctp_connect_new_asoc+0x2e0/0x690 [ 392.571161][ T9628] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 392.571179][ T9628] ? __local_bh_enable_ip+0x12d/0x1c0 [ 392.571207][ T9628] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 392.571228][ T9628] ? security_sctp_bind_connect+0x7e/0x2e0 [ 392.571247][ T9628] sctp_sendmsg+0x155c/0x2810 [ 392.571275][ T9628] ? __pfx_sctp_sendmsg+0x10/0x10 [ 392.571296][ T9628] ? aa_sk_perm+0x81e/0x950 [ 392.571329][ T9628] ? __pfx_aa_sk_perm+0x10/0x10 [ 392.571349][ T9628] ? sock_rps_record_flow+0x19/0x410 [ 392.571367][ T9628] ? inet_sendmsg+0x2f4/0x370 [ 392.571384][ T9628] __sock_sendmsg+0x19c/0x270 [ 392.571402][ T9628] __sys_sendto+0x3bd/0x520 [ 392.571421][ T9628] ? __pfx___sys_sendto+0x10/0x10 [ 392.571436][ T9628] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 392.571461][ T9628] ? __fget_files+0x3a0/0x420 [ 392.571486][ T9628] ? ksys_write+0x22a/0x250 [ 392.571502][ T9628] ? __pfx_ksys_write+0x10/0x10 [ 392.571514][ T9628] ? rcu_is_watching+0x15/0xb0 [ 392.571532][ T9628] __x64_sys_sendto+0xde/0x100 [ 392.571552][ T9628] do_syscall_64+0xfa/0x3b0 [ 392.571566][ T9628] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.571588][ T9628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.571602][ T9628] ? clear_bhb_loop+0x60/0xb0 [ 392.571631][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.571648][ T9628] RIP: 0033:0x7fb16dd8e929 [ 392.571661][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.571674][ T9628] RSP: 002b:00007fb16eb61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 392.571688][ T9628] RAX: ffffffffffffffda RBX: 00007fb16dfb5fa0 RCX: 00007fb16dd8e929 [ 392.571699][ T9628] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 392.571707][ T9628] RBP: 00007fb16eb61090 R08: 0000200000000140 R09: 000000000000001c [ 392.571717][ T9628] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 392.571725][ T9628] R13: 0000000000000000 R14: 00007fb16dfb5fa0 R15: 00007fb16e0dfa28 [ 392.571747][ T9628] [ 393.305382][ T5829] usb 5-1: USB disconnect, device number 110 [ 393.313065][ T5829] em28xx 5-1:0.0: Disconnecting em28xx [ 393.355000][ T5829] em28xx 5-1:0.0: Freeing device [ 393.683585][ T9642] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 393.691914][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1039'. [ 393.730494][ T7533] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 393.963370][ T7533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 393.976587][ T7533] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 394.007229][ T7533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.020525][ T5914] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 394.047969][ T7533] usb 2-1: Product: syz [ 394.059412][ T7533] usb 2-1: Manufacturer: syz [ 394.120752][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 394.287024][ T7533] usb 2-1: SerialNumber: syz [ 394.327617][ T7533] usb 2-1: config 0 descriptor?? [ 394.359380][ T5829] usb 1-1: USB disconnect, device number 100 [ 394.420820][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 394.444291][ T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 394.465449][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.514958][ T10] usb 3-1: config 0 has no interface number 0 [ 394.558107][ T10] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 395.060887][ T7533] usb 2-1: USB disconnect, device number 74 [ 395.094545][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.150702][ T9648] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 395.164440][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 395.178557][ T10] usb 3-1: config 0 descriptor?? [ 395.237000][ T5914] usb 5-1: config 0 has no interfaces? [ 395.353700][ T9650] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 33507 - 0 [ 395.398749][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 395.421185][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.425170][ T9650] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33507 - 0 [ 395.429225][ T5914] usb 5-1: Product: syz [ 395.429246][ T5914] usb 5-1: Manufacturer: syz [ 395.429261][ T5914] usb 5-1: SerialNumber: syz [ 395.490560][ T9650] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33507 - 0 [ 395.531885][ T9650] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33507 - 0 [ 395.566044][ T9650] geneve2: entered promiscuous mode [ 395.633014][ T5914] usb 5-1: config 0 descriptor?? [ 395.851102][ T31] INFO: task kworker/1:4:5888 blocked for more than 143 seconds. [ 395.859888][ T31] Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 [ 395.875051][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.884208][ T31] task:kworker/1:4 state:D stack:21208 pid:5888 tgid:5888 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 395.899306][ T31] Workqueue: usb_hub_wq hub_event [ 395.904811][ T31] Call Trace: [ 395.908276][ T31] [ 395.931674][ T9642] misc userio: The device must be registered before sending interrupts [ 395.943881][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 395.954977][ T9642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 395.968219][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1039'. [ 396.018638][ T31] __schedule+0x16f5/0x4d00 [ 396.038419][ T31] ? schedule+0x165/0x360 [ 396.057030][ T31] ? __pfx___schedule+0x10/0x10 [ 396.166399][ T31] ? schedule+0x91/0x360 [ 396.285910][ T31] schedule+0x165/0x360 [ 396.294474][ T31] schedule_timeout+0x9a/0x270 [ 396.307977][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 396.339387][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.355344][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.373461][ T31] ? wait_for_completion+0x267/0x5d0 [ 396.385215][ T31] wait_for_completion+0x2bf/0x5d0 [ 396.390382][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 396.398912][ T31] i2c_del_adapter+0x581/0x6e0 [ 396.410265][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.418856][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 396.431779][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 396.439757][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 396.456143][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 396.470143][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 396.553389][ T31] usb_probe_interface+0x641/0xbc0 [ 396.573629][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 396.601826][ T31] really_probe+0x26a/0x9a0 [ 396.607830][ T31] __driver_probe_device+0x18c/0x2f0 [ 396.617819][ T31] driver_probe_device+0x4f/0x430 [ 396.632986][ T31] __device_attach_driver+0x2ce/0x530 [ 396.655030][ T31] bus_for_each_drv+0x251/0x2e0 [ 396.663654][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 396.676433][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 396.688358][ T31] __device_attach+0x2b8/0x400 [ 396.698984][ T31] ? __pfx___device_attach+0x10/0x10 [ 396.710179][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 396.724723][ T31] bus_probe_device+0x185/0x260 [ 396.735135][ T31] device_add+0x7b6/0xb50 [ 396.744884][ T31] usb_set_configuration+0x1a87/0x20e0 [ 396.764085][ T31] usb_generic_driver_probe+0x8d/0x150 [ 396.776712][ T31] usb_probe_device+0x1c1/0x390 [ 396.786859][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 396.796253][ T31] really_probe+0x26a/0x9a0 [ 396.808248][ T31] __driver_probe_device+0x18c/0x2f0 [ 396.824058][ T31] driver_probe_device+0x4f/0x430 [ 396.837890][ T31] __device_attach_driver+0x2ce/0x530 [ 396.849860][ T31] bus_for_each_drv+0x251/0x2e0 [ 396.867672][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 396.879604][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 396.895285][ T31] __device_attach+0x2b8/0x400 [ 396.905381][ T31] ? __pfx___device_attach+0x10/0x10 [ 396.916603][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 396.929457][ T31] bus_probe_device+0x185/0x260 [ 396.938543][ T31] device_add+0x7b6/0xb50 [ 396.950793][ T31] usb_new_device+0xa39/0x16c0 [ 396.955986][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 396.962827][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.968448][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.974897][ T31] hub_event+0x2941/0x4a00 [ 396.979662][ T31] ? __pfx_hub_event+0x10/0x10 [ 396.986130][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 396.992655][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.998180][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 397.004738][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 397.011155][ T31] process_scheduled_works+0xae1/0x17b0 [ 397.017280][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.024006][ T31] worker_thread+0x8a0/0xda0 [ 397.028946][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.036148][ T31] ? __kthread_parkme+0x7b/0x200 [ 397.043324][ T31] kthread+0x70e/0x8a0 [ 397.047723][ T31] ? __pfx_worker_thread+0x10/0x10 [ 397.053788][ T31] ? __pfx_kthread+0x10/0x10 [ 397.058654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.066492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.072240][ T31] ? __pfx_kthread+0x10/0x10 [ 397.077217][ T31] ret_from_fork+0x3f9/0x770 [ 397.082666][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 397.088190][ T31] ? __switch_to_asm+0x39/0x70 [ 397.095570][ T31] ? __switch_to_asm+0x33/0x70 [ 397.103117][ T31] ? __pfx_kthread+0x10/0x10 [ 397.108011][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.113638][ T31] [ 397.127504][ T31] [ 397.127504][ T31] Showing all locks held in the system: [ 397.136651][ T31] 1 lock held by khungtaskd/31: [ 397.169540][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 397.180320][ T31] 3 locks held by kworker/u8:9/3543: [ 397.186009][ T31] 2 locks held by getty/5595: [ 397.191154][ T31] #0: ffff888030b2d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 397.201331][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 397.211839][ T31] 1 lock held by syz-executor/5852: [ 397.217192][ T31] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 397.244143][ T31] 5 locks held by kworker/1:4/5888: [ 397.249596][ T31] #0: ffff888140abb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.275497][ T31] #1: ffffc9000458fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.288914][ T31] #2: ffff888144b72198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 397.320638][ T5829] usb 3-1: USB disconnect, device number 69 [ 397.330678][ T31] #3: ffff888077415198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 397.389949][ T31] #4: ffff888034648160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 397.406116][ T31] 4 locks held by udevd/5956: [ 397.411335][ T31] #0: ffff888027e260a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 397.420215][ T31] #1: ffff888055be9088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 397.430030][ T31] #2: ffff888075e9eb48 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 397.439755][ T31] #3: ffff888077415198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 397.449886][ T31] [ 397.452546][ T31] ============================================= [ 397.452546][ T31] [ 397.463863][ T31] NMI backtrace for cpu 1 [ 397.463879][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 397.463903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.463916][ T31] Call Trace: [ 397.463924][ T31] [ 397.463932][ T31] dump_stack_lvl+0x189/0x250 [ 397.463967][ T31] ? __wake_up_klogd+0xd9/0x110 [ 397.463995][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.464036][ T31] ? __pfx__printk+0x10/0x10 [ 397.464072][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 397.464103][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 397.464127][ T31] ? _printk+0xcf/0x120 [ 397.464153][ T31] ? __pfx__printk+0x10/0x10 [ 397.464177][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.464208][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 397.464250][ T31] watchdog+0xfee/0x1030 [ 397.464279][ T31] ? watchdog+0x1de/0x1030 [ 397.464313][ T31] kthread+0x70e/0x8a0 [ 397.464339][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.464364][ T31] ? __pfx_kthread+0x10/0x10 [ 397.464388][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.464416][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.464444][ T31] ? __pfx_kthread+0x10/0x10 [ 397.464466][ T31] ret_from_fork+0x3f9/0x770 [ 397.464497][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 397.464530][ T31] ? __switch_to_asm+0x39/0x70 [ 397.464548][ T31] ? __switch_to_asm+0x33/0x70 [ 397.464567][ T31] ? __pfx_kthread+0x10/0x10 [ 397.464590][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.464625][ T31] [ 397.464634][ T31] Sending NMI from CPU 1 to CPUs 0: [ 397.629753][ C0] NMI backtrace for cpu 0 [ 397.629770][ C0] CPU: 0 UID: 0 PID: 4565 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 397.629791][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.629802][ C0] Workqueue: iou_exit io_ring_exit_work [ 397.629826][ C0] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 397.629847][ C0] Code: e2 8b 48 c7 c6 e0 81 e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 fe cd 36 07 48 89 44 24 08 65 8b [ 397.629861][ C0] RSP: 0018:ffffc9000e667200 EFLAGS: 00000086 [ 397.629875][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4c90a8791c020500 [ 397.629885][ C0] RDX: 0000000000000000 RSI: ffffffff8db6e2e9 RDI: ffffffff8be28200 [ 397.629897][ C0] RBP: ffffffff81729de5 R08: 0000000000000000 R09: ffffffff81729de5 [ 397.629908][ C0] R10: ffffc9000e6673d8 R11: ffffffff81acf6c0 R12: 0000000000000002 [ 397.629919][ C0] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 397.629930][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 397.629944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.629955][ C0] CR2: 00005628fd018058 CR3: 0000000025592000 CR4: 00000000003526f0 [ 397.629970][ C0] DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 [ 397.629981][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 397.629991][ C0] Call Trace: [ 397.629997][ C0] [ 397.630004][ C0] ? unwind_next_frame+0xa5/0x2390 [ 397.630030][ C0] lock_acquire+0x130/0x360 [ 397.630057][ C0] ? unwind_next_frame+0xa5/0x2390 [ 397.630080][ C0] ? io_ring_ctx_free+0xa5/0x500 [ 397.630097][ C0] ? unwind_next_frame+0xa5/0x2390 [ 397.630120][ C0] unwind_next_frame+0xc2/0x2390 [ 397.630143][ C0] ? unwind_next_frame+0xa5/0x2390 [ 397.630170][ C0] ? unwind_next_frame+0xa5/0x2390 [ 397.630194][ C0] ? io_destroy_buffers+0x13c/0x230 [ 397.630212][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.630237][ C0] arch_stack_walk+0x11c/0x150 [ 397.630256][ C0] ? io_ring_ctx_free+0xa5/0x500 [ 397.630274][ C0] stack_trace_save+0x9c/0xe0 [ 397.630291][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 397.630311][ C0] ? __lock_acquire+0xab9/0xd20 [ 397.630338][ C0] kasan_save_track+0x3e/0x80 [ 397.630352][ C0] ? kasan_save_track+0x3e/0x80 [ 397.630365][ C0] ? kasan_save_free_info+0x46/0x50 [ 397.630386][ C0] ? __kasan_slab_free+0x62/0x70 [ 397.630400][ C0] ? kfree+0x18e/0x440 [ 397.630419][ C0] ? io_remove_buffers_legacy+0x232/0x310 [ 397.630436][ C0] ? io_destroy_buffers+0x13c/0x230 [ 397.630471][ C0] ? io_ring_ctx_free+0xa5/0x500 [ 397.630513][ C0] kasan_save_free_info+0x46/0x50 [ 397.630539][ C0] __kasan_slab_free+0x62/0x70 [ 397.630557][ C0] ? io_remove_buffers_legacy+0x232/0x310 [ 397.630576][ C0] kfree+0x18e/0x440 [ 397.630595][ C0] io_remove_buffers_legacy+0x232/0x310 [ 397.630619][ C0] io_destroy_buffers+0x13c/0x230 [ 397.630639][ C0] ? __pfx_io_destroy_buffers+0x10/0x10 [ 397.630655][ C0] ? io_alloc_cache_free+0x254/0x2a0 [ 397.630675][ C0] ? __pfx_kfree+0x10/0x10 [ 397.630690][ C0] ? __pfx_kfree+0x10/0x10 [ 397.630705][ C0] io_ring_ctx_free+0xa5/0x500 [ 397.630724][ C0] io_ring_exit_work+0x810/0x880 [ 397.630746][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 397.630763][ C0] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 397.630785][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.630809][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 397.630834][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 397.630860][ C0] process_scheduled_works+0xae1/0x17b0 [ 397.630897][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.630929][ C0] worker_thread+0x8a0/0xda0 [ 397.630945][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.630973][ C0] ? __kthread_parkme+0x7b/0x200 [ 397.630995][ C0] kthread+0x70e/0x8a0 [ 397.631014][ C0] ? __pfx_worker_thread+0x10/0x10 [ 397.631029][ C0] ? __pfx_kthread+0x10/0x10 [ 397.631048][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.631071][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.631096][ C0] ? __pfx_kthread+0x10/0x10 [ 397.631114][ C0] ret_from_fork+0x3f9/0x770 [ 397.631139][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 397.631164][ C0] ? __switch_to_asm+0x39/0x70 [ 397.631181][ C0] ? __switch_to_asm+0x33/0x70 [ 397.631197][ C0] ? __pfx_kthread+0x10/0x10 [ 397.631216][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.631246][ C0] [ 398.069932][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.077860][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 398.084752][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13659-g5b032cac6225 #0 PREEMPT(full) [ 398.096232][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.106297][ T31] Call Trace: [ 398.109589][ T31] [ 398.112537][ T31] dump_stack_lvl+0x99/0x250 [ 398.117148][ T31] ? __asan_memcpy+0x40/0x70 [ 398.121758][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.126972][ T31] ? __pfx__printk+0x10/0x10 [ 398.131583][ T31] panic+0x2db/0x790 [ 398.135539][ T31] ? __pfx_panic+0x10/0x10 [ 398.139971][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 398.144746][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 398.150571][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 398.155972][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 398.162147][ T31] watchdog+0x102d/0x1030 [ 398.166497][ T31] ? watchdog+0x1de/0x1030 [ 398.170939][ T31] kthread+0x70e/0x8a0 [ 398.175020][ T31] ? __pfx_watchdog+0x10/0x10 [ 398.179706][ T31] ? __pfx_kthread+0x10/0x10 [ 398.184309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.189527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.194741][ T31] ? __pfx_kthread+0x10/0x10 [ 398.199340][ T31] ret_from_fork+0x3f9/0x770 [ 398.203969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 398.209098][ T31] ? __switch_to_asm+0x39/0x70 [ 398.213872][ T31] ? __switch_to_asm+0x33/0x70 [ 398.218639][ T31] ? __pfx_kthread+0x10/0x10 [ 398.223248][ T31] ret_from_fork_asm+0x1a/0x30 [ 398.228052][ T31] [ 398.231234][ T31] Kernel Offset: disabled [ 398.235570][ T31] Rebooting in 86400 seconds..