last executing test programs: 8.731480284s ago: executing program 0 (id=2162): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b927", 0x2, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @empty}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') read$dsp(r0, &(0x7f00000000c0)=""/229, 0xe5) preadv(r0, 0x0, 0x0, 0x7, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) syz_emit_vhci(0x0, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/219, 0xdb}], 0x1}, 0x40000002) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$VT_DISALLOCATE(r3, 0x5608) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000000)=""/25, 0x19}], 0x3, &(0x7f0000000740)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000001c0)=""/47, 0x39}, {&(0x7f0000000340)=""/12, 0x16}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/86, 0x56}], 0x5, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r4, &(0x7f000000ddc0)={0x2020}, 0x2020) 8.667937762s ago: executing program 2 (id=2163): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x63, 0x2800, 0x0, 0x0}, {0x63, 0x1011, 0x0, 0x0}], 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) mknod$loop(0x0, 0x8000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x10001, 0x5, 0x1040, 0x9, 0x6, 0x1, 0x8}) 8.439512584s ago: executing program 4 (id=2166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xf7, 0x33a, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x8000, 0x7}}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440100001000130700000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa00000000000000020200000001000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000fe32000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000df1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060"], 0x144}, 0x1, 0x0, 0x0, 0x24044050}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 7.699312744s ago: executing program 1 (id=2168): socket(0x840000000002, 0x2, 0xff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) (async, rerun: 64) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x0, 0x0, 0x400000000000]}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={r10}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000980)="5766b1b827f600263b09d3748ee7d700", 0x10) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) (rerun: 64) r12 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') 7.375162396s ago: executing program 0 (id=2169): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802) write$binfmt_elf32(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000009c0)={0x20, 0x0, 0xc4, {0xc4, 0x5, "55cbea6de7ced3eb21ea8fda8ea7983a24579deed4f92ba0c4852ad9bdfb74367b955b5b4bac4f837e0bb41f9d862c71703d208d82428c240a13b2c3f029531a66ad89c67664193d98b35cc7d0d23421568758311aad796aa481667680ef50188ebbcb93a2ccb1747509f91ce88dcea97d93f74f354d9f7dcc725d97b4d1c265539c40c1cccf76ba28332b03481ded26aef9398dd19da370aec24cdeef30c65cdb7ba4cb5ef3be203fb450d1040d390cdcbdc663594959acbd85fc4849e3827d619b"}}, &(0x7f0000000b40)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "d959a04569592f85816e3d700fbca52a1110e27a0e6f9ad94d9866617e00c3c89adf83c25eccd32fec890d5793ba7556be80141ce1b01688ffe42c54cf276f91c099a79d04bbb7d9493926c99c4abd067d0aacde85bdc78b7d78248242d8e3d83c3c63b0f8f70ebcd89576d57fe3c062ee0fcdcc781abaed91b41b7c78a99f7bb3a43c66816e25a15bd47c2d7b82f51819fb6cd0c24ca6fcb2d0af1966289c70180ddbb4b389dafe8eb3675f58abeeaf652def170ebb5a827064d843cbaf1cce3129befd3439713af4cabfa8aa169432b099802caa01d1261dee55f21316d61f84"}}, &(0x7f00000002c0)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x6, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xc, 0x2}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc3, 0x1, 0x2, 0xd, 0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x7, 0x4, "330d5089", "fc83d4fb"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x3, 0x5, 0x0, 0x1, 0x6}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000ac0)={0x0, 0x1b, 0x59, "a29cc11b1e05b31c0756f03804d1926a6f66dbedfd0a062771be39ae6383e4bb4ff9f3bb440d39491173fa17c5cdd89cda0261cae80d2317a4ce06304fb55cc4dc58ec1c9c7f0714c748cd93c210b8c6a4287c651117a573fb"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x200, 0xea9d45f8e362d135}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000680)={0x40, 0xb, 0x2, "8e11"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "a576"}, &(0x7f0000000380)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0400, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'rose0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="b4", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x500, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001ac0)={{0x0, 0x0, 0x80}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000ff0800020073797a31000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000010000000000000000000084000a"], 0xd0}}, 0x20050800) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000180)) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r7) 7.276114271s ago: executing program 4 (id=2170): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3, 0x800) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) 7.073381413s ago: executing program 4 (id=2171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa40000f100000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000004850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x45a, &(0x7f0000001e00)=""/4087, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.9863864s ago: executing program 4 (id=2172): syz_usb_connect(0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40eb0000) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x100000}) (async) remap_file_pages(&(0x7f0000305000/0x4000)=nil, 0x4000, 0x2000008, 0x4, 0x1000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x80000000004) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000a85000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xe7d) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29) (async) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffff007, 0x0, 0xfefb7bb863e062b2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900080000004d00000006006600fb880000040067000a000600080211000000000006006600ab80000006006600036000003d00330078860800080211000000080211000000459c2fb8f6d2360010004240159929a61d52857fc64005d58181fbc650fe74a90a928de75af67820a70000003a003300e0b00500ffffffffffff080011000000a8ec2350651bf00f040046401501ff7f0000000000002b89eebd166c15e50df539114e86874a0000"], 0xcc}, 0x1, 0x0, 0x0, 0x2800}, 0x4000005d) 6.863173285s ago: executing program 4 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES64=r1], 0x1c}], 0x1, 0x0, 0x0, 0x24040041}, 0x300) 6.755930048s ago: executing program 4 (id=2174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/if_inet6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1, 0x36, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x8051) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)=0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) socket$kcm(0x21, 0x2, 0x2) 6.716564272s ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x2, 0x9, @generic=0x6, 0x9, 0x9, 0x6}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 6.475961066s ago: executing program 2 (id=2176): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="3acd12c540ccd889d3f946b66af184b069bd03405c4316a17b130403d1735f61eaeffc3542ee1da1001d1ed474eb2941798d5107e6880b1e56cf5812bdb95a4328fae657c44ac26e4e261474257d36844bf53c3746eb1bf441e8f0f9201909409f3f060e41c7f45e048b64bac6098d389c701676b7cd46f63f96bb8b2101a6a82a49861563611ec639d9a4afb2c1aa620963d0382485d2eb9a88aac52508b4849205bad426a2d2086f4ab0ed7c093333d9ae73125b59e85af47bd5c6c97ba82c2f5cce0d0c2f00"/210, @ANYRESDEC=0x0, @ANYBLOB]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080)) 5.912048407s ago: executing program 1 (id=2177): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=@getsa={0x28, 0x12, 0x1, 0x70bd2a, 0x25dfdbfd, {@in=@multicast2, 0x4d3, 0xa, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc044) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001000900"], 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = syz_io_uring_complete(r8) sendmsg$kcm(r10, &(0x7f0000000a40)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000bc0)="abac5ecc75ba8a1544ad2652e29c0fed32d8e08f868cc05d72c4dbe1db69c33d4da076e6e5fd1795c8ba40ec558e4fd6c49fd4cbe1bdb1026a67eea5c7b7210d6c7a8d85ecaecc1e8d0c793b851dc72554f01cec85136e81e614c107257d0c34bfad5f149171f5d0ca902397a1b67296d5ffeb41aaa5a54aacf95c24bbfc9da84a389740e553f5027116c79c57b445b7de40fc5d32069ede8814ad6bbd5548673d5dd54a010bb5243abc7642ffb35c4662e81a8d306473e03544bbd88222c10c6dd082b79e852f471b753c9341", 0xcd}, {&(0x7f0000000400)="1ad1f5ecf28446506aef52d153d22fdcc2dacd57519b3a81bb2bc1614d4db4fb7431ba1e14efc60846fcd86ba2d39849ce2118a68c1c5677450c8ffa74c11112e82ffb04e9f7817a77edea2d00d879be4a856de8b6ef4adde067daad6e7e3de127ceb63df2c830a2397277490b38684c08b6415d8dfc19461c3c19939e08244cf376d18ec1ee0206513057ec2a91cb271c0fd0050bcd29adaa8e44bc79c5c52a1a11a78b5dd4a430626375", 0xab}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x548}, 0x4000000) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x1}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r6, 0xcb, &(0x7f0000000080)=""/203}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 5.696212986s ago: executing program 1 (id=2178): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0x92, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0xd4, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4fb, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0x7f, "eee5"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x4, 0x4, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x5, 0x9}, @as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x53, 0x3, 0x2, {0x7, 0x25, 0x1, 0x81, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = creat(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) recvfrom(r3, &(0x7f0000000280)=""/121, 0x79, 0x100, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x1, {0xa, 0x4e23, 0x6, @private2, 0x8}}}, 0x80) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000000c0)) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x8, 0x0, 0x3}, 0x0) clock_gettime(0x7, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={{r4, r5/1000+60000}, {0x77359400}}) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x5582, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 5.136586876s ago: executing program 2 (id=2179): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="17003d9ab500005600230d0000000000000000070910cb5f5160e3eea2d9929cd550b34b59c6c36deb59e6e4f42a55113c73728d45e98b90a64e42bde1e9a2433f680829778bc2af41e15428a98939e0051318b2ec6834e4d7dbbf3a100901fa35fcc4", @ANYRES32=0x0], 0x18}}, 0x0) 4.982471317s ago: executing program 2 (id=2180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x200000d, @local, 0x81}], 0x1c) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 4.193291672s ago: executing program 0 (id=2181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) 4.050042295s ago: executing program 0 (id=2182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0x10) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@op={0x18}, @iv={0x80, 0x117, 0x2, 0x67, "decaee08da35df26665c2e26895b16e7d92da7e0c1fe1abe0fbc9a4d1d1df3fada3184da2fdb0f07d7d32a8804c0e4565f70ee05ea67a5b26856f31f85dcfc23fd982317ffc852f583761a44a220b490d20b0ad75cae64a2a9d4b9362d79bf0179c3f73a1541b0"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc9, "bd477b2200c3bc124c3561454fcca3e850a1f110a5fef73dd566ac7935d54acc0e931389b577848cb7f2427096fc2221441b42fdc881f90c01c06add49aa628f41bc35dab38d40621acc180d81901980800ec4e9000500000000000000e9070ac82e751bccde1693fce11a676eb339104ba47192af9caa2ccf71cf4c3e00189e29889b915dc149cd5ef4ef20a8385b9a25a59a614455293158833d2114fe5b923020fe77bf4e489de28cb6e426e4b7e816efede915d864cbdf1800"/201}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1d8}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) (async) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 3.771703863s ago: executing program 3 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) (async) add_key$user(0x0, 0x0, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) (async, rerun: 32) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r5, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20) (async) syz_fuse_handle_req(r3, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x40000, 0xffff, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r6, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x5000) stat(&(0x7f00000042c0)='./file0\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000063c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000064c0)=0xe8) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000006500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000024c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) r15 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r16 = getpid() syz_pidfd_open(r16, 0x0) (async, rerun: 64) fstat(r2, &(0x7f0000008540)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000086c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000002c0)="68ff898079028140410282703c6fee83789708460da59e009930e2311dd3cb0ea3d9ba4b3a969a064c725ba8aa86f823a95be31a16a405e004a1df32e058d8b5394b500ff6e0a66087ab610ded551bd3e369ce6431e20ce23a19d3ba02a7b4db9e074a003f81ad8ba403bc3dab7f2a45492cf3b7db79490911e9cc5b4f92b4c35d105347559f016d45bb8f7b33d214ce35b13093fe25b2ff6ff52a22eb71f7564a4cb1d79f4be28f3ded7145e10bd8", 0xaf}, {&(0x7f0000000380)="5696fb66045d2750a55bdf89a84a4249ed8ec8f5f210ea9ef074d8160fab9924c3ccc2e726efddda84e5138a51034b6f47450290c93d6e66b0cd6659e3a72d37a65beacb20331e09d4e55f2b2f79c54941adeb4ffe6e15a3b8888647d50a6e6503c6b455b674b260d92f6d062c8c0a78df65a6b70b3c814502d558103da0c445f6fc01a06e514e2bdb1fff098ab7d92d4e22fa57a13cd6b58c54bbc708b5860f4f23b7d554ed3d6b9f98b7cc290cd64591b902596fba756fb4491c9adec41d846126db855db68ff09ceb3b4625e213e5318aae014a9b66b304b766a612acee0fddc7c4c7626b990cac35b9ab7d78d497556f", 0xf2}, {&(0x7f0000000480)="50f29de917ebc8a3914d18acc549ab52174995968e1d96a02de46690454646ff300a45e30bb05ae9aeb9f93a7710a55ccdff0febe279c3f5c87f7ce6ab80e8e50714fbc9bd582df84d7c7c6cba63d9a6c25ef63b834527d19a4a46208ca2d4d4ec48e384be53f48c8cc599a45bdd5c21d98ae91357208cdf62db9a767b68b1b3773d534b0b1b9b26f500cbc7b90f3925a421ee47959137b7f70dc75ebd63948a25220932cf3588f6754c4e0fb0fb05691407422bcb93e27771b50f8fc925391595f0c0", 0xc3}], 0x3, &(0x7f0000000c80)=[@rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x50, 0x44050}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="7e928d8eba1befd10275a3f09bd58a465500d6c00e292b4f3fc51d5e", 0x1c}, {&(0x7f0000000dc0)="b3b5428787f1c65564e9d95721d3fe67cb18ec3ef2cbc7804c343ef5d254ea1b41d60be509293226e13d536c7b0fffc89684bf319a51953526533765c751e9e308d33f20477337910b3c14ff08e5f7fb30962d83238aaaf2eb10880fbe91492531939b77b65686343311bba039cabc9a0ef02c5c2e1f039897967b6afc4ed6b380fe6441f20068e5ced4917f", 0x8c}, {&(0x7f0000000e80)="fbaa039d4636fc094c756f7d717e6395a8c8ce50194894e909be56722f9b92eda049d215aa20157a6975323a94ef4f79b94b886ba28f18a492bd87a5b3b203f111e2539655db78690609a0414a274f25fba5811266418e726705511a1a079c93f4a9d1ade212d15449", 0x69}, {&(0x7f0000000f00)="bb0cd44ba5c763e4", 0x8}], 0x4, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1, r2, 0xffffffffffffffff, r1, r0, r1]}}], 0x78, 0x48000}}, {{&(0x7f00000026c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002740)="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", 0xfb}], 0x1, &(0x7f0000002880)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xc0d0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000028c0)="4de2db998f53c0005c1340c7d79e98341dd216a9ba7e5a61c695ca523c3c78f4c89889ad7a4622337ea1250613482afea35b7647f530e050f247bb8b97345089e1201cec64dd5e64c38b8d71496f80038522392b3e2b091150920eb02be581cae8c01ae213", 0x65}], 0x1, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1]}}], 0x20, 0x40}}, {{&(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002a40)="bc1211e3bce9aa51f0cd729df29d065895169431bfd3478149182820d409ba8c0a0405b0cbbd94d06a936bf7abe98b590ac37fc70baa542bb76d5acc841928818d2d44ebb757a8db20557018285a84a991d3cef0728186da04de85476506d3e9986572d3fa25f8d28394a2c707c2cb8d5b2f97a66d454f28146e14d67e13ae54f3b314f8c76bd9add427f0a31ba00e60adcdaac2bc37879b28963a1f4661e8a986c21ec1451fc760ab505352b0ca9782f815ff1b62bb13ca73d5995e55b0b705c170878329e3332d463b0b4e5bf88107c3426f53686171af4e9f2dafc6a067e98bd5c1cd6a70a7506648f0ed", 0xec}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="2efd76a619d882f6ad54afecfa6f639cca8bae1b0b556417d4c39b234de29f8a3b69d8dc764a7aeff00bd439c16f9862f689566b32a7a1d4a317d7f6c6ce5a03665af16e9639c2b2fbfeca9b993984b1094eeed8519c6567c7a3ea56c6f5f228a89b299f4633e52eb0a3d7f92c3135291b4086152cd0e7528f7dde2b54d6f0d4ccf310f7fbeeaf132e3473eba905fd39", 0x90}, {&(0x7f0000003c00)="541819ddf93e", 0x6}], 0x4, &(0x7f0000003dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003e80)="a64b23ba0b87d93ab4f5239486ee20df41efb39ce599fe836b8f38f1ff3b43817b30b204f61e94fc46909af5edf193b92755361d36077ea85ad29917b66e45ca09c3a9383866634d61131235c59562f2759cf601af766b6a701790fca7cc7a0a4b74ce795c85fb6e53cd29ceb0ecfc87a4afc1a2cf0fd1f5fcfa4af31db56985f7d13713286b2d7b8370b4967738a695c7fceba1d1eec2c9bcce48c76bf9fb749eccda5a294f8fe2994a59a159", 0xad}, {&(0x7f0000003f40)="68971810716ac7e7f2f0f5a55883bb9f77872e78e0c63486f59ebb4666cdbc5bf9168646087a1476ff1bd302dc6039ce570e24cf1b62a29857598364dcfb4fe323e8a0d559dd91f521cfdf0083c97582c24e31be88b820f149ab955e504333cbdba0e90cc26322db95e291e3a410cb14a21228212bcdf43c674ab0a60c130fdbcd96b9f7e782fe1cebb0261ffe16c17ab63084c58ae92b4131e1286e254ebea30ce15e2c4c", 0xa5}, {&(0x7f0000004000)="de901189dbde6ee4e922f0a6eda9e6cf063aa33e17b321df221f38699caa679bf98e3601aa2737777794ba96db907e6a57f383a15f505c0b5a9be90f0aef3a877ee9cba5040d716847c3fbb63d6b27477bc5", 0x52}], 0x3, &(0x7f00000085c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r2, r12, r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xee00}}}], 0x100, 0x780ab43fd457bd12}}], 0x6, 0x800) (async) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x400, @private=0xa010102}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e) 3.708859126s ago: executing program 3 (id=2184): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0x80, 0x10100, 0xfffffffe, 0x309}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYRESHEX=r4], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) 3.588037172s ago: executing program 3 (id=2185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) socket(0x10, 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x15c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x12c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x9f9, 0x1, 0x5, 0x11, 0x16, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x15c}}, 0x20000805) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x9) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200110"], 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2000000b, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.095971441s ago: executing program 0 (id=2186): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) pread64(r0, &(0x7f0000000040)=""/245, 0xf5, 0x1000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000140)='net/udp\x00') capget(&(0x7f0000000180)={0x0, r2}, &(0x7f00000001c0)={0x4, 0x3, 0x9, 0x2, 0x2, 0x81}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000400)=0x3, 0x4) read(r3, &(0x7f00000002c0)=""/199, 0xc7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5800}, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) syz_usb_connect(0x4, 0x4f, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d00c8ac00090504041806d8030409044299d83e091515090505022000836282090512002000000a0c0705e6ea"], 0x0) 2.445098593s ago: executing program 1 (id=2187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000004850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.339637262s ago: executing program 1 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r1 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xd, 0x20, 0x98, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f9c4e0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffff81, 0x1, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0xfffd, 0xa}, [@obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4f}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0xfff, 0x1, 0x0, 0x9, 0xf7}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x8, 0xff, 0x6, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xdf}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x82, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x2, 0x7c}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc, 0x9, 0x1e}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x0, 0xff, 0x5, 0x10, 0x81}, 0x4e, &(0x7f0000000480)={0x5, 0xf, 0x4e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0xa, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0xfc, 0x4, 0x800, 0x1e, 0x8d, [0x3f00, 0xc000, 0x3f00, 0xff00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xcc, 0x2, 0xe, 0x2, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x6, 0x11791, 0x3, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x88, 0x10, 0x35, 0x65d4, 0xa}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}, {0xd1, &(0x7f0000000580)=@string={0xd1, 0x3, "fc2fd225e3f2c1ba32df57ce038199d8e35dda96da61238ff89e1ccd96523fb8b0f8c790f6abffb249bc82950804a1937b43376be87a82f07034b841c803ea6ca5cc737fad67b6cf5311becc15200d60c7e402bd8e423763a7a8f409c1b93dab0c8eb5d87a45c511e5f6db0858eab09df2e58d65220f3c253215be4ccd75babeaf9c11fffcb04dba11ca946dcc3a8d6210d82a0e2c3dc6e6cbf9b1219a45e13d96186f2f03c2adc48addbad8bad62c53f42b252d3b5e2a47df702e8013fa7ef1fdbf5216065bc6fc39e72150a48630"}}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x20, 0x22, 0xee, {0xee, 0x22, "edef88d25810b5c44168332167acc415b6216d964f8d0546649f0c33a1d0466f1fe7d3e7026c7d513d6f6a4bde39c46a9745ebd70972d6bf6a4847696838fb5240d0843d38a1913ffb5a780d8bbbc36d1a0889852ef39b158eb53f2dad17f82ef7b4e1924e64959cd0b7e5faddfac5823ef665f57ec407f4701891749e8a0df4383668a5ba1f971489582e9aa7fbf97dfdc72ed8d0c3d16ce5fd799ad209b0ab8321edae5934e38a42b51a5d4056a620a6b3b9282f43a3347b7a978a00b53efc875b867c3547ef71590e408a7cc031aead0be5eb857c18e62b829163981b2209cd95a9c4f89cf7183a5eb37d"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x0, 0x6, 0xed, "241ba3df0be7368e4bac8838994b8d299ad7a07d21d5dca547f5bb04588ceaaf5dc81bea21830e2f9dfc17eb99fc3d3e089fd4c0701871496e71495d04d9ea6d3e9d2e89e18c54c998013b78748753b7a92b48e24428a035e2c6d77214494864a495372f3293544bd94f75f69ee09f44d091943d2fd2c7e9615b9302f1c1f7f55563da57b639f6e74c3f1c130e776d6acece11cac84917363157ef81d95fabf1448ebed9d7820c8eef7a057d3b6684f4e3ee0a68304aa41843847d1e48acfc7393266121deff97b4f2478fb898607d22fe45eac9b398ef976662cff9c727ccc06485852ab196620fc234da7c13"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xb1}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x2, 0x2, 0x1, 0x2, 0x401, 0x0, 0x6, 0xe99, 0x1, 0x3ff}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000ac0)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000014c0)={0x24, &(0x7f00000012c0)={0x40, 0x1, 0xf4, {0xf4, 0x21, "a47896aaad240558cba7723cb62b8e3a413be3c98df8612f93a8844b09c9ad3b520c4a6b59881290aa657a3c9ccdc6f9ce14eccd72989a442fa7b39533957ba8c58058cdc6e674d0287e5b190d2f3a69f91be0e6e5f307cd84bb2e42a554b55967eba5e84bad79f094fc77f4c0a5ca88925e55ed8202470d3bcead85c4e1912985e111ede4a711c1f2e36b7fdea3038bbbfa1409467d078ea0e64fac5f7c037469af7c2994630c3d80f6c38e4c858fb17eb65fe043cc8c3cf08347ad53b54eab7e4ffc150c819ddc119bd3bea57acde6a47433aad0e03fdb2752323bcc7b6d8ec16753744bbee87f69801a8e35377f1847ae"}}, &(0x7f00000013c0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "d7591940cc0988bcc8a0fc4d0aca6678b501d21c130422585d0164e8ae1cf69276a228ac4c26236a2c68ca1d701e5690626b0b1d0b9fc173d9833550720b8e6bd9681c79c48501715c31fd468022bd72e9ba2545"}}, &(0x7f0000001440)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xb, "47d0642a"}, @local, @local=@item_012={0x2, 0x2, 0x8, "b00f"}, @main=@item_4={0x3, 0x0, 0xb, "d0e015d6"}, @local=@item_012={0x2, 0x2, 0x4, "f910"}]}}, &(0x7f0000001480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x5e3}}}}, &(0x7f00000018c0)={0x2c, &(0x7f0000001500)={0x20, 0x8, 0xfb, "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"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000016c0)={0x20, 0x1, 0xe8, "3045cdc3be07a7c8f40a4c9b2404dedce334041cadc3911d5e6b856f7f9025957c738c95eaf98a5fcb8fc3f35a5f4c84d263752435c1f5da4b0774b9b2fa1e09389ae0735ef93e728b8279cad22fba59c84f53cca2aa34b87f4b89c5e776ff8d4e01528b1bd263c6efd8ce989ea19bcada97c82f1e390b26d53298d0e221dae857ec37ddbc36405188a3beae83eb0227035ac76b2a0bf670a159fe3bea6370f8af52f79bf8e995c48699017444dae04d2780d6c184e5d391a92b89e5ef4c3c50a66f6e82ca54e110aa3c24228d4ab2cba690f79839b6a2a067de0c798294e337cdabe028a89ce3eb"}, &(0x7f0000001880)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_control_io$hid(r1, &(0x7f00000014c0)={0x24, &(0x7f00000012c0)={0x40, 0x1, 0xf4, {0xf4, 0x21, "a47896aaad240558cba7723cb62b8e3a413be3c98df8612f93a8844b09c9ad3b520c4a6b59881290aa657a3c9ccdc6f9ce14eccd72989a442fa7b39533957ba8c58058cdc6e674d0287e5b190d2f3a69f91be0e6e5f307cd84bb2e42a554b55967eba5e84bad79f094fc77f4c0a5ca88925e55ed8202470d3bcead85c4e1912985e111ede4a711c1f2e36b7fdea3038bbbfa1409467d078ea0e64fac5f7c037469af7c2994630c3d80f6c38e4c858fb17eb65fe043cc8c3cf08347ad53b54eab7e4ffc150c819ddc119bd3bea57acde6a47433aad0e03fdb2752323bcc7b6d8ec16753744bbee87f69801a8e35377f1847ae"}}, &(0x7f00000013c0)={0x0, 0x3, 0x56, @string={0x56, 0x3, "d7591940cc0988bcc8a0fc4d0aca6678b501d21c130422585d0164e8ae1cf69276a228ac4c26236a2c68ca1d701e5690626b0b1d0b9fc173d9833550720b8e6bd9681c79c48501715c31fd468022bd72e9ba2545"}}, &(0x7f0000001440)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xb, "47d0642a"}, @local, @local=@item_012={0x2, 0x2, 0x8, "b00f"}, @main=@item_4={0x3, 0x0, 0xb, "d0e015d6"}, @local=@item_012={0x2, 0x2, 0x4, "f910"}]}}, &(0x7f0000001480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x5e3}}}}, &(0x7f00000018c0)={0x2c, &(0x7f0000001500)={0x20, 0x8, 0xfb, "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"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000016c0)={0x20, 0x1, 0xe8, "3045cdc3be07a7c8f40a4c9b2404dedce334041cadc3911d5e6b856f7f9025957c738c95eaf98a5fcb8fc3f35a5f4c84d263752435c1f5da4b0774b9b2fa1e09389ae0735ef93e728b8279cad22fba59c84f53cca2aa34b87f4b89c5e776ff8d4e01528b1bd263c6efd8ce989ea19bcada97c82f1e390b26d53298d0e221dae857ec37ddbc36405188a3beae83eb0227035ac76b2a0bf670a159fe3bea6370f8af52f79bf8e995c48699017444dae04d2780d6c184e5d391a92b89e5ef4c3c50a66f6e82ca54e110aa3c24228d4ab2cba690f79839b6a2a067de0c798294e337cdabe028a89ce3eb"}, &(0x7f0000001880)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0xf9, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xf8, {{0x6, 0x24, 0x6, 0x0, 0x0, "05"}, {0x5, 0x24, 0x0, 0x1400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x74dd, 0x7f, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x1, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xf1, 0x8a}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf3, 0xf, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x8, 0x6, 0x10, 0x6}, 0x148, &(0x7f00000000c0)={0x5, 0xf, 0x148, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0xc, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0x4, 0x3, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x10000, 0x0, 0x8, [0xff0000]}, @generic={0xfd, 0x10, 0xa, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x4, 0x1e, 0xbf2, [0x7f40c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "35d6c29998097c49b191da1d13affe80"}]}, 0x2, [{0x2c, &(0x7f0000000240)=@string={0x2c, 0x3, "32d667c100afa80591b7450e0837d1f441baec1ebd10bcfaad914bb130305e02fe157fc3679b183fad70"}}, {0x6e, &(0x7f0000000280)=@string={0x6e, 0x3, "8a2bf0e779466e149acf75938895f37952235de751bb3cf2f4eb4e59bf4cf9f993dc4d6bd384575e62ded45f894170ba645bdd8e03b45e91be35f3c7c29ec5ca231c82101fe4b72e1913607cc6f9d88d74f6081e6eb2761e7941192b59f03fcd0555bc8cb9004be9d68e33b1"}}]}) (async) r4 = syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0xf9, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0xf8, {{0x6, 0x24, 0x6, 0x0, 0x0, "05"}, {0x5, 0x24, 0x0, 0x1400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x74dd, 0x7f, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x1, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xf1, 0x8a}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf3, 0xf, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x8, 0x6, 0x10, 0x6}, 0x148, &(0x7f00000000c0)={0x5, 0xf, 0x148, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0xc, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0x4, 0x3, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x10000, 0x0, 0x8, [0xff0000]}, @generic={0xfd, 0x10, 0xa, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x4, 0x1e, 0xbf2, [0x7f40c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "35d6c29998097c49b191da1d13affe80"}]}, 0x2, [{0x2c, &(0x7f0000000240)=@string={0x2c, 0x3, "32d667c100afa80591b7450e0837d1f441baec1ebd10bcfaad914bb130305e02fe157fc3679b183fad70"}}, {0x6e, &(0x7f0000000280)=@string={0x6e, 0x3, "8a2bf0e779466e149acf75938895f37952235de751bb3cf2f4eb4e59bf4cf9f993dc4d6bd384575e62ded45f894170ba645bdd8e03b45e91be35f3c7c29ec5ca231c82101fe4b72e1913607cc6f9d88d74f6081e6eb2761e7941192b59f03fcd0555bc8cb9004be9d68e33b1"}}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 2.33929431s ago: executing program 2 (id=2189): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB="3acd12c540ccd889d3f946b66af184b069bd03405c4316a17b130403d1735f61eaeffc3542ee1da1001d1ed474eb2941798d5107e6880b1e56cf5812bdb95a4328fae657c44ac26e4e261474257d36844bf53c3746eb1bf441e8f0f9201909409f3f060e41c7f45e048b64bac6098d389c701676b7cd46f63f96bb8b2101a6a82a49861563611ec639d9a4afb2c1aa620963d0382485d2eb9a88aac52508b4849205bad426a2d2086f4ab0ed7c093333d9ae73125b59e85af47bd5c6c97ba82c2f5cce0d0c2f00"/210, @ANYRESDEC=0x0, @ANYBLOB]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000080)) 1.41634773s ago: executing program 3 (id=2190): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000010c0], 0x1e010000, 0x0, &(0x7f00000010c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x60, &(0x7f0000004940)={0x2400000, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x10, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be6, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x320146f1, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 1.187935832s ago: executing program 3 (id=2191): socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9) (async) socket(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x840) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) unshare(0x8040600) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0xbf14) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x7ffb, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xffffffbb}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x3}}}, 0x13c) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) socket(0x80000000000000a, 0x2, 0x0) 1.125951004s ago: executing program 2 (id=2192): r0 = syz_io_uring_setup(0x1f6a, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0x387}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82103, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r6, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x2, 0x80008000006, 0x8000000000000000, 0x10000000005, 0xfffdfffffffffefb, 0x0, 0xfffffffffffffffd, 0x100000004, 0xfffffffd, 0x2}) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000000)) r8 = socket(0x200000000000011, 0x2, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r12, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r11, 0x0}]) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000544a0800000000100000000007000000", @ANYRES32=r10], 0x18}}, 0x0) r13 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r13, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) 621.242334ms ago: executing program 3 (id=2193): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000008000000cc0500000100000009000000", @ANYRES32, @ANYBLOB="00000000001700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000400"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0x1, 0xfb, 0x8}) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x57, @private0, @empty, 0x40, 0x0, 0xffffffff, 0xb}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000080)='\r', 0x1}]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r2, 0x4, 0x2, 0x81, 0xcf54, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x6d, 0x300}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000040010000000400ae"], 0x18}}, 0x4000) recvmmsg(r5, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/144, 0x90}], 0x4, &(0x7f0000000540)=""/210, 0xd2}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpv3in6, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000740)}, {&(0x7f0000006f00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/74, 0x4a}, {&(0x7f0000001b40)=""/131, 0x83}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f0000001a00)=""/159, 0x9f}, {&(0x7f0000005440)=""/167, 0xa7}, {&(0x7f0000005ac0)=""/242, 0xf2}], 0x9, &(0x7f0000001ac0)=""/57, 0x39}, 0x4}, {{&(0x7f0000001d40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/49, 0x31}, {&(0x7f0000001e00)=""/59, 0x3b}, {&(0x7f0000004440)=""/213, 0xd5}, {&(0x7f0000001f40)=""/201, 0xc9}, {&(0x7f0000004080)=""/41, 0x29}], 0x6, &(0x7f0000004140)=""/112, 0x70}, 0x2}, {{&(0x7f00000041c0)=@x25, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005600)=""/166, 0xa6}, {&(0x7f0000004300)=""/150, 0x96}, {&(0x7f0000000100)=""/116, 0x74}, {0xffffffffffffffff}, {&(0x7f0000005bc0)=""/4100, 0x1004}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000005500)=""/206, 0xce}, {&(0x7f0000001e40)=""/198, 0xc6}, {&(0x7f00000056c0)=""/106, 0x6a}, {&(0x7f0000005740)=""/119, 0x77}], 0xa, &(0x7f0000005880)=""/192, 0xc0}, 0x9}, {{&(0x7f0000005940)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000006c80), 0x0, &(0x7f0000006d00)=""/191, 0xbf}, 0x15}], 0x5, 0x12104, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000001c0)={0xfffffbba, 0x401}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0xffffe000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x42) r9 = accept4(r8, 0x0, 0x0, 0x40000) accept4$alg(r9, 0x0, 0x0, 0x80800) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 0s ago: executing program 0 (id=2194): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getresgid(0x0, &(0x7f0000000480), 0x0) kernel console output (not intermixed with test programs): ][ T10] usb 4-1: device descriptor read/8, error -71 [ 539.841695][ T5892] usb usb5-port1: unable to enumerate USB device [ 539.858538][ T10] usb usb4-port1: unable to enumerate USB device [ 539.869115][ T5934] apple 0003:05AC:027A.0022: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 540.208739][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.218871][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.097081][ T5934] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 541.328203][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 541.434555][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 541.482384][ T5934] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 541.513432][ T5934] usb 5-1: config 7 has no interface number 0 [ 541.593863][ T5934] usb 5-1: string descriptor 0 read error: -22 [ 541.611662][ T5934] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 541.694385][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.986029][ T5934] usb 5-1: USB disconnect, device number 115 [ 542.041508][ T5933] usb 2-1: USB disconnect, device number 104 [ 542.650975][ T5892] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 542.848986][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 542.860120][ T5892] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 542.868443][ T5892] usb 4-1: config 0 has no interface number 0 [ 542.874971][ T5892] usb 4-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 542.963037][ T5892] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.011997][ T5892] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 543.059316][ T5892] usb 4-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 543.089736][ T5892] usb 4-1: config 0 interface 12 has no altsetting 0 [ 543.122614][ T5892] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 543.158440][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.178693][ T5892] usb 4-1: Product: syz [ 543.189228][ T5892] usb 4-1: Manufacturer: syz [ 543.195325][ T5892] usb 4-1: SerialNumber: syz [ 543.209000][ T5892] usb 4-1: config 0 descriptor?? [ 543.218433][ T5892] f81534 4-1:0.12: unsupported endpoint max packet size [ 543.473722][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 544.093175][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 544.105074][ T5892] usb 4-1: USB disconnect, device number 106 [ 544.123817][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 544.150835][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.190745][ T10] usb 5-1: Product: syz [ 544.221342][ T10] usb 5-1: Manufacturer: syz [ 544.226036][ T10] usb 5-1: SerialNumber: syz [ 544.273241][ T10] usb 5-1: config 0 descriptor?? [ 544.708236][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 544.853821][T12460] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 545.110575][T12443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1766'. [ 545.121754][T12443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1766'. [ 545.158843][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 545.158862][ T30] audit: type=1326 audit(1750562202.311:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12455 comm="syz.3.1770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89598e929 code=0x0 [ 545.929530][ T30] audit: type=1326 audit(1750562203.271:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.383073][ T30] audit: type=1326 audit(1750562203.271:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.545561][ T30] audit: type=1326 audit(1750562203.271:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.573057][ T30] audit: type=1326 audit(1750562203.271:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.640874][ T30] audit: type=1326 audit(1750562203.271:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.712384][ T30] audit: type=1326 audit(1750562203.271:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.736179][ T30] audit: type=1326 audit(1750562204.061:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.771397][ T30] audit: type=1326 audit(1750562204.061:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12474 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 546.941803][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 546.995131][ T10] usb 5-1: USB disconnect, device number 116 [ 547.134836][ T30] audit: type=1326 audit(1750562204.471:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8ff8e929 code=0x7ffc0000 [ 547.185365][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1780'. [ 549.298242][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 549.456206][T12533] erspan0: entered promiscuous mode [ 549.479036][T12533] fuse: Bad value for 'group_id' [ 549.485728][T12533] fuse: Bad value for 'group_id' [ 549.498597][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 549.513122][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 549.528770][ T10] usb 5-1: config 0 has no interface number 0 [ 549.535449][ T10] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 549.561786][ T10] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 549.585346][T12537] netlink: 'syz.1.1789': attribute type 5 has an invalid length. [ 549.591829][ T10] usb 5-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 549.608439][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.651255][ T10] usb 5-1: Product: syz [ 549.664189][ T10] usb 5-1: Manufacturer: syz [ 549.678116][ T10] usb 5-1: SerialNumber: syz [ 549.742800][ T10] usb 5-1: config 0 descriptor?? [ 549.761379][T12542] loop2: detected capacity change from 0 to 7 [ 549.771129][T12530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.786298][T12530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.793761][T12543] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1790' sets config #0 [ 549.800081][T10628] Dev loop2: unable to read RDB block 7 [ 549.813139][T10628] loop2: AHDI p1 p2 p3 [ 549.817752][T10628] loop2: partition table partially beyond EOD, truncated [ 549.896698][T10628] loop2: p1 start 1601398130 is beyond EOD, truncated [ 549.917542][T10628] loop2: p2 start 1702059890 is beyond EOD, truncated [ 550.068408][ T5920] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 550.163516][T12530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 550.163635][T12530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 550.237470][ T5920] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 550.246257][ T5920] usb 2-1: config 4 has no interface number 0 [ 550.269163][ T5920] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 550.279348][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.319943][ T5920] usb 2-1: Product: syz [ 550.329394][ T5920] usb 2-1: Manufacturer: syz [ 550.334176][ T5920] usb 2-1: SerialNumber: syz [ 550.392456][ T10] asix 5-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 550.456948][ T5920] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 550.469660][ T10] asix 5-1:0.255: probe with driver asix failed with error -71 [ 550.514551][ T10] usb 5-1: USB disconnect, device number 117 [ 550.804923][T12559] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1795'. [ 550.821173][T12560] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1795'. [ 550.835030][ T5831] udevd[5831]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 550.896993][ T5920] vp7045: USB control message 'in' went wrong. [ 550.932020][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 550.958439][ T5920] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 551.026889][ T5920] usb 2-1: USB disconnect, device number 105 [ 551.211180][ T30] kauditd_printk_skb: 337 callbacks suppressed [ 551.211206][ T30] audit: type=1326 audit(1750562208.541:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.270787][ T1830] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 551.314994][ T30] audit: type=1326 audit(1750562208.591:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.353399][ T30] audit: type=1326 audit(1750562208.591:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.376980][ T30] audit: type=1326 audit(1750562208.591:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.399746][ T30] audit: type=1326 audit(1750562208.591:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.448151][ T1830] usb 3-1: Using ep0 maxpacket: 16 [ 551.452695][ T30] audit: type=1326 audit(1750562208.591:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.464876][ T1830] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 551.529256][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1799'. [ 551.590777][ T1830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.617137][ T30] audit: type=1326 audit(1750562208.591:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.618128][ T1830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.940758][ T30] audit: type=1326 audit(1750562208.591:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 551.943466][ T1830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.963367][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.987861][ T1830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.006590][ T1830] usb 3-1: Product: syz [ 552.011411][ T30] audit: type=1326 audit(1750562208.591:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc115f8d290 code=0x7ffc0000 [ 552.015722][ T1830] usb 3-1: Manufacturer: syz [ 552.048180][ T5892] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 552.066188][ T1830] usb 3-1: SerialNumber: syz [ 552.081138][ T30] audit: type=1326 audit(1750562208.591:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc115f8e929 code=0x7ffc0000 [ 552.238338][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 552.245652][ T5892] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.260488][ T5892] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 552.273735][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 552.294116][ T5892] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 552.308174][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.350171][ T5892] usb 2-1: config 0 descriptor?? [ 552.489462][ T1830] usb 3-1: 0:2 : does not exist [ 552.859380][ T5892] vrc2 0003:07C0:1125.0023: fixing up VRC-2 report descriptor [ 553.059595][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.059948][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.502370][ T5892] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0023/input/input40 [ 553.635829][ T5892] vrc2 0003:07C0:1125.0023: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 553.683024][ T5892] usb 2-1: USB disconnect, device number 106 [ 554.218243][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.239261][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.251417][T12587] fido_id[12587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 554.736083][ T1830] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 554.846312][ T1830] usb 3-1: USB disconnect, device number 84 [ 554.931739][T12613] CIFS: VFS: Malformed UNC in devname [ 554.950544][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.034613][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 555.378862][ T5892] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 555.409212][ T1830] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 555.518272][ T5892] usb 4-1: device descriptor read/64, error -71 [ 555.598471][ T1830] usb 3-1: Using ep0 maxpacket: 32 [ 555.611800][ T1830] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 555.648742][ T1830] usb 3-1: config 0 has no interface number 0 [ 555.655028][ T1830] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 555.667168][ T1830] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 555.687638][ T1830] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 555.698806][ T1830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.706843][ T1830] usb 3-1: Product: syz [ 555.711776][ T1830] usb 3-1: Manufacturer: syz [ 555.716405][ T1830] usb 3-1: SerialNumber: syz [ 555.766380][ T1830] usb 3-1: config 0 descriptor?? [ 555.772866][ T5892] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 555.779172][T12613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 555.792456][T12613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 555.850850][ T1830] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:ae:bb:9a:e7:36 [ 555.898317][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 555.938390][ T5892] usb 4-1: device descriptor read/64, error -71 [ 556.050400][ T5892] usb usb4-port1: attempt power cycle [ 556.198246][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 556.363542][T12638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'. [ 556.398334][ T5892] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 556.418901][ T5892] usb 4-1: device descriptor read/8, error -71 [ 556.658236][ T5892] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 556.681741][ T5892] usb 4-1: device descriptor read/8, error -71 [ 556.799751][ T5892] usb usb4-port1: unable to enumerate USB device [ 557.980844][ T5920] usb 3-1: USB disconnect, device number 85 [ 557.992135][ T5920] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 558.541355][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 558.553687][ T1830] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 558.573396][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 558.582498][ T10] usb 2-1: can't read configurations, error -71 [ 558.787866][ T1830] usb 4-1: Using ep0 maxpacket: 16 [ 559.197016][ T1830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 559.228437][ T1830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.278305][ T1830] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.297703][ T1830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.358211][ T1830] usb 4-1: Product: syz [ 559.372738][ T1830] usb 4-1: Manufacturer: syz [ 559.377407][ T1830] usb 4-1: SerialNumber: syz [ 559.419215][ T1830] usb 4-1: config 0 descriptor?? [ 559.457964][ T1830] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.488217][ T1830] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 559.853089][T12693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1824'. [ 560.028157][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 560.046402][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 560.070457][ T1830] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 560.098502][ T1830] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 560.208557][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 560.223221][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 560.262549][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.311815][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.339475][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.347596][ T10] usb 2-1: Product: syz [ 560.381979][ T10] usb 2-1: Manufacturer: syz [ 560.386687][ T10] usb 2-1: SerialNumber: syz [ 560.428923][ T10] usb 2-1: config 0 descriptor?? [ 560.463688][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 560.488146][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 561.044047][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 561.074595][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 561.112762][ T1830] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 561.172088][T12722] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 561.180240][T12722] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 561.358294][ T1830] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 561.373497][ T1830] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 561.534693][T12665] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 561.584724][ T1830] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 561.592067][ T1830] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 561.611012][ T1830] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 561.630964][ T1830] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 561.649908][ T1830] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 561.699520][ T1830] usb 4-1: USB disconnect, device number 111 [ 561.721320][ T10] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 561.951080][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 561.957985][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 561.970369][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 561.977157][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 561.984445][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 561.994786][ T10] usb 2-1: USB disconnect, device number 109 [ 562.209226][ T5892] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 562.369890][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.380821][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.416999][ T5892] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 562.426357][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 562.465097][ T5892] usb 5-1: SerialNumber: syz [ 562.676260][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.684844][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.084721][ T5892] usb 5-1: invalid UAC_HEADER (v1) [ 563.169765][ T5892] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 563.238210][ T5933] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 563.267778][ T5892] usb 5-1: USB disconnect, device number 118 [ 563.322493][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.368211][ T5933] usb 2-1: device descriptor read/64, error -71 [ 563.492013][T12736] bond0: entered promiscuous mode [ 563.619096][ T5933] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 563.699674][T10550] bond0 (unregistering): Released all slaves [ 563.802010][ T5933] usb 2-1: device descriptor read/64, error -71 [ 563.919184][ T5933] usb usb2-port1: attempt power cycle [ 564.333234][ T5933] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 564.359629][ T5933] usb 2-1: device descriptor read/8, error -71 [ 564.640559][ T5933] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 564.708384][ T5933] usb 2-1: device descriptor read/8, error -71 [ 564.818455][ T5933] usb usb2-port1: unable to enumerate USB device [ 565.008159][ T5892] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 565.238228][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.288381][ T5892] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 565.320143][ T5892] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 565.387805][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.506336][ T5892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.537047][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.580738][ T5892] usb 4-1: Product: syz [ 565.601004][ T5892] usb 4-1: Manufacturer: syz [ 565.608180][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 565.635832][ T5892] usb 4-1: SerialNumber: syz [ 565.783094][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 565.795064][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 565.837001][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 565.873103][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.885190][T12797] loop7: detected capacity change from 0 to 7 [ 565.893785][ T5831] Dev loop7: unable to read RDB block 7 [ 565.902009][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.908504][ T5892] usb 4-1: 0:2 : does not exist [ 565.910244][ T5831] loop7: unable to read partition table [ 565.933279][ T5892] usb 4-1: USB disconnect, device number 112 [ 565.940989][ T10] usb 3-1: Product: syz [ 565.945215][ T10] usb 3-1: Manufacturer: syz [ 565.954290][ T5831] loop7: partition table beyond EOD, truncated [ 566.147464][ T10] usb 3-1: SerialNumber: syz [ 566.158280][T12797] Dev loop7: unable to read RDB block 7 [ 566.170738][ T10] usb 3-1: config 0 descriptor?? [ 566.180816][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 566.193783][T12797] loop7: unable to read partition table [ 566.366070][T12797] loop7: partition table beyond EOD, truncated [ 566.384788][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.388116][T12797] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 566.462645][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 566.706869][T12804] IPVS: set_ctl: invalid protocol: 478 10.1.1.1:20002 [ 566.838324][ T5892] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 567.004853][ T5933] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 567.009116][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 567.082982][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 567.113354][ T5892] usb 2-1: Invalid ep0 maxpacket: 64 [ 567.245997][ T5933] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 567.255249][ T5933] usb 4-1: config 0 has no interface number 0 [ 567.266561][ T5933] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=84.1a [ 567.275973][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.287898][ T5933] usb 4-1: Product: syz [ 567.292544][ T5892] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 567.305845][ T5933] usb 4-1: Manufacturer: syz [ 567.311303][ T5933] usb 4-1: SerialNumber: syz [ 567.320444][ T5933] usb 4-1: config 0 descriptor?? [ 567.439832][ T5933] rtsx_usb 4-1:0.81: probe with driver rtsx_usb failed with error -8 [ 567.458309][ T5892] usb 2-1: Invalid ep0 maxpacket: 64 [ 567.466786][ T5892] usb usb2-port1: attempt power cycle [ 567.529941][ T5905] usb 4-1: USB disconnect, device number 113 [ 567.818626][ T5892] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 567.850190][ T5892] usb 2-1: Invalid ep0 maxpacket: 64 [ 567.978180][ T5892] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 567.998753][ T5892] usb 2-1: Invalid ep0 maxpacket: 64 [ 568.004305][ T5892] usb usb2-port1: unable to enumerate USB device [ 568.086670][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 568.086689][ T30] audit: type=1326 audit(1750562225.421:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12809 comm="syz.3.1854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd89598e929 code=0x80000000 [ 568.123450][ T10] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 568.539016][T12795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.778323][ T10] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 568.790728][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 568.965207][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 568.977547][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 568.988695][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 569.002819][ T10] usb 3-1: USB disconnect, device number 86 [ 569.678276][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 569.883142][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'. [ 569.940429][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 570.033875][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 570.093541][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.134148][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 570.287414][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 570.313310][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.340503][ T10] usb 4-1: Product: syz [ 570.354957][ T10] usb 4-1: Manufacturer: syz [ 570.372462][ T10] usb 4-1: SerialNumber: syz [ 570.590828][ T5905] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 570.718172][T12818] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 570.771681][ T5905] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 570.787385][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.848572][ T5905] usb 3-1: Product: syz [ 570.866389][ T5905] usb 3-1: Manufacturer: syz [ 570.886945][ T5905] usb 3-1: SerialNumber: syz [ 570.932570][ T5905] usb 3-1: config 0 descriptor?? [ 572.042472][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 572.138214][ T5920] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 572.262801][T12826] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 572.285605][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 572.326044][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 572.337621][ T5920] usb 5-1: device descriptor read/64, error -71 [ 572.475632][ T10] usb 4-1: USB disconnect, device number 114 [ 572.494478][ T5905] asix 3-1:0.0: probe with driver asix failed with error -71 [ 572.545454][ T5905] usb 3-1: USB disconnect, device number 87 [ 572.738594][ T5920] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 572.878407][ T5920] usb 5-1: device descriptor read/64, error -71 [ 572.987264][ T30] audit: type=1326 audit(1750562230.321:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 573.022402][ T5920] usb usb5-port1: attempt power cycle [ 573.040709][ T30] audit: type=1326 audit(1750562230.321:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 573.068331][ T30] audit: type=1326 audit(1750562230.361:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 573.092829][ T30] audit: type=1326 audit(1750562230.361:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 573.117155][ T30] audit: type=1326 audit(1750562230.361:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 573.117407][T12850] fuse: Unknown parameter 'yqE h*E3":A:y*9g{i2 [ 573.117407][T12850] X+Y.>1Ҧԁ<A.R' [ 573.144229][ T30] audit: type=1326 audit(1750562230.361:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.182983][ T30] audit: type=1326 audit(1750562230.361:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.207186][ T30] audit: type=1326 audit(1750562230.361:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.230389][ T30] audit: type=1326 audit(1750562230.361:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.255155][ T30] audit: type=1326 audit(1750562230.361:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.279706][T12857] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 573.287140][T12857] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 573.300588][ T30] audit: type=1326 audit(1750562230.361:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.327995][ T30] audit: type=1326 audit(1750562230.361:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.377971][ T30] audit: type=1326 audit(1750562230.361:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.1.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1cdb8e52b code=0x7ffc0000 [ 573.400846][ T5920] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 573.438966][ T5920] usb 5-1: device descriptor read/8, error -71 [ 573.656423][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 573.682041][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 573.701219][ T5920] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 573.739213][ T5920] usb 5-1: device descriptor read/8, error -71 [ 573.858766][ T5920] usb usb5-port1: unable to enumerate USB device [ 574.168161][ T5892] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 574.328145][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 574.346378][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.510828][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.530511][ T5892] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 574.557232][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 574.576073][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.595487][ T5892] usb 2-1: Product: syz [ 574.602618][ T5892] usb 2-1: Manufacturer: syz [ 574.614494][ T5892] usb 2-1: SerialNumber: syz [ 575.098531][ T5933] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 575.113413][T12894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1880'. [ 575.114958][T12893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1880'. [ 575.189250][T12890] loop8: detected capacity change from 1 to 0 [ 575.258290][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 575.272966][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 575.310803][ T5933] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 575.341409][ T5933] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 575.354952][ T5933] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 575.368908][ T5933] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 575.379741][ T5933] usb 4-1: config 1 interface 0 has no altsetting 0 [ 575.387026][ T5933] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 575.397196][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.430648][ T5933] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 575.590579][ T43] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 575.629319][T12886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.638743][T12886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.692999][ T5933] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 575.707474][ T5933] usb 4-1: USB disconnect, device number 115 [ 575.750537][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 575.757431][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.768579][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 575.777670][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.789542][ T43] usb 3-1: config 0 descriptor?? [ 575.807292][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 576.150473][ T43] gspca_vc032x: reg_r err -71 [ 576.169276][ T43] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 576.187429][ T43] usb 3-1: USB disconnect, device number 88 [ 576.280361][T12912] fuse: Bad value for 'user_id' [ 576.285280][T12912] fuse: Bad value for 'user_id' [ 576.292773][T12912] fuse: Bad value for 'fd' [ 576.355951][T12916] fuse: Bad value for 'fd' [ 576.688203][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 576.876898][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 576.892016][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.023105][ T43] usb 3-1: Product: syz [ 577.043342][ T5892] usb 2-1: USB disconnect, device number 118 [ 577.061380][ T43] usb 3-1: Manufacturer: syz [ 577.066194][ T43] usb 3-1: SerialNumber: syz [ 577.244738][ T43] usb 3-1: config 0 descriptor?? [ 577.677246][ T43] usb 3-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 577.889409][ T43] usb 3-1: Read permanent extended address 9a:c2:40:7a:db:ee:53:6d from device [ 577.904086][T12933] sctp: [Deprecated]: syz.4.1892 (pid 12933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.904086][T12933] Use struct sctp_sack_info instead [ 578.115356][T12914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.176906][T12914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.293712][ T43] usb 3-1: USB disconnect, device number 89 [ 578.371707][T12940] x_tables: unsorted entry at hook 2 [ 578.831767][ T5892] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 579.584086][ T5892] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.594277][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.877901][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 579.916697][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.985176][ T5892] usb 2-1: config 0 descriptor?? [ 580.446884][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.460804][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.491109][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 580.497232][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 580.550817][ T5892] usb 2-1: USB disconnect, device number 119 [ 580.944978][T12964] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1899'. [ 581.035681][T12960] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 581.278966][ T43] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 581.348538][ T5892] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 581.430975][ T43] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 581.444392][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.455420][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 581.499587][ T5892] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 581.511469][ T5892] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 581.608740][ T5892] usb 3-1: config 220 has no interface number 2 [ 581.625945][ T43] usb 5-1: config 1 has no interface number 0 [ 581.645509][ T5892] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 581.659091][ T43] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.704034][ T43] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.717610][ T5892] usb 3-1: config 220 interface 0 has no altsetting 0 [ 581.727760][ T5892] usb 3-1: config 220 interface 76 has no altsetting 0 [ 581.740245][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.826467][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.836031][ T5892] usb 3-1: config 220 interface 1 has no altsetting 0 [ 581.845351][ T43] usb 5-1: Product: syz [ 581.852782][ T5892] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 581.865686][ T43] usb 5-1: Manufacturer: syz [ 581.870941][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.881413][ T43] usb 5-1: SerialNumber: syz [ 581.887502][ T5892] usb 3-1: Product: syz [ 581.899309][ T43] cdc_wdm 5-1:1.128: skipping garbage [ 582.030346][ T5892] usb 3-1: Manufacturer: syz [ 582.035029][ T5892] usb 3-1: SerialNumber: syz [ 582.042092][ T43] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 582.051535][ T43] cdc_wdm 5-1:1.128: Unknown control protocol [ 582.141996][ T10] usb 5-1: USB disconnect, device number 123 [ 582.275255][ T5892] usb 3-1: selecting invalid altsetting 0 [ 582.289212][ T5892] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 582.295621][ T5892] usb 3-1: No valid video chain found. [ 582.357938][ T5892] usb 3-1: selecting invalid altsetting 0 [ 582.364166][ T5892] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 582.391330][ T5892] usb 3-1: USB disconnect, device number 90 [ 582.439876][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1903'. [ 582.884167][T12983] sctp: [Deprecated]: syz.2.1905 (pid 12983) Use of int in max_burst socket option deprecated. [ 582.884167][T12983] Use struct sctp_assoc_value instead [ 583.188162][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 583.463384][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 583.483586][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.588460][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.705904][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 583.736350][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.958579][ T10] usb 3-1: config 0 descriptor?? [ 584.065517][T12989] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 584.416276][ T10] zydacron 0003:13EC:0006.0024: item fetching failed at offset 0/2 [ 584.434190][ T10] zydacron 0003:13EC:0006.0024: parse failed [ 584.510885][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1908'. [ 584.528966][T12996] input: syz0 as /devices/virtual/input/input41 [ 584.564247][ T10] zydacron 0003:13EC:0006.0024: probe with driver zydacron failed with error -22 [ 584.630480][ T10] usb 3-1: USB disconnect, device number 91 [ 585.458285][ T43] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 585.863800][T13019] vivid-000: disconnect [ 585.868280][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.868310][ T43] usb 2-1: config 0 has no interface number 0 [ 585.868353][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 585.868379][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 585.868423][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 585.884577][T13018] vivid-000: reconnect [ 585.904451][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.068310][T13016] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 586.127555][ T43] usb 2-1: config 0 descriptor?? [ 586.135381][T13006] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 586.159044][ T43] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 586.173136][T13019] input: syz0 as /devices/virtual/input/input42 [ 586.368893][ T5905] usb 2-1: USB disconnect, device number 120 [ 587.037451][T13029] fuse: Bad value for 'user_id' [ 587.042547][T13029] fuse: Bad value for 'user_id' [ 587.049838][T13029] fuse: Bad value for 'fd' [ 587.829195][ T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 587.988318][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 587.995083][ T43] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 588.008137][ T43] usb 2-1: config 0 has no interface number 0 [ 588.164670][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.196134][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 588.358620][ T43] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 588.383789][ T43] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.407719][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.427001][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.452498][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 588.452517][ T30] audit: type=1326 audit(1750562245.781:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.4.1924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc115f8e929 code=0x0 [ 588.469786][ T43] usb 2-1: config 0 descriptor?? [ 588.502352][ T43] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 588.993843][ T43] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 589.303597][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 589.317634][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 589.331118][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 589.342096][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.352045][ T43] usb 3-1: config 1 has no interface number 1 [ 589.444268][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.454222][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.480689][ T43] usb 3-1: Product: syz [ 589.493553][ T43] usb 3-1: Manufacturer: syz [ 589.506844][ T43] usb 3-1: SerialNumber: syz [ 590.001803][T13067] netlink: 'syz.0.1926': attribute type 10 has an invalid length. [ 590.053083][T13067] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.117141][T13067] bond0: (slave team0): Enslaving as an active interface with an up link [ 590.489087][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 590.545493][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 590.547274][ T5892] usb 2-1: USB disconnect, device number 121 [ 590.579123][ T5892] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 590.814137][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 590.847768][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 590.888955][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.074060][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.137241][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.149532][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.189393][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.203778][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 591.582278][T13084] loop7: detected capacity change from 0 to 7 [ 591.590751][T13084] Dev loop7: unable to read RDB block 7 [ 591.596631][T13084] loop7: unable to read partition table [ 591.603091][T13084] loop7: partition table beyond EOD, truncated [ 591.612592][T13084] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 592.049089][ T43] usb 3-1: 2:1 : unsupported format bits 0x80 [ 592.178512][ T43] usb 3-1: USB disconnect, device number 92 [ 592.207499][T13093] netlink: 'syz.3.1934': attribute type 280 has an invalid length. [ 592.265734][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.518766][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 592.556805][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.574049][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.648816][ T10] usb 4-1: device descriptor read/64, error -71 [ 592.718215][ T43] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 592.734842][T13098] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 592.734867][T13098] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 592.788166][ T5905] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 592.868239][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 592.870108][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.888323][ T43] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 592.888355][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.893258][ T43] usb 3-1: config 0 descriptor?? [ 592.908143][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 592.933021][ T5905] usb 2-1: device descriptor read/64, error -71 [ 593.068913][ T10] usb 4-1: device descriptor read/64, error -71 [ 593.139276][T13097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.139661][T13097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.144671][ T43] usb 3-1: USB disconnect, device number 93 [ 593.189962][ T10] usb usb4-port1: attempt power cycle [ 593.202758][ T5905] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 593.328190][ T5905] usb 2-1: device descriptor read/64, error -71 [ 593.439513][ T5905] usb usb2-port1: attempt power cycle [ 593.548404][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 593.572341][ T10] usb 4-1: device descriptor read/8, error -71 [ 593.778347][ T5905] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 593.803217][ T5905] usb 2-1: device descriptor read/8, error -71 [ 593.818435][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 593.843664][ T10] usb 4-1: device descriptor read/8, error -71 [ 593.948719][ T10] usb usb4-port1: unable to enumerate USB device [ 593.976321][T13115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 593.994734][T13115] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 593.995107][T13115] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 593.995203][T13115] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 593.995295][T13115] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 593.995335][T13115] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 593.995374][T13115] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 593.995463][T13115] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 593.995563][T13115] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 594.052395][ T5905] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 594.067198][T13115] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 594.150479][ T5905] usb 2-1: device descriptor read/8, error -71 [ 594.171738][T13115] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 594.261038][ T5905] usb usb2-port1: unable to enumerate USB device [ 594.638200][ T5920] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 594.788250][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 594.791242][ T5920] usb 3-1: config 0 has no interfaces? [ 594.800746][ T5920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.800778][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.805437][ T5920] usb 3-1: config 0 descriptor?? [ 595.788178][ T5920] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 595.918151][ T5892] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 595.958913][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.983009][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 595.995130][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 596.008615][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.024526][ T5920] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 596.034252][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 596.042833][ T5920] usb 4-1: Product: syz [ 596.047269][ T5920] usb 4-1: Manufacturer: syz [ 596.052414][ T5920] usb 4-1: SerialNumber: syz [ 596.061482][ T5920] usb 4-1: config 0 descriptor?? [ 596.081719][ T5920] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 596.089746][ T5920] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 596.091907][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.100023][ T5920] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 596.139605][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.169839][ T5892] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.179077][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.187094][ T5892] usb 2-1: SerialNumber: syz [ 596.396095][T13134] loop6: detected capacity change from 0 to 7 [ 596.405952][T13135] sctp: [Deprecated]: syz.3.1943 (pid 13135) Use of int in max_burst socket option. [ 596.405952][T13135] Use struct sctp_assoc_value instead [ 596.427909][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.437830][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.511774][T13134] Dev loop6: unable to read RDB block 7 [ 596.517866][T13134] loop6: AHDI p1 p2 [ 596.569480][T13134] loop6: partition table partially beyond EOD, truncated [ 596.576836][T13134] loop6: p1 start 926365495 is beyond EOD, truncated [ 597.036537][ T5892] usb 2-1: 0:2 : does not exist [ 597.074143][ T5892] usb 2-1: USB disconnect, device number 126 [ 597.182137][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.450425][ T5920] usb 3-1: USB disconnect, device number 94 [ 597.568652][ T5892] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 597.738264][ T43] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 597.772948][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.784536][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 597.795815][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.825405][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.839075][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.848238][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.870475][ T5892] usb 2-1: config 0 descriptor?? [ 597.885286][T13143] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 597.918598][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 597.928542][ T43] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 597.944135][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.213211][ T43] usb 5-1: Product: syz [ 598.240696][ T43] usb 5-1: Manufacturer: syz [ 598.256234][ T43] usb 5-1: SerialNumber: syz [ 598.287671][ T43] usb 5-1: config 0 descriptor?? [ 598.326399][ T43] ipw 5-1:0.0: IPWireless converter converter detected [ 598.712044][ T43] usb 4-1: USB disconnect, device number 120 [ 599.006559][ T5838] Bluetooth: hci4: SCO packet for unknown connection handle 100 [ 599.118238][ T5905] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 599.170803][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 599.176984][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 599.190942][ T5892] usb 2-1: USB disconnect, device number 127 [ 599.215314][T13170] fuse: Bad value for 'rootmode' [ 599.308213][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 599.315566][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.327200][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.338273][ T5905] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 599.356595][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.402751][ T5905] usb 3-1: config 0 descriptor?? [ 600.143565][ T5905] usbhid 3-1:0.0: can't add hid device: -71 [ 600.157361][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 600.210715][ T5905] usb 3-1: USB disconnect, device number 95 [ 600.528359][ T5892] usb 5-1: USB disconnect, device number 124 [ 600.539304][ T5892] ipw 5-1:0.0: device disconnected [ 600.594632][ T30] audit: type=1326 audit(1750562257.921:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13181 comm="syz.1.1959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1cdb8e929 code=0x0 [ 601.038659][ T5892] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 601.278121][ T5905] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 601.317777][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 601.324268][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 601.336257][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 601.379816][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 601.392040][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.418209][ T5892] usb 5-1: Product: syz [ 601.422685][ T5892] usb 5-1: Manufacturer: syz [ 601.427271][ T5892] usb 5-1: SerialNumber: syz [ 601.448905][ T5892] usb 5-1: config 0 descriptor?? [ 601.500455][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 601.524746][ T5892] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 601.538533][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 601.547791][ T5905] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 601.565255][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.581397][ T5905] usb 3-1: config 0 descriptor?? [ 601.838379][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 602.110454][ T5892] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 602.118010][ T5892] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 602.465743][T13208] __nla_validate_parse: 23 callbacks suppressed [ 602.465762][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 602.536097][T13208] bond2: entered promiscuous mode [ 602.544700][T13208] bond2: entered allmulticast mode [ 602.586370][T13208] bond2 (unregistering): Released all slaves [ 602.598917][T13228] fuse: Bad value for 'rootmode' [ 602.672291][ T30] audit: type=1326 audit(1750562260.011:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13218 comm="syz.3.1969" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89598e929 code=0x0 [ 602.816121][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 602.857536][ T5905] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 602.910466][ T5905] asix 3-1:0.0: probe with driver asix failed with error -71 [ 602.946049][ T5892] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 602.952972][ T5905] usb 3-1: USB disconnect, device number 96 [ 602.954552][ T5892] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 602.972621][ T5892] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 603.002616][ T5892] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 603.032698][ T5892] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 603.048440][ T5892] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 603.073814][ T5892] usb 5-1: USB disconnect, device number 125 [ 603.819781][ T5905] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 603.958246][ T5905] usb 3-1: device descriptor read/64, error -71 [ 604.268317][ T5905] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 604.398281][ T5905] usb 3-1: device descriptor read/64, error -71 [ 604.405989][T13248] netlink: 'syz.4.1975': attribute type 8 has an invalid length. [ 604.508622][ T5905] usb usb3-port1: attempt power cycle [ 604.668333][ T5892] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 604.822272][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.848172][ T5905] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 604.848194][ T5892] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 604.885089][ T5892] usb 5-1: config 1 has no interface number 1 [ 604.892603][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 604.899032][ T5905] usb 3-1: device descriptor read/8, error -71 [ 604.907176][ T5892] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 604.925273][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.935057][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.943521][ T5892] usb 5-1: Product: syz [ 604.947835][ T5892] usb 5-1: Manufacturer: syz [ 604.952966][ T5892] usb 5-1: SerialNumber: syz [ 605.190532][ T5905] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 605.192763][ T5892] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 605.229957][ T5905] usb 3-1: device descriptor read/8, error -71 [ 605.233188][T13264] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:21 [ 605.246220][ T5892] usb 5-1: USB disconnect, device number 126 [ 605.348641][ T5905] usb usb3-port1: unable to enumerate USB device [ 605.519610][T13268] fuse: Bad value for 'rootmode' [ 606.744267][T13277] gtp0: entered promiscuous mode [ 606.757729][T13277] gtp0: entered allmulticast mode [ 607.348810][ T5920] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 607.514682][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 607.526203][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.539413][ T5920] usb 5-1: config 0 descriptor?? [ 607.830759][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 607.980821][T13301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.044648][ T5920] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 608.054410][ T5920] cp210x 5-1:0.0: querying part number failed [ 608.071041][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 608.760868][ T43] usb 5-1: USB disconnect, device number 127 [ 608.774711][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 608.783322][ T5892] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 608.791825][ T43] cp210x 5-1:0.0: device disconnected [ 608.909579][T13314] kvm: MWAIT instruction emulated as NOP! [ 608.948577][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 608.956026][ T5892] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 608.964824][ T5892] usb 3-1: config 0 has no interface number 0 [ 608.971998][ T5892] usb 3-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 608.983661][ T5892] usb 3-1: config 0 interface 244 has no altsetting 0 [ 609.000159][ T5892] usb 3-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 609.012569][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.021792][ T5892] usb 3-1: Product: syz [ 609.036444][ T5892] usb 3-1: Manufacturer: syz [ 609.045098][ T5892] usb 3-1: SerialNumber: syz [ 609.063815][ T5892] usb 3-1: config 0 descriptor?? [ 609.084762][ T5892] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort found [ 609.285343][ T5892] snd_usb_toneport 3-1:0.244: cannot get proper max packet size [ 609.288205][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 609.293961][ T5892] snd_usb_toneport 3-1:0.244: Line 6 GuitarPort now disconnected [ 609.317857][ T5892] snd_usb_toneport 3-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 609.458168][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 609.486327][ T10] usb 3-1: USB disconnect, device number 101 [ 609.500032][ T5920] usb 5-1: config 8 has an invalid interface number: 134 but max is 0 [ 609.513117][ T5920] usb 5-1: config 8 has no interface number 0 [ 609.521076][ T5920] usb 5-1: config 8 interface 134 has no altsetting 0 [ 609.533359][ T5920] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 609.548416][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.558323][ T5920] usb 5-1: Product: syz [ 609.562912][ T5920] usb 5-1: Manufacturer: syz [ 609.568409][ T5920] usb 5-1: SerialNumber: syz [ 609.592837][T13323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1997'. [ 609.803694][ T5920] gspca_main: benq-2.14.0 probing 04a5:3035 [ 609.817608][ T5920] usb 5-1: USB disconnect, device number 2 [ 610.423578][T13334] fuse: Bad value for 'rootmode' [ 610.506588][ T30] audit: type=1326 audit(1750562267.841:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cdb2ab19 code=0x7ffc0000 [ 610.558500][ T30] audit: type=1326 audit(1750562267.841:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.592235][ T30] audit: type=1326 audit(1750562267.841:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.622575][ T30] audit: type=1326 audit(1750562267.841:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.653408][ T30] audit: type=1326 audit(1750562267.841:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.681302][ T30] audit: type=1326 audit(1750562267.841:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.707710][ T30] audit: type=1326 audit(1750562267.841:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.748585][ T30] audit: type=1326 audit(1750562267.841:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cdb2ab19 code=0x7ffc0000 [ 610.778990][ T30] audit: type=1326 audit(1750562267.841:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cdb2ab19 code=0x7ffc0000 [ 610.801819][ T5920] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 610.817782][ T30] audit: type=1326 audit(1750562267.841:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13329 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 610.981220][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.997548][ T5920] usb 5-1: not running at top speed; connect to a high speed hub [ 611.026629][ T5920] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 611.036008][ T5920] usb 5-1: config 3 has no interface number 0 [ 611.056190][ T5920] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 611.074669][ T5920] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 611.086323][ T5920] usb 5-1: config 3 interface 106 has no altsetting 0 [ 611.101331][ T5920] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 611.123377][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.162246][ T5920] usb 5-1: Product: syz [ 611.166572][ T5920] usb 5-1: Manufacturer: syz [ 611.182296][ T5920] usb 5-1: SerialNumber: syz [ 611.204011][T13333] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 611.244245][T13333] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 611.498940][ T5920] kobil_sct 5-1:3.106: KOBIL USB smart card terminal converter detected [ 611.646424][ T5920] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 611.667968][ T5920] usb 5-1: USB disconnect, device number 3 [ 611.687973][ T5920] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 611.755563][ T5920] kobil_sct 5-1:3.106: device disconnected [ 612.270174][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2011'. [ 612.301445][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2011'. [ 612.455801][T13371] fuse: Bad value for 'group_id' [ 612.475010][T13371] fuse: Bad value for 'group_id' [ 612.528241][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 612.764736][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 612.777351][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.793013][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.924139][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 613.103457][ T5892] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 613.140212][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.206545][ T5892] usb 5-1: config 0 descriptor?? [ 613.431312][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.451852][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.612121][T13381] usb usb8: usbfs: process 13381 (syz.2.2016) did not claim interface 0 before use [ 613.768577][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 613.808709][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 613.878870][ T5892] usb 5-1: USB disconnect, device number 4 [ 614.020894][T13390] fuse: Bad value for 'user_id' [ 614.025814][T13390] fuse: Bad value for 'user_id' [ 614.032994][T13390] fuse: Bad value for 'fd' [ 614.235983][T13391] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 615.738421][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 615.791544][T13408] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.800687][T13408] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.809853][T13408] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.818710][T13408] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.856027][T13408] vxlan1: entered promiscuous mode [ 615.884305][T13410] usb usb8: usbfs: process 13410 (syz.2.2021) did not claim interface 0 before use [ 616.714703][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.732249][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.741514][T13421] fuse: Bad value for 'rootmode' [ 616.948131][ T5892] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 617.118105][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 617.137518][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 617.155375][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 617.195823][ T5892] usb 3-1: can't read configurations, error -22 [ 617.378267][ T5892] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 617.568184][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 617.575812][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 617.584356][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 617.593229][ T5892] usb 3-1: can't read configurations, error -22 [ 617.600155][ T5892] usb usb3-port1: attempt power cycle [ 617.684905][T13427] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 618.068174][ T5892] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 618.125940][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 618.137291][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 618.155119][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 618.184138][ T5892] usb 3-1: can't read configurations, error -22 [ 618.268289][ T5905] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 618.338396][ T5892] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 618.399188][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 618.428185][ T5892] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 618.438163][ T5892] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 618.440739][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 618.446704][ T5892] usb 3-1: can't read configurations, error -22 [ 618.470369][ T5892] usb usb3-port1: unable to enumerate USB device [ 618.480337][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.489480][ T5905] usb 4-1: config 7 has an invalid interface number: 48 but max is 0 [ 618.500026][ T5905] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 618.528151][ T5905] usb 4-1: config 7 has no interface number 0 [ 618.554663][ T5905] usb 4-1: config 7 interface 48 has no altsetting 0 [ 618.585766][ T5905] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 618.608192][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.638213][ T5934] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 618.649023][ T5905] usb 4-1: Product: syz [ 618.677247][ T5905] usb 4-1: Manufacturer: syz [ 618.682815][ T5905] usb 4-1: SerialNumber: syz [ 618.800225][ T5934] usb 5-1: config 0 has no interfaces? [ 618.820731][ T5934] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 618.830030][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.844524][ T5934] usb 5-1: Product: syz [ 618.851106][ T5934] usb 5-1: Manufacturer: syz [ 618.855909][ T5934] usb 5-1: SerialNumber: syz [ 618.883124][ T5934] usb 5-1: config 0 descriptor?? [ 619.012780][ T5905] cdc_phonet 4-1:7.48: probe with driver cdc_phonet failed with error -22 [ 619.125156][ T5905] usb 4-1: USB disconnect, device number 121 [ 620.088410][ T5905] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 620.188256][ T5920] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 620.310347][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 620.328336][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 620.339565][ T5905] usb 4-1: can't read configurations, error -61 [ 620.388121][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 620.506704][ T5920] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 620.537972][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.553158][ T5920] usb 3-1: Product: syz [ 620.557450][ T5920] usb 3-1: Manufacturer: syz [ 620.562229][ T5920] usb 3-1: SerialNumber: syz [ 620.615279][T13461] batadv0: entered promiscuous mode [ 620.628321][ T5905] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 620.656898][ T5920] usb 3-1: config 0 descriptor?? [ 620.798223][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 620.816658][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 620.879588][T13463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2038'. [ 620.961906][ T5920] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 620.973111][ T5905] usb 4-1: can't read configurations, error -61 [ 620.980132][ T5905] usb usb4-port1: attempt power cycle [ 621.338218][ T5905] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 621.369361][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 621.376470][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 621.385039][ T5905] usb 4-1: can't read configurations, error -61 [ 621.518422][ T5905] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 621.544817][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 621.554077][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 621.562331][ T5905] usb 4-1: can't read configurations, error -61 [ 621.571435][ T5905] usb usb4-port1: unable to enumerate USB device [ 622.017567][ T5934] usb 5-1: USB disconnect, device number 5 [ 622.217438][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 622.217456][ T30] audit: type=1326 audit(1750562279.551:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.247365][ T30] audit: type=1326 audit(1750562279.551:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.276005][ T30] audit: type=1326 audit(1750562279.591:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.305617][ T30] audit: type=1326 audit(1750562279.591:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.334201][ T30] audit: type=1326 audit(1750562279.591:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.372038][ T30] audit: type=1326 audit(1750562279.611:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.394435][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.403834][ T30] audit: type=1326 audit(1750562279.611:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.426383][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.432894][ T30] audit: type=1326 audit(1750562279.611:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.461496][ T30] audit: type=1326 audit(1750562279.611:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13478 comm="syz.1.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc1cdb8e929 code=0x7ffc0000 [ 622.805100][T13489] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2046'. [ 622.851073][T13489] create_pit_timer: 22 callbacks suppressed [ 622.851093][T13489] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 623.046538][ T30] audit: type=1326 audit(1750562280.361:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89598e929 code=0x0 [ 623.291529][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.301401][T13505] batadv_slave_0: entered promiscuous mode [ 623.660824][ T5920] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 623.697498][ T5920] usb 3-1: USB disconnect, device number 106 [ 623.831790][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 624.112305][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.123097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.262099][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2053'. [ 624.778397][T13538] loop7: detected capacity change from 0 to 7 [ 624.802093][T13538] Dev loop7: unable to read RDB block 7 [ 624.809156][T13538] loop7: unable to read partition table [ 624.815420][T13538] loop7: partition table beyond EOD, truncated [ 624.834554][T13538] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 624.986433][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2058'. [ 625.588186][ T5920] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 625.758212][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 625.768408][ T5920] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 625.777161][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.789746][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 625.802213][ T5920] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 625.811720][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.819961][ T5920] usb 3-1: Product: syz [ 625.824194][ T5920] usb 3-1: Manufacturer: syz [ 625.828915][ T5920] usb 3-1: SerialNumber: syz [ 626.038818][ T5920] usb 3-1: 0:2 : does not exist [ 626.076980][T13549] syzkaller1: entered promiscuous mode [ 626.082656][T13549] syzkaller1: entered allmulticast mode [ 626.256619][ T5920] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 626.828612][ T5934] usb 3-1: USB disconnect, device number 107 [ 626.853918][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 626.906728][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 627.078128][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 627.239831][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 627.246594][ T5920] usb 2-1: config 0 has an invalid interface number: 184 but max is 11 [ 627.257463][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 627.267006][ T5920] usb 2-1: config 0 has no interface number 0 [ 627.273349][ T5920] usb 2-1: config 0 interface 184 has no altsetting 0 [ 627.283506][ T5920] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 627.292677][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.304114][ T5920] usb 2-1: Product: syz [ 627.308422][ T5934] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 627.312868][ T5920] usb 2-1: Manufacturer: syz [ 627.328067][ T5920] usb 2-1: SerialNumber: syz [ 627.339610][ T5920] usb 2-1: config 0 descriptor?? [ 627.351758][ T5920] smsc75xx v1.0.0 [ 627.445060][T13580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2068'. [ 627.477048][ T5934] usb 3-1: config 0 has no interfaces? [ 627.494918][ T5934] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 627.506159][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.514385][ T5934] usb 3-1: Product: syz [ 627.518737][ T5934] usb 3-1: Manufacturer: syz [ 627.523402][ T5934] usb 3-1: SerialNumber: syz [ 627.531002][ T5934] usb 3-1: config 0 descriptor?? [ 627.718225][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 627.757994][ T5920] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 627.769812][ T5920] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 627.783157][ T5920] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 627.793910][ T5920] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 627.858362][ T43] usb 5-1: device descriptor read/64, error -71 [ 628.108253][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 628.124804][T13584] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 628.258129][ T43] usb 5-1: device descriptor read/64, error -71 [ 628.378643][ T43] usb usb5-port1: attempt power cycle [ 628.675207][T13602] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2064'. [ 628.684625][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 628.728110][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 628.844731][ T43] usb 5-1: device descriptor read/8, error -71 [ 629.088260][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 629.119206][ T43] usb 5-1: device descriptor read/8, error -71 [ 629.235578][T13615] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2079'. [ 629.245543][ T43] usb usb5-port1: unable to enumerate USB device [ 629.924896][ T43] usb 2-1: USB disconnect, device number 2 [ 630.014715][ T5920] usb 3-1: USB disconnect, device number 108 [ 630.698379][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 630.861085][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.874861][ T43] usb 2-1: config 250 has an invalid interface number: 150 but max is 0 [ 630.886408][ T43] usb 2-1: config 250 has no interface number 0 [ 630.897904][ T43] usb 2-1: config 250 interface 150 has no altsetting 0 [ 630.912546][ T43] usb 2-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=e2.bf [ 630.923004][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.942046][ T43] usb 2-1: Product: syz [ 630.950251][ T43] usb 2-1: Manufacturer: syz [ 630.954997][ T43] usb 2-1: SerialNumber: syz [ 631.175077][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.186735][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.235067][ T43] usb 2-1: USB disconnect, device number 3 [ 631.618265][ T5920] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 631.784992][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.795077][ T5920] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.806842][ T5920] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.846101][T13671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2096'. [ 631.935625][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 631.976765][T13678] fuse: Unknown parameter 'x$^:&fd' [ 631.983005][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.000958][ T5920] usb 3-1: Product: syz [ 632.013230][ T5920] usb 3-1: Manufacturer: syz [ 632.024571][ T5920] usb 3-1: SerialNumber: syz [ 632.046925][ T5920] hub 3-1:1.0: bad descriptor, ignoring hub [ 632.056884][ T5920] hub 3-1:1.0: probe with driver hub failed with error -5 [ 632.254480][ T5920] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 632.478165][ T1830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 632.558290][T13692] fuse: Bad value for 'user_id' [ 632.563200][T13692] fuse: Bad value for 'user_id' [ 632.570290][T13692] fuse: Bad value for 'fd' [ 632.750384][ T1830] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.768328][ T1830] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 632.779684][ T1830] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.808226][ T1830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.836398][T13687] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 632.852569][ T1830] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.154088][ T1830] usb 2-1: USB disconnect, device number 4 [ 633.289406][T13666] usb 3-1: reset high-speed USB device number 109 using dummy_hcd [ 633.472281][T13666] usb 3-1: device firmware changed [ 633.497107][ T43] usb 3-1: USB disconnect, device number 109 [ 633.513476][ T43] usblp0: removed [ 633.658169][ T43] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 633.829499][ T43] usb 3-1: config 0 has no interfaces? [ 633.835088][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.844827][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.857284][ T43] usb 3-1: config 0 descriptor?? [ 634.102638][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 634.116360][T13666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.141407][ T1830] usb 3-1: USB disconnect, device number 110 [ 634.307955][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 634.307976][ T30] audit: type=1326 audit(1750562291.621:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13708 comm="syz.3.2107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89598e929 code=0x0 [ 634.628596][T13723] FAULT_INJECTION: forcing a failure. [ 634.628596][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.678253][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.4.2110 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 634.678281][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.678294][T13723] Call Trace: [ 634.678303][T13723] [ 634.678312][T13723] dump_stack_lvl+0x189/0x250 [ 634.678347][T13723] ? __pfx____ratelimit+0x10/0x10 [ 634.678376][T13723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.678406][T13723] ? __pfx__printk+0x10/0x10 [ 634.678438][T13723] should_fail_ex+0x414/0x560 [ 634.678467][T13723] strncpy_from_user+0x36/0x290 [ 634.678495][T13723] getname_flags+0xf3/0x540 [ 634.678522][T13723] path_listxattrat+0xd4/0x3a0 [ 634.678552][T13723] ? __pfx_path_listxattrat+0x10/0x10 [ 634.678575][T13723] ? rcu_is_watching+0x15/0xb0 [ 634.678607][T13723] ? do_syscall_64+0xbe/0x3b0 [ 634.678628][T13723] do_syscall_64+0xfa/0x3b0 [ 634.678643][T13723] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.678671][T13723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.678689][T13723] ? clear_bhb_loop+0x60/0xb0 [ 634.678712][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.678730][T13723] RIP: 0033:0x7fc115f8e929 [ 634.678747][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.678765][T13723] RSP: 002b:00007fc116d93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 634.678784][T13723] RAX: ffffffffffffffda RBX: 00007fc1161b5fa0 RCX: 00007fc115f8e929 [ 634.678798][T13723] RDX: 0000000000000079 RSI: 0000200000000700 RDI: 00002000000006c0 [ 634.678811][T13723] RBP: 00007fc116d93090 R08: 0000000000000000 R09: 0000000000000000 [ 634.678823][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.678835][T13723] R13: 0000000000000000 R14: 00007fc1161b5fa0 R15: 00007fc1162dfa28 [ 634.678863][T13723] [ 635.178107][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 635.302085][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.311354][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.328142][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 635.336458][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.345423][ T43] usb 2-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 635.363726][ T43] usb 2-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.397096][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 635.409835][ T43] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 635.419133][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.427155][ T43] usb 2-1: Product: syz [ 635.447439][ T43] usb 2-1: Manufacturer: syz [ 635.453392][ T43] usb 2-1: SerialNumber: syz [ 635.548342][ T5920] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 635.714904][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 635.715586][ T43] usbhid 2-1:1.0: can't add hid device: -71 [ 635.724470][ T5920] usb 3-1: config 10 has an invalid interface number: 218 but max is 3 [ 635.739062][ T5920] usb 3-1: config 10 has an invalid interface number: 6 but max is 3 [ 635.747161][ T5920] usb 3-1: config 10 has an invalid interface number: 102 but max is 3 [ 635.755809][ T43] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 635.768392][ T1830] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 635.771216][ T43] usb 2-1: USB disconnect, device number 5 [ 635.816092][ T5920] usb 3-1: config 10 has an invalid interface number: 183 but max is 3 [ 635.840579][ T5920] usb 3-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 635.868356][ T5920] usb 3-1: config 10 has no interface number 0 [ 635.882462][ T5920] usb 3-1: config 10 has no interface number 1 [ 635.892866][ T5920] usb 3-1: config 10 has no interface number 2 [ 635.906855][ T5920] usb 3-1: config 10 has no interface number 3 [ 635.916726][ T5920] usb 3-1: config 10 interface 218 altsetting 8 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 635.931995][T13754] ip6t_srh: unknown srh invflags 7863 [ 635.942857][T13754] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2119'. [ 635.952394][ T5920] usb 3-1: config 10 interface 6 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 635.954173][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2119'. [ 635.968798][ T1830] usb 4-1: not running at top speed; connect to a high speed hub [ 635.983299][ T5920] usb 3-1: config 10 interface 6 altsetting 127 endpoint 0xB has invalid maxpacket 528, setting to 64 [ 635.999333][ T1830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.020931][ T5920] usb 3-1: config 10 interface 6 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 636.039026][ T1830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.064596][ T1830] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.084026][ T5920] usb 3-1: config 10 interface 6 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 636.107526][ T1830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.144934][ T5920] usb 3-1: config 10 interface 6 altsetting 127 has a duplicate endpoint with address 0xC, skipping [ 636.158248][ T1830] usb 4-1: Product: syz [ 636.167761][ T1830] usb 4-1: Manufacturer: syz [ 636.174505][ T1830] usb 4-1: SerialNumber: syz [ 636.187103][ T5920] usb 3-1: config 10 interface 6 altsetting 127 has an endpoint descriptor with address 0x7A, changing to 0xA [ 636.253926][ T5920] usb 3-1: config 10 interface 6 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 636.428316][T13757] fuse: Unknown parameter '3#YΛR.V#7 +)HmUz/?i]xwB*b{ k $'JAԣϨr&h' [ 636.441533][ T5920] usb 3-1: config 10 interface 6 altsetting 127 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.456305][ T5920] usb 3-1: config 10 interface 102 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 636.470340][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 636.482726][ T5920] usb 3-1: config 10 interface 102 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 636.533559][ T5920] usb 3-1: config 10 interface 183 altsetting 6 endpoint 0x6 has invalid maxpacket 4864, setting to 64 [ 636.565825][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 636.597550][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 636.636120][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 636.647505][ T1830] usb 4-1: 0:2 : does not exist [ 636.698679][ T1830] usb 4-1: USB disconnect, device number 126 [ 636.704928][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 636.740581][ T5920] usb 3-1: config 10 interface 183 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 636.773035][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 636.804881][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.808055][ T5920] usb 3-1: config 10 interface 183 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 636.884880][ T5920] usb 3-1: config 10 interface 218 has no altsetting 0 [ 636.912731][ T5920] usb 3-1: config 10 interface 6 has no altsetting 0 [ 636.935076][ T5920] usb 3-1: config 10 interface 102 has no altsetting 0 [ 636.954039][ T5920] usb 3-1: config 10 interface 183 has no altsetting 0 [ 636.982343][ T5920] usb 3-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=e4.1a [ 636.991879][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.006562][ T5920] usb 3-1: Product: ࠠ [ 637.019860][ T5920] usb 3-1: Manufacturer: ᐄ [ 637.038326][ T5920] usb 3-1: SerialNumber: 䐛 [ 637.183765][T13760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.269022][ T5920] rndis_host 3-1:10.218: skipping garbage [ 637.274820][ T5920] usb 3-1: bad CDC descriptors [ 637.318368][ T5920] cdc_acm 3-1:10.218: skipping garbage [ 637.373138][ T5920] usb 3-1: USB disconnect, device number 111 [ 637.973253][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 638.118140][ T5920] usb 2-1: device descriptor read/64, error -71 [ 638.196083][T13784] FAULT_INJECTION: forcing a failure. [ 638.196083][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 638.219757][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.2.2127 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 638.219786][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.219798][T13784] Call Trace: [ 638.219806][T13784] [ 638.219815][T13784] dump_stack_lvl+0x189/0x250 [ 638.219849][T13784] ? __pfx____ratelimit+0x10/0x10 [ 638.219879][T13784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.219908][T13784] ? __pfx__printk+0x10/0x10 [ 638.219934][T13784] ? __pfx___might_resched+0x10/0x10 [ 638.219968][T13784] should_fail_ex+0x414/0x560 [ 638.219996][T13784] ? listxattr+0x4c/0x2a0 [ 638.220025][T13784] should_failslab+0xa8/0x100 [ 638.220047][T13784] __kvmalloc_node_noprof+0x161/0x5f0 [ 638.220068][T13784] ? listxattr+0x4c/0x2a0 [ 638.220120][T13784] listxattr+0x4c/0x2a0 [ 638.220155][T13784] path_listxattrat+0x179/0x3a0 [ 638.220189][T13784] ? __pfx_path_listxattrat+0x10/0x10 [ 638.220219][T13784] ? rcu_is_watching+0x15/0xb0 [ 638.220260][T13784] ? do_syscall_64+0xbe/0x3b0 [ 638.220285][T13784] do_syscall_64+0xfa/0x3b0 [ 638.220304][T13784] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.220338][T13784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.220360][T13784] ? clear_bhb_loop+0x60/0xb0 [ 638.220387][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.220409][T13784] RIP: 0033:0x7fcf8ff8e929 [ 638.220430][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.220450][T13784] RSP: 002b:00007fcf90d48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 638.220473][T13784] RAX: ffffffffffffffda RBX: 00007fcf901b5fa0 RCX: 00007fcf8ff8e929 [ 638.220490][T13784] RDX: 0000000000000079 RSI: 0000200000000700 RDI: 00002000000006c0 [ 638.220506][T13784] RBP: 00007fcf90d48090 R08: 0000000000000000 R09: 0000000000000000 [ 638.220520][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.220533][T13784] R13: 0000000000000000 R14: 00007fcf901b5fa0 R15: 00007fcf902dfa28 [ 638.220573][T13784] [ 638.476139][ T30] audit: type=1326 audit(1750562295.791:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13785 comm="syz.3.2128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89598e929 code=0x0 [ 638.633572][T13794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2129'. [ 638.678151][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 638.818142][ T5920] usb 2-1: device descriptor read/64, error -71 [ 638.939284][ T5920] usb usb2-port1: attempt power cycle [ 639.288152][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 639.318915][ T5920] usb 2-1: device descriptor read/8, error -71 [ 639.486106][T13816] loop7: detected capacity change from 0 to 7 [ 639.505410][T10628] Dev loop7: unable to read RDB block 7 [ 639.513398][T10628] loop7: unable to read partition table [ 639.523670][T10628] loop7: partition table beyond EOD, truncated [ 639.545313][T13816] Dev loop7: unable to read RDB block 7 [ 639.551485][T13816] loop7: unable to read partition table [ 639.558217][ T5920] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 639.567915][T13816] loop7: partition table beyond EOD, truncated [ 639.578172][T13816] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 639.582945][ T5920] usb 2-1: device descriptor read/8, error -71 [ 639.698681][ T5920] usb usb2-port1: unable to enumerate USB device [ 640.557858][T13833] binder: 13830:13833 ioctl 400c620e 200000000280 returned -22 [ 641.091565][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2143'. [ 641.108342][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2143'. [ 641.117606][T13844] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 641.169945][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 641.255086][T13852] fuse: Bad value for 'fd' [ 641.260709][T13852] fuse: Bad value for 'fd' [ 641.313026][T13844] bond1: entered allmulticast mode [ 641.367534][T13844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.938253][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 642.124620][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.173596][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.216066][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.273051][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.283910][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.304483][ T5920] usb 5-1: config 0 descriptor?? [ 642.787407][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 642.800425][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 642.834733][ T5920] usb 5-1: USB disconnect, device number 10 [ 643.238099][ T1830] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 643.410157][ T1830] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 643.419465][ T1830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.442709][ T1830] usb 3-1: config 0 descriptor?? [ 643.598275][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 643.652794][ T1830] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 643.758105][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 643.765206][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 643.778108][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.797137][ T43] usb 5-1: config 0 descriptor?? [ 643.854049][ T1830] usb 3-1: USB disconnect, device number 112 [ 644.028430][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 644.112675][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 644.512467][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 644.527404][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 644.553987][ T43] usb 5-1: USB disconnect, device number 11 [ 644.668353][ T1830] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 644.718163][ T5934] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 644.818764][ T1830] usb 3-1: Using ep0 maxpacket: 8 [ 644.825635][ T1830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 644.850807][ T1830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.868325][ T1830] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.886940][ T1830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 644.898784][ T1830] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 644.909059][ T1830] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 644.920079][ T1830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.922055][ T5934] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 644.941862][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.949033][ T1830] usb 3-1: config 0 descriptor?? [ 644.950389][ T5934] usb 2-1: Product: syz [ 644.957764][T13881] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 644.969492][ T5934] usb 2-1: Manufacturer: syz [ 644.974132][ T5934] usb 2-1: SerialNumber: syz [ 645.005676][ T5934] usb 2-1: config 0 descriptor?? [ 645.017162][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 645.032709][ T5934] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 645.052132][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 645.159377][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2154'. [ 645.247485][T13883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.263515][T13883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.273147][ T5934] usb 2-1: USB disconnect, device number 10 [ 645.366230][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2155'. [ 645.463699][ T1830] usb 3-1: USB disconnect, device number 113 [ 645.476756][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 645.522469][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 645.827084][T13896] fuse: Bad value for 'fd' [ 645.835696][T13896] fuse: Bad value for 'fd' [ 646.224075][T13903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.241177][T13903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.271877][T13903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.302512][T13905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.323111][T13905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.379172][T13905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.484377][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.508118][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.573573][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 646.683555][T13903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2160'. [ 647.508147][ T5934] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 647.658111][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 647.659880][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 647.659909][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.673266][ T5934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 647.673283][ T5934] pvrusb2: ********** [ 647.673292][ T5934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 647.673305][ T5934] pvrusb2: Important functionality might not be entirely working. [ 647.673317][ T5934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 647.673329][ T5934] pvrusb2: ********** [ 647.871698][ T2343] pvrusb2: Invalid write control endpoint [ 647.944334][ T2343] pvrusb2: Invalid write control endpoint [ 647.944359][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.944370][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.944377][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.944384][ T2343] pvrusb2: Device being rendered inoperable [ 647.944476][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.944557][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 647.956112][ T2343] pvrusb2: Attached sub-driver cx25840 [ 647.956136][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.956145][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 648.008970][ T5920] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 648.075213][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.077155][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.079364][T13925] loop6: detected capacity change from 0 to 63 [ 648.082909][T13925] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.083075][T13925] Buffer I/O error on dev loop6, logical block 1, async page read [ 648.083166][T13925] Buffer I/O error on dev loop6, logical block 2, async page read [ 648.083233][T13925] Buffer I/O error on dev loop6, logical block 3, async page read [ 648.083354][T13925] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.083489][T13925] Buffer I/O error on dev loop6, logical block 1, async page read [ 648.083547][T13925] Buffer I/O error on dev loop6, logical block 2, async page read [ 648.083605][T13925] Buffer I/O error on dev loop6, logical block 3, async page read [ 648.083697][T13925] Buffer I/O error on dev loop6, logical block 0, async page read [ 648.083766][T13925] Buffer I/O error on dev loop6, logical block 1, async page read [ 648.250208][ T5920] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.359961][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.373119][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.383070][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.398142][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 101, setting to 64 [ 648.459535][ T5920] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.494936][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 648.530217][ T1830] usb 3-1: USB disconnect, device number 114 [ 648.540114][ T5920] usb 4-1: Product: syz [ 648.544688][ T5920] usb 4-1: Manufacturer: syz [ 648.576315][T13943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 648.594097][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 648.602331][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 648.662293][ T5920] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 648.669672][ T5920] cdc_wdm 4-1:1.0: Unknown control protocol [ 648.806790][ T5920] usb 4-1: USB disconnect, device number 127 [ 649.083463][T13969] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.098385][T13969] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.127879][T13969] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.145556][T13969] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 649.164281][T13969] geneve2: entered promiscuous mode [ 649.213554][T13969] geneve2: entered allmulticast mode [ 649.227305][ T30] audit: type=1326 audit(1750562306.561:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13966 comm="syz.4.2174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc115f8e929 code=0x0 [ 649.265387][T13969] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.276362][T13969] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.280236][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 649.303298][T13969] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.329482][T13969] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 649.504840][ T5920] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 649.513705][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.542491][T13977] fuse: Bad value for 'fd' [ 649.548594][T13977] fuse: Bad value for 'fd' [ 649.556358][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 649.565987][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.586310][ T5920] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 649.595947][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.605981][ T5920] usb 4-1: Product: syz [ 649.610518][ T5920] usb 4-1: Manufacturer: syz [ 649.765576][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 649.812474][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 649.835154][ T5920] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 649.857588][ T5920] cdc_wdm 4-1:1.0: Unknown control protocol [ 650.038738][T13979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.468223][ T5934] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 650.569423][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 650.570933][ T43] usb 4-1: USB disconnect, device number 2 [ 650.576072][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 650.587982][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 650.597393][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 650.620283][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.645001][ T5934] usb 2-1: not running at top speed; connect to a high speed hub [ 650.679187][ T5934] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 650.692477][ T5934] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 650.702204][ T5934] usb 2-1: config 1 has no interface number 1 [ 650.713338][ T5934] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 4 [ 650.724822][ T5934] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 650.747389][ T5934] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.763188][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.772863][ T5934] usb 2-1: Product: syz [ 650.777066][ T5934] usb 2-1: Manufacturer: syz [ 650.783078][ T5934] usb 2-1: SerialNumber: syz [ 651.038294][ T43] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 651.192614][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.206774][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 651.222669][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 651.237520][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 651.251330][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 651.271805][ T43] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 651.281781][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 651.293645][ T43] usb 3-1: Product: syz [ 651.298473][ T43] usb 3-1: Manufacturer: syz [ 651.303514][ T43] usb 3-1: SerialNumber: syz [ 651.314437][ T43] usb 3-1: config 0 descriptor?? [ 651.525171][ T43] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 651.533950][ T43] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 651.727545][ T43] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 651.736225][ T43] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 651.760599][ T43] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 651.937016][ T43] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 651.994029][T13999] __nla_validate_parse: 24 callbacks suppressed [ 651.994048][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 652.243171][T14006] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 652.658556][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 652.676379][T14012] input: syz0 as /devices/virtual/input/input45 [ 652.800888][ T43] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 652.814877][ T43] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 652.824468][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 652.834438][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.846166][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.847471][ T43] usb 3-1: USB disconnect, device number 115 [ 652.864340][ T5892] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 652.877386][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.895966][ T5892] usb 4-1: config 0 descriptor?? [ 653.309599][ T5934] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 653.375732][ T5934] usb 2-1: USB disconnect, device number 11 [ 653.382470][ T5892] playstation 0003:054C:05C4.0025: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 653.445526][T10628] udevd[10628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.546908][ T5892] playstation 0003:054C:05C4.0025: Invalid byte count transferred, expected 16 got 0 [ 653.557813][ T5892] playstation 0003:054C:05C4.0025: Failed to retrieve DualShock4 pairing info: -22 [ 653.568630][ T5892] playstation 0003:054C:05C4.0025: Failed to get MAC address from DualShock4 [ 653.577526][ T5892] playstation 0003:054C:05C4.0025: Failed to create dualshock4. [ 653.594637][ T5892] playstation 0003:054C:05C4.0025: probe with driver playstation failed with error -22 [ 653.677275][T14023] fuse: Bad value for 'rootmode' [ 653.686304][T14023] fuse: Bad value for 'fd' [ 653.783018][ T1830] usb 4-1: USB disconnect, device number 3 [ 653.869789][ T5934] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 654.030169][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.048154][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 654.062399][ T5934] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 654.080981][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.089401][ T5934] usb 2-1: Product: syz [ 654.093658][ T5934] usb 2-1: Manufacturer: syz [ 654.098442][ T5934] usb 2-1: SerialNumber: syz [ 654.107292][ T5934] usb 2-1: config 0 descriptor?? [ 654.128997][ T5934] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 654.151563][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 654.162179][ T5934] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 654.172437][ T5934] usb 2-1: media controller created [ 654.203544][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.287226][ T5934] DVB: Unable to find symbol tda10046_attach() [ 654.296672][ T5934] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 654.305475][ T5934] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 654.416397][T14027] netlink: 'syz.3.2190': attribute type 15 has an invalid length. [ 654.449503][T14027] input: syz1 as /devices/virtual/input/input46 [ 654.950809][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.963582][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.990778][ T1830] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 655.149060][ T1830] usb 3-1: Using ep0 maxpacket: 32 [ 655.162924][ T1830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.179317][ T1830] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 655.188782][ T1830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.196852][ T1830] usb 3-1: Product: syz [ 655.201136][ T1830] usb 3-1: Manufacturer: syz [ 655.205937][ T1830] usb 3-1: SerialNumber: syz [ 655.223912][ T1830] usb 3-1: config 0 descriptor?? [ 655.445635][ T43] usb 3-1: USB disconnect, device number 116 [ 655.488333][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 655.650366][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 655.660743][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 655.671518][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 655.683419][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 655.699532][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 655.711745][ T5892] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 655.733319][ T5892] usb 4-1: Manufacturer: syz [ 655.744195][ T5892] usb 4-1: config 0 descriptor?? [ 655.750382][T14037] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 655.773543][ T5892] smsusb:smsusb_probe: board id=9, interface number 0 [ 655.782462][ T5892] smsusb:siano_media_device_register: media controller created [ 655.794092][ T5892] ------------[ cut here ]------------ [ 655.799821][ T5892] usb 4-1: BOGUS urb xfer, pipe 3 != type 1 [ 655.806460][ T5892] WARNING: CPU: 1 PID: 5892 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 655.816140][ T5892] Modules linked in: [ 655.820475][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 655.832635][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.842741][ T5892] Workqueue: usb_hub_wq hub_event [ 655.847815][ T5892] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 655.853529][ T5892] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 2b 34 8c 4c 89 f6 4c 89 fa e8 ff 2a 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 70 2a de 8e e8 e5 [ 655.873477][ T5892] RSP: 0018:ffffc900044c6ad0 EFLAGS: 00010246 [ 655.880200][ T5892] RAX: c8a138364e8c4c00 RBX: ffff88814c66f000 RCX: 0000000000100000 [ 655.888475][ T5892] RDX: ffffc9001a26b000 RSI: 000000000002daa1 RDI: 000000000002daa2 [ 655.896524][ T5892] RBP: 0000000000000000 R08: ffffc900044c67e7 R09: 1ffff92000898cfc [ 655.904611][ T5892] R10: dffffc0000000000 R11: fffff52000898cfd R12: ffffffff8c34296c [ 655.912917][ T5892] R13: dffffc0000000000 R14: ffffffff8c349460 R15: ffff8880767bf680 [ 655.921301][ T5892] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 655.930535][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.937166][ T5892] CR2: 00007f45ee2e56c0 CR3: 00000000339e2000 CR4: 00000000003526f0 [ 655.945455][ T5892] DR0: 0000000000000000 DR1: 0000000000000400 DR2: 0000000000000000 [ 655.953655][ T5892] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 655.961734][ T5892] Call Trace: [ 655.965075][ T5892] [ 655.968179][ T5892] smsusb_start_streaming+0x22/0x340 [ 655.973779][ T5892] smsusb_probe+0x18f6/0x2060 [ 655.978745][ T5892] ? __pfx_smsusb_probe+0x10/0x10 [ 655.983880][ T5892] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 655.989558][ T5892] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 655.995521][ T5892] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 656.001993][ T5892] ? __pm_runtime_set_status+0x785/0xa50 [ 656.007712][ T5892] usb_probe_interface+0x641/0xbc0 [ 656.012953][ T5892] ? __pfx_usb_probe_interface+0x10/0x10 [ 656.018685][ T5892] really_probe+0x26a/0x9a0 [ 656.023314][ T5892] __driver_probe_device+0x18c/0x2f0 [ 656.028740][ T5892] driver_probe_device+0x4f/0x430 [ 656.033823][ T5892] __device_attach_driver+0x2ce/0x530 [ 656.039381][ T5892] bus_for_each_drv+0x251/0x2e0 [ 656.044300][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 656.050325][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.055811][ T5892] __device_attach+0x2b8/0x400 [ 656.060705][ T5892] ? __pfx___device_attach+0x10/0x10 [ 656.066087][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.071457][ T5892] bus_probe_device+0x185/0x260 [ 656.071498][ T5892] device_add+0x7b6/0xb50 [ 656.071525][ T5892] usb_set_configuration+0x1a87/0x20e0 [ 656.086899][ T5892] usb_generic_driver_probe+0x8d/0x150 [ 656.092555][ T5892] usb_probe_device+0x1c1/0x390 [ 656.097470][ T5892] ? __pfx_usb_probe_device+0x10/0x10 [ 656.102935][ T5892] really_probe+0x26a/0x9a0 [ 656.107503][ T5892] __driver_probe_device+0x18c/0x2f0 [ 656.112897][ T5892] driver_probe_device+0x4f/0x430 [ 656.118074][ T5892] __device_attach_driver+0x2ce/0x530 [ 656.123540][ T5892] bus_for_each_drv+0x251/0x2e0 [ 656.128525][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 656.134480][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.139959][ T5892] __device_attach+0x2b8/0x400 [ 656.144801][ T5892] ? __pfx___device_attach+0x10/0x10 [ 656.150206][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.155476][ T5892] bus_probe_device+0x185/0x260 [ 656.161031][ T5892] device_add+0x7b6/0xb50 [ 656.165438][ T5892] usb_new_device+0xa39/0x16c0 [ 656.176918][ T5892] ? __pfx_usb_new_device+0x10/0x10 [ 656.182417][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.187678][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.192992][ T5892] hub_event+0x2941/0x4a00 [ 656.197473][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.202812][ T5892] ? __pfx_hub_event+0x10/0x10 [ 656.207673][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.213609][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.218941][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.224725][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.230565][ T5892] process_scheduled_works+0xae1/0x17b0 [ 656.236207][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.242307][ T5892] worker_thread+0x8a0/0xda0 [ 656.246981][ T5892] kthread+0x70e/0x8a0 [ 656.251284][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 656.256478][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.261238][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.266511][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.271850][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.276507][ T5892] ret_from_fork+0x3f9/0x770 [ 656.281501][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 656.286670][ T5892] ? __switch_to_asm+0x39/0x70 [ 656.291755][ T5892] ? __switch_to_asm+0x33/0x70 [ 656.296599][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.298382][T14042] vivid-000: ================= START STATUS ================= [ 656.301312][ T5892] ret_from_fork_asm+0x1a/0x30 [ 656.313836][ T5892] [ 656.316966][ T5892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 656.324323][ T5892] CPU: 1 UID: 0 PID: 5892 Comm: kworker/1:4 Not tainted 6.16.0-rc2-syzkaller-00308-gf7301f856d35 #0 PREEMPT(full) [ 656.336468][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 656.346542][ T5892] Workqueue: usb_hub_wq hub_event [ 656.351606][ T5892] Call Trace: [ 656.354895][ T5892] [ 656.357836][ T5892] dump_stack_lvl+0x99/0x250 [ 656.362460][ T5892] ? __asan_memcpy+0x40/0x70 [ 656.367078][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.372300][ T5892] ? __pfx__printk+0x10/0x10 [ 656.376937][ T5892] panic+0x2db/0x790 [ 656.380871][ T5892] ? __pfx_panic+0x10/0x10 [ 656.385337][ T5892] ? ret_from_fork_asm+0x1a/0x30 [ 656.390306][ T5892] __warn+0x31b/0x4b0 [ 656.394310][ T5892] ? usb_submit_urb+0xc82/0x1890 [ 656.399271][ T5892] ? usb_submit_urb+0xc82/0x1890 [ 656.404222][ T5892] report_bug+0x2be/0x4f0 [ 656.408568][ T5892] ? usb_submit_urb+0xc82/0x1890 [ 656.413516][ T5892] ? usb_submit_urb+0xc82/0x1890 [ 656.418470][ T5892] ? usb_submit_urb+0xc84/0x1890 [ 656.423436][ T5892] handle_bug+0x84/0x160 [ 656.427690][ T5892] exc_invalid_op+0x1a/0x50 [ 656.432208][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 656.437069][ T5892] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 656.442629][ T5892] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 80 2b 34 8c 4c 89 f6 4c 89 fa e8 ff 2a 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 70 2a de 8e e8 e5 [ 656.462243][ T5892] RSP: 0018:ffffc900044c6ad0 EFLAGS: 00010246 [ 656.468324][ T5892] RAX: c8a138364e8c4c00 RBX: ffff88814c66f000 RCX: 0000000000100000 [ 656.476305][ T5892] RDX: ffffc9001a26b000 RSI: 000000000002daa1 RDI: 000000000002daa2 [ 656.484307][ T5892] RBP: 0000000000000000 R08: ffffc900044c67e7 R09: 1ffff92000898cfc [ 656.492291][ T5892] R10: dffffc0000000000 R11: fffff52000898cfd R12: ffffffff8c34296c [ 656.500275][ T5892] R13: dffffc0000000000 R14: ffffffff8c349460 R15: ffff8880767bf680 [ 656.508296][ T5892] smsusb_start_streaming+0x22/0x340 [ 656.513606][ T5892] smsusb_probe+0x18f6/0x2060 [ 656.518308][ T5892] ? __pfx_smsusb_probe+0x10/0x10 [ 656.523354][ T5892] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 656.528917][ T5892] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 656.534827][ T5892] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 656.541180][ T5892] ? __pm_runtime_set_status+0x785/0xa50 [ 656.546833][ T5892] usb_probe_interface+0x641/0xbc0 [ 656.551959][ T5892] ? __pfx_usb_probe_interface+0x10/0x10 [ 656.557597][ T5892] really_probe+0x26a/0x9a0 [ 656.562114][ T5892] __driver_probe_device+0x18c/0x2f0 [ 656.567410][ T5892] driver_probe_device+0x4f/0x430 [ 656.572451][ T5892] __device_attach_driver+0x2ce/0x530 [ 656.577857][ T5892] bus_for_each_drv+0x251/0x2e0 [ 656.582726][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 656.588657][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.594078][ T5892] __device_attach+0x2b8/0x400 [ 656.598863][ T5892] ? __pfx___device_attach+0x10/0x10 [ 656.604160][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.609377][ T5892] bus_probe_device+0x185/0x260 [ 656.614238][ T5892] device_add+0x7b6/0xb50 [ 656.618596][ T5892] usb_set_configuration+0x1a87/0x20e0 [ 656.624081][ T5892] usb_generic_driver_probe+0x8d/0x150 [ 656.629556][ T5892] usb_probe_device+0x1c1/0x390 [ 656.634418][ T5892] ? __pfx_usb_probe_device+0x10/0x10 [ 656.639793][ T5892] really_probe+0x26a/0x9a0 [ 656.644312][ T5892] __driver_probe_device+0x18c/0x2f0 [ 656.649615][ T5892] driver_probe_device+0x4f/0x430 [ 656.654655][ T5892] __device_attach_driver+0x2ce/0x530 [ 656.660050][ T5892] bus_for_each_drv+0x251/0x2e0 [ 656.664939][ T5892] ? __pfx___device_attach_driver+0x10/0x10 [ 656.670841][ T5892] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.676242][ T5892] __device_attach+0x2b8/0x400 [ 656.681019][ T5892] ? __pfx___device_attach+0x10/0x10 [ 656.686318][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.691535][ T5892] bus_probe_device+0x185/0x260 [ 656.696400][ T5892] device_add+0x7b6/0xb50 [ 656.700743][ T5892] usb_new_device+0xa39/0x16c0 [ 656.705536][ T5892] ? __pfx_usb_new_device+0x10/0x10 [ 656.710749][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.715970][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.721299][ T5892] hub_event+0x2941/0x4a00 [ 656.725748][ T5892] ? do_raw_spin_unlock+0x122/0x240 [ 656.731005][ T5892] ? __pfx_hub_event+0x10/0x10 [ 656.735792][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.741538][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.746750][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.752487][ T5892] ? process_scheduled_works+0x9ef/0x17b0 [ 656.758225][ T5892] process_scheduled_works+0xae1/0x17b0 [ 656.763811][ T5892] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.769821][ T5892] worker_thread+0x8a0/0xda0 [ 656.774437][ T5892] kthread+0x70e/0x8a0 [ 656.778518][ T5892] ? __pfx_worker_thread+0x10/0x10 [ 656.783643][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.788255][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.793481][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.798711][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.803329][ T5892] ret_from_fork+0x3f9/0x770 [ 656.807939][ T5892] ? __pfx_ret_from_fork+0x10/0x10 [ 656.813069][ T5892] ? __switch_to_asm+0x39/0x70 [ 656.817843][ T5892] ? __switch_to_asm+0x33/0x70 [ 656.822618][ T5892] ? __pfx_kthread+0x10/0x10 [ 656.827222][ T5892] ret_from_fork_asm+0x1a/0x30 [ 656.832007][ T5892] [ 656.835435][ T5892] Kernel Offset: disabled [ 656.839773][ T5892] Rebooting in 86400 seconds..