last executing test programs: 8.568984492s ago: executing program 4 (id=427): pipe2(&(0x7f00000000c0), 0x4800) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r1, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 8.274815021s ago: executing program 4 (id=428): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a2401000000"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x9c2, &(0x7f00000000c0)={0x0, 0x7079, 0x1, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd_index=0x7, 0x1, 0x0, 0x0, 0x9, 0x1, {0x2}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7475f52084f6d927}}}, 0x0) 5.045034345s ago: executing program 4 (id=439): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/20, 0x14}, {0x0}], 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904000002923350000905f402ff030000000905ba3e"], 0x0) 4.793922302s ago: executing program 0 (id=440): r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000700)={'macvlan1\x00', 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 4.449013971s ago: executing program 0 (id=442): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x4, 0x0, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xf0b, 0x400000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fffffff, 0x5, 0x4, 0x0, 0x1f4, 0xfffffffe}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x7, 0xfffffff7, 0x0, 0xadde, 0x2}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c041}, 0x4000080) 4.063105022s ago: executing program 1 (id=444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff11000000000000000000000000000000000000000000000000000000000000000000000000000000000b2500feffffff11000000"]}, 0x108) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x61e0, &(0x7f0000000000)={0x0, 0x4ed0, 0x1000, 0x2, 0x317}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r9, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x1, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2, r8}}) io_uring_enter(r5, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.943480273s ago: executing program 0 (id=446): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x8, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x4]}, 0x8, 0x80800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) (async) accept4(r0, &(0x7f0000000200)=@ax25={{0x3, @null}, [@remote, @null, @rose, @default, @remote, @bcast]}, &(0x7f0000000040)=0x80, 0x80000) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 3.413380205s ago: executing program 0 (id=449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f00000001c0)=""/202, 0xca}], 0x3, &(0x7f0000000640)=""/181, 0xb5}, 0x80000000}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r1, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.871222979s ago: executing program 1 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) 2.769352602s ago: executing program 1 (id=453): r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d040300000000001d400500000000004704000001ed02860f03c100000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330a8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$alg(r3, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) syz_io_uring_setup(0x50d, &(0x7f0000000440)={0x0, 0xbcb5, 0x8000, 0x5, 0x2f6}, &(0x7f00000004c0)=0x0, &(0x7f0000000300)=0x0) pipe2$watch_queue(0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x810, 0xffffffffffffffff, 0x5b76e000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) copy_file_range(r4, &(0x7f0000000380)=0x1, r0, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x20000000000a, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280), 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x42, 0x1, r1, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e47, 0x13, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0xd, 0x0, 0x9]}, {0x0, [0x2, 0x188, 0x0, 0x2], 0x3}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) 2.189071491s ago: executing program 0 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x858, {0xe5d91821, 0x8, 0x0, 0x81, 0x4, 0x8}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x858, {0xe5d91821, 0x8, 0x0, 0x81, 0x4, 0x8}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) (async) 2.115905725s ago: executing program 4 (id=455): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x1004100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000004f00000066000000000000001600000000000000950000000000000018dd319ed9a5bec46d42ba8a215c4749074e08394de9a2765c2bece96e6db326cb4208d89426cb93c9511884f46cafdb732a27e078af70b2aa3503487bf19707f6955aa347e6e4"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.053323957s ago: executing program 0 (id=456): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000010800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000061040008001b00000000008a8f8c6ad0ae1c002b80080003000a00", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRESHEX=r1, @ANYBLOB="5f6c5903f7ffffffffffffff7ff746f16cdc85568423552edd5c155c802da091e735f3044f75ead78f524cdb6b4e2cf70c4b318811cb7ab1733d3dd2e9529ce34c7e10cdc0692accc155b10f365980f7332bfc1b4dab406854a3f37978a768b769edc1"], 0x44}}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) sendmmsg$unix(r0, &(0x7f0000000400)=[{{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="8f5c59a3f62522acffb7b92bf12b2d405d37bf31d3e6d3ae9af1498dd17dbb1018e0afef63a215086308bea327c363871a1c40903c2a9da86f68e130420ed8f0a866e6d31181124b8dc975a8f831bd3c35536facdb1cde7f44b8a18da65ee546e3", 0x61}, {&(0x7f0000000700)="09fce18c2ff3cbb2b439441dbf7f54ca8566dddbda6ccea3aca826ad0ccb6934661ddddf0712d0807beccb7ab6a788e336d9cd0a93812b9cbd45b6645cf8a7a4fde19c659aa6e1600c02c816ae165a1667d38f661ad9afe9adab629fa04a193f9ab9d4385c9c815be72e4901580c2d39338957f90df4f15f3b2ac65031dcf8402e632fc8ab8074672341be473304", 0x8e}], 0x2, &(0x7f0000000800)=ANY=[], 0x40, 0x20000800}}], 0x1, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="21fd6e7f06e9ff5b9e798aca4a7962d6bf9c480427b980d0eb6ded13138b208688ded210eb1bee2275776b10b99fe9a4ac22f80c5564836b53e857a53cfa1546a920fdf96217715cb7a23d57815f0de2ca056ae37847ca506b8733acdfbed07eac301d84c9510f161e32947c4a764ab6186970957f5ab19f399dc6da", @ANYRES16=0x0, @ANYRES64=r1, @ANYRES32, @ANYRES32=r0], 0x20) r6 = syz_io_uring_setup(0x892, &(0x7f0000000380)={0x0, 0xe0c8, 0x3, 0xfffffffe, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.652974699s ago: executing program 2 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)) (async) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000002740)={0x0, 0x9}) (async, rerun: 32) timer_settime(r5, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {r6, r7+60000000}}, 0x0) (rerun: 32) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447608000000000000000050000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x7b}], 0x1) (async, rerun: 32) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800b0000040"]) (async, rerun: 32) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x964}, {0x2, 0x1}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000001740)=""/4096, 0x6f, 0x1000, 0x1, 0x8000, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180100000000b71c9460229b1919e405000000000000004bffff009f7b00006d00db103bd6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x2, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000002780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd56, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0a00ff00000000711072000000000095000000000000004448f8ddefcfd1e0c994af54e0b08c02fe1ff485c25d2a0a457883a32cceae"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 64) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffb, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7e, 0xd}}}}}]}}]}}, 0x0) (async) syz_usb_connect(0x4, 0xff5, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0xc2, 0x8, 0x1f, 0x8, 0x2019, 0xab2a, 0x5111, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe3, 0x3, 0x71, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x47, 0x74, 0xe, 0xff, 0xff, 0xff, 0xd, [], [{{0x9, 0x5, 0x6, 0x3, 0x400, 0x61, 0x9, 0x9, [@generic={0x7c, 0x31, "0e8d5f53093491040cf65568c4b39f6bc42820c6b00af39561e9586306e2e3b24bf09f9ed6dea6e2fe7ee6c554e05f7892f8c05e418b80aeed5c37d38980dfdfac69f050325dae7daddeb793b1fca55e55221c3c773fcb318aee7372859524bda896b0687c7dc055a3f2759ae30cfa3f6b657550ff3082ba08d2"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x3, 0x80, [@generic={0x5e, 0xb, "654ed0cb2340da3bb3a10843ae5bc9b55dbfd3ffcb3e0d5a56642af72674e35d3a73001fff926afe14f0068d9d7e84f66ff2949e4afc82c00c03533e4a93f342a808c24f831bd62979ce014d97e0547725094ef63ad25c0f00c021b6"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1a4}, @generic={0x75, 0xb, "25ab19d545ee2072bcedcc90787e1888d9f80860416db17cd735abb59d9022a0eb159407f4e25096ec654d2faddfd0d3defbdc281e3b86c0c3ec2184a72a2801c0407d3dfa585ea2a87b9229a4cb3f55d45666eb546bf338c704bee9d14dd1efaef3abc6a5d745f9fe40225e0fcced71b9cd88"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x2, 0x10, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x1, 0x2, 0x25, [@generic={0x12, 0x3a, "093b007b53d967994fc4bbe528bfeb3a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x2, 0xc0, 0x7f, [@generic={0x3d, 0xe, "a9495ec6c1129f337875a61a7a9242a954666bf4251ce78422110e814b8fed85963cbd0d122de93e302d4a699d3b86e75c8c41ce11e34c4b94fcff"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x4, 0xf7, 0x8, [@generic={0x8, 0x10, "d509ffcbb416"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xe0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xc88}]}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x71, 0x1, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x7f, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x4}]}}, {{0x9, 0x5, 0x6, 0xdb56fe06021a9cf7, 0x8, 0x4, 0x91, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xa, 0x10, 0x9, [@generic={0x39, 0x24, "e681b32b890a3e70fe283b5275da92cc974b261066a73645a99da46dde92a5880152b9ac9660dc17f0bc906106d348d091cca9d6f45e05"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7cd6}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x9, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @generic={0xcb, 0x9, "c4b02343420b5c5b08fabe7ebc164c74ce39eae8b48fc68c3dba985520e501fdc6e8b62a1afe577f44eb9347026b5d40af09ddb93ad8c38128b2a9da636a15469ce5a456dc1556bc351d940baa5404ce7bb1d890cc50dabe3a473e1758cedca78c29187a490a99c5be2b41a83985c768ec9079633f123ba0e9459e2b4aa385e39bbe8dae2453e25f17bc7f63fd8ae2bea8d177812736c9cdfec0850900fc323a0b3a1ff5e2f4fdd6038358071599c53ee0caff21e56e0b57fc7ee4f591bf6791aa439bd22019fb7dd6"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x5, 0x8, [@generic={0x4e, 0xe, "af3406e36cd14705b6a0ff669dc6a3d212cb6d8179eed68d27527f21922c2d49da580102551e756a40392eb618ab62a2973355e4819b8d00a687267c6d7c9765816470e93bbd630556866ae5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x9}]}}]}}, {{0x9, 0x4, 0x8, 0x1, 0xf, 0xc1, 0xb4, 0xd9, 0x80, [], [{{0x9, 0x5, 0x3, 0x2, 0x20, 0xb0, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe6, 0x10}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x3, 0xb9, [@generic={0xe9, 0x10, "3c3bdc0152d715ec409ed32ee31a483ceb87d590e39c59dc8697f187ceefe83aa480a01b289f5168e63c39fb39767bc4949a611ee9fdbc83625405e9488158f5dea488d9afdaaa3ea251204a5d03af2abc2a11dbf5aad6f7e34ccb69218c4edcdbea0d598ac051f1ad29f7126b210abd3414f106a645648978a46f98635ec917c10746177c2b56cfb6f0fd7bd07a377b6d3d47c34893715ffd56f0ae8a80196d9a0018881e3453f5140d8dc398cf07a4f2075b04b566c8f11f5c40f15befed008e9ba0bf46884feeafc870640f1d43f519e7660b728910416f0419a5b3b9231382fd2059895489"}, @generic={0xf6, 0x7, "d3c7b5f9210cf60b15a8b4b557812f2f42cf689d4bdb22a3077416ce3ddce5addce804a3c892cb3a54ff7b3fbd73824593df706a704f704b7e2f69f608444e52e5c5863f48eca021789fb00a37bcbe7f7bc1c6d46d5809f39f775f2b086da0886e8ea3e368a3affc90adada91dc842f840e923bcbc1e917cf710dfcaa2bd6f8a97bb82276c51cec10c777ed9634fbfb77ce3008814315c106d67518648ba1292d0fa2ed98e1d32cc563554b6a04ee345a5fce72c1e5170e5f18190821ef764d91a6ff01e8ef25e6d82ac2cb8ef662f035d8973a2e8045beeef6e8dd8d757dc545ee9ca5904c49d0eb9d4de3625962f7f5f72931b"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x0, 0x6, 0x2, [@generic={0xfa, 0x4, "014a86a2c95d550cef61d8c9e5c7c76f70b0d214f8943b5839d0933802446d4e1f99627bec7c7c4e07249b2d6d9b141aa414f2007b563240c56cc103106be15dc435f8fa6ebceafb4fa5bf0b717f78dd9516726fa7f710cf0d1004c5a96ba5353fb89c3c2f81db8d37107ee4c8beb49f58786d038e02679991a6a92e185c9d4f0ca237a748b07912d9ca834b16441e7211ede072c26d3bcfc91207717482078968c8716ea8569e14a3fd0d01cf0ec321c82867c93d4cf9a4aa4641b4047d4aa94e43501baba33f241170ed38717a79492e68e46793dd253c3521f3166530e2d6301b6cc5a9d15a07a0ceaaed9cb95664e4696cf596a59495"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x7, 0x8, 0x4f}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x6, 0x1, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x65}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0x39, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xef, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x81, 0x7, [@generic={0xa, 0x22, "eeb61335ddfd362c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3}]}}, {{0x9, 0x5, 0xf, 0x6, 0x400, 0x4, 0xfb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x1, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0xa, 0x81}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xe, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x81, 0x9, 0x40}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0xf4, 0x4, 0x3, [@generic={0x3e, 0x5, "bb8d2a63d4a188a0f7deaa77d48007b5d92b235a2048ae7a10a17f5dbd63f559d47bf63faeb799781297e15967130314586ca19886b298b9f4eaeff3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x3, 0x10, 0x8a, [@generic={0x84, 0x23, "0639edeb81dd2463ed60d5bd7699772d6e25334d87581316c78066a17b1294ba6617cc2344bb1a2e5e24e379f1969f9eb158c506334c21823d401d1b54361e251b0a3db0edf4fa9a875a859d0f86cf5e587480721e4db42ce12f69ae53dd4977fba3532a80750c45eb83f3135981167383ac3576003963c571acc9d4a0ed06bd01cf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7f56}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x94, 0x7b}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xfc, 0x3, 0x9}}]}}, {{0x9, 0x4, 0xda, 0x3, 0xf, 0xff, 0x1, 0x48, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e7a525de85"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2453, 0x0, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0xb57, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x800, 0x6, 0xfd, 0x2, 0x1}, @mdlm_detail={0x63, 0x24, 0x13, 0x0, "640414d2cbb842c93e73680c464a1ff7d81cda726f65b2fcf807f75ae7dcb13f716d38d356a4cb0d8c102a121eb34900f4417c1c7b9a6cdd28f57e7517b43e0e05863cc8bb334e13c90343f33bed02045ce58a14e62f6a5f4be0896a5b6b67"}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x25, 0xd, "bb", '+?'}, @as_header={0x7, 0x24, 0x1, 0x1, 0xda, 0x1}, @as_header={0x7, 0x24, 0x1, 0xf6, 0x6, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb5, 0x2, 0x40, 0x0, "", "d4bd"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd1, 0x1, 0x9, 0x5, "", 'g'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x1bc7, 0x8, "21f1b29ef8cb0a"}]}], [{{0x9, 0x5, 0x7, 0x8, 0x400, 0x9, 0x1a, 0x3, [@generic={0x4b, 0x1, "433afb365d5fa60c5d17bcc1e3bdf6ac00978f0c4a985b6f583d64ab1f41adc9edb17a5c08f96e3923879a25a82f3a65888566eac71b485f6141c8fc430d613d58874e33631f3fd591"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x7, 0xec, [@generic={0x7e, 0x31, "184646b9c5cc1c6a570ddcb52b61ea2e6e350aa329dd2391c102b551e817781e01907e8c09aa1505b038b5f4fe2f3b1625fdda2bcc4585a019c6363eb2d2072689c4376a267ae2d0b508ca0b7bba21f391764eafc8edcddddbe26fa3651d65cb0a360b4c0283a5645c7facdea0a768dc3deda8ecfbb1a85c1ebcc47d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x3, 0x80, 0x5, [@generic={0x101, 0xb, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x3, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xf4}, @generic={0x7c, 0xe, "f823c75686946a67202d1b580b6085d6fb118f902ffa1ce87aaa83b3588fd2f81b4f37f8b9fbadda88f899b3cb10963f6896e55360abdd34df54cbdeb3274f71893b9279fa2e19015ee0ec2196fd075410bf9c4081d71c6e83d683b0b935f6d7a39001cfd5e833b8af168df5fb7f42f2548344a5c2085d403030"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0xb9, 0x2, 0xfb}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0xf8, 0xf, "44ec5dff842497e72cff516c73e34ebb77c762896c8231aac7d0122279714e73ee7e956617b4978bda5acd445932f8f27b2d13734d73cc19a3d6182975ce612d8023b511cdbd2b8482f8699ba573f4a97f5005485a894c69874dfbc5f80550edb8a67227b6f20de5ece26672f46cf0b1e4cde03225118262775bc690bbbbbf5729308ce13a0cf067b4cdfcfec60d4e1e3490147866dac9056501a4579a1c205b405cd39caa8b628aeb3c27a4fd0485b3b57ab8e20ceb14afd6d58036c6c9dd7bb3c4209f7976651bf340e88574b38795faecef09e51fae35a30018690c483e5e1b19ff6b8650e3040bcc2c696cc7806a34d1b64c90b1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x4, 0x3, 0x8}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x10, 0xd, 0xf}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x81, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9386}, @generic={0xc9, 0xa, "f2b9e6580f1ea787390c454db0fe5b220c68d1825abebe639146c35b5f08105bb87c9f1e1c65c97e6649213c609321b22830d11a1ac8ec345ff41820537b45ec2385e3e99bec424a31246ac88eef20b3691a56df3c974c8ba656efd2d603b0d7db1772abf23ee90ae84e0d660748cec70bd3dd12fce88c306509ede4ac229bbf884756eb7ca9775c9d02d02d367e572b3541e676c1abed012da95705051c4f614e7ab4d51a0e03710a8b20925e2165baa685c33e79642de455356b1083a74f306b0fed24d70024"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x8, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x3c41}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x40, 0x0, 0xa2, [@generic={0xb0, 0xe, "99672e623d167d158cc1d2a4956cf8780f86799ee42ab3e8b3f75e9aa23b5d261729d429b437e84874bbc8b5cadeded0d860ad87e6a072f600acdc4cd47903d0893e9b8ca50674c73e6b768e4c4c68cccb1cfff81fa6c67e05d53d174c27f6046b0cec471f4426ea4c7e08596bfc059fcb5574c057432ae2916fb81cbde8189c99e1c6ceacbf5d4871bc8d06329951a4cb9c2cc38e1ef7b3c0f1732b99035f71a839c7d13a03c99334ae642b4afd"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x5, 0x3, 0x0, [@generic={0x57, 0x0, "037c3f038a0c5387d21442b1a4e668d933cbce8e031882cb247a829f31600d398003fccf2bcb1695e25baa3c5d34a4691ea590644e06d3c2699ade2060eaf9ccb5c9cfdea90cafa3ffa766cb865366c02e1b130f60"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0xac, [@generic={0x7d, 0x21, "8d27ab0245fa8d4b309c10385bc1f64a6469050d01c6d6975ca721496a3a1c5de9242dc726119eab6dd91e353c2606100c7985de649f5bd4b1e92925ae3e10ac9a8d5b06fb37470cde9b81b7efc10265f84b039e618e6309e3712cbb3d471f017729e001ce587b7368cb6a44864cc4b9c6342f9c2293104de5bc5a"}, @generic={0x7, 0x9, "387ed12ed4"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0xa, 0xfa, [@generic={0x7e, 0x9, "e6f809cfb80a41e4b489b16e0bbc50a217b9d4940a58316024a12f88d5f5da91b9257933dcfcc81a7aee0f74f418e227fe46edb9723692b4b8074a4d26114cd53cd16701f3b5a29393ca2106eb39d0f9f169315f8089dd360ff32801a5aa18063ab5e794b2eebc6e4eccee357867beff0dc879f5c7e0a65c4290d4b6"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x58, 0x9, 0x8, 0x61}, 0x5b, &(0x7f0000000500)={0x5, 0xf, 0x5b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "7c89a2729d37de7882658fe54d014faf"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9a8f16ec182ef10da544cf439548e335"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6b, 0x3, 0x8, 0x8, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0xb6, 0x4, 0x7, 0xf000, 0x603, [0x0, 0xff00c0, 0x30, 0xffc018]}]}, 0x1, [{0x98, &(0x7f0000000380)=@string={0x98, 0x3, "8187361ef62d13ff016b69f913889f5d589e6be783d6d9513f9317fab754063254c3dc1497c6f032b75066dc4c136dbdb52d4654b4848c50ac7edb70d49307f49ce88923189ccdde851761feb42e457c1b47678a5ea3e4168363c6f09dbc9d5ebd5acde1b7854603dcea0656ad5a0402de1968f134830b814290dbb3d8ca94d20270933c5d20e7808249c7ca72e0cd8b35eb87375794"}}]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x22000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 64) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x21, "3910b2990d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r13, 0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.643952489s ago: executing program 3 (id=459): syz_emit_ethernet(0xc9, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "80b00f", 0x93, 0x2f, 0xff, @loopback, @local, {[@srh={0x88, 0x0, 0x4, 0x0, 0x0, 0x24, 0x5}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0xfffa]}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "6e75fc62220d8183b17784428c7a1a3ff0a72c57a1b0bc31868492399a6c91154c4d610dd211c34a558ce7aa064627d98b0d0c722dbbe6ee13e1ddd01f0000"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x8001, 0x8e]}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x3, 0x2, 0x0, 0x2, 0x4}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x7, 0x3, 0x1, 0x2, 0x7, 0x80}, 0x2, {0x2, 0x1, 0x3, 0x3, 0x1, 0x1, 0x0, 0x1}}}}}}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x4, 0x0, 0x5, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x60200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000000100)=0x1) 1.376997486s ago: executing program 2 (id=460): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffef83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x40}}, 0x40) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1c1480, 0x124) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f000000d280)=[{{&(0x7f0000000c00)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008005}}, {{&(0x7f0000000e80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f00)="deca07eb1aab", 0x6}], 0x1, 0x0, 0x0, 0x800c001}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) migrate_pages(r4, 0x7, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x2000400) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f00000000c0)={@local, @mcast2}) 1.078432106s ago: executing program 2 (id=461): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x4008814) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000183a00000200000000000000000000009557571dce000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 1.027089447s ago: executing program 3 (id=462): pipe2(&(0x7f00000000c0), 0x4800) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r1, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 892.939674ms ago: executing program 1 (id=463): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) socket(0x29, 0xa, 0x1) (async) r2 = io_uring_setup(0x192, &(0x7f0000000240)={0x0, 0x4178, 0x0, 0x8000002, 0x802d7}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000080)=0x2) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) syz_clone3(&(0x7f0000000340)={0x200200, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3a}, &(0x7f0000000280)=""/3, 0x3, 0x0, 0x0}, 0x58) sched_setattr(0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r6 = syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x8, 0x6, 0x4, 0x10, 0x97}, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 737.825673ms ago: executing program 2 (id=464): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$vga_arbiter(r5, &(0x7f0000000500)=@target={'target ', {'PCI:', '1a', ':', '17', ':', '9', '.', 'e'}}, 0x15) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f0000000040)="04", 0x1}) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r7 = gettid() tkill(r7, 0x7) syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/time_for_children\x00') 700.590521ms ago: executing program 3 (id=465): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"99ddc3129c3bc02ad9bb1b51b68dbef9", 0x0, 0x0, {0xcf2b, 0x2}, {0x6, 0x1}, 0xfee, [0x4, 0xa3a, 0x80, 0x8000000000000000, 0xffff, 0x0, 0x200, 0x83c, 0x0, 0x40, 0x0, 0x1, 0x8, 0xf882, 0x401, 0x8]}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)={0x0, 0x0, 0x1000000, 0x0, 0x1000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty, @multicast1}}}}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"000000000000000f01000800", r1, r2, {0x3, 0xfffffffc}, {0x0, 0x6}, 0x6, [0x9, 0xfffffffffffffff7, 0x7ff, 0xb, 0xd, 0x3, 0x0, 0x2, 0x7, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x9, 0x9000009, 0x80000001]}) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = fsopen(&(0x7f0000000280)='tracefs\x00', 0x0) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0x10e, 0xe}, {0x18, 0x110, 0xe, "c8b4b054"}], 0x28}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='/dev/vga_arbiter\x00', &(0x7f0000000300)='.,\x00', 0x0) 528.806749ms ago: executing program 4 (id=466): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008602"]) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0xffffffffffffffff, "5b692224764b9163a58427d6f1cc6728840f5235e464c8eaaef7022f9919398d", 0x200, 0x3, 0x2, 0x3}, 0x3c) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) dup(0xffffffffffffffff) syz_io_uring_setup(0xed8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, 0x0, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0x6, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a40)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xffff}]}}}]}, 0x58}}, 0x0) 528.596194ms ago: executing program 2 (id=467): epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) epoll_create1(0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) (async) 489.256876ms ago: executing program 3 (id=468): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @control={0xfb}}], 0x1c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @sdr={0x4745504d, 0x6}}) sched_setattr(0x0, &(0x7f0000000100)={0x44, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) 433.816647ms ago: executing program 3 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x54, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0xfffffffffffffe4d, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 364.971464ms ago: executing program 1 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x254, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x29c}}, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r2, 0x0, 0x81, 0x1) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 228.683378ms ago: executing program 2 (id=471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xffffffff, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a00000000000000000000000000000800", [0x6]}}) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$TIOCGPGRP(r1, 0x4c08, 0x0) (async) syz_usb_connect(0x3, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a14075090480020601"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/4096, 0x1000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r7, r7], &(0x7f0000000580)}) (async) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001100)={&(0x7f00000010c0)=[0x0, r7, r9], 0x3, 0x400}) (async) r10 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) (async) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 32) 0s ago: executing program 3 (id=472): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x0, 0x10, 0xc952, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x67, 0x0, 0x8a, 0x0, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0xcd, 0x1, 0xd, [{@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}]}]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, r1}, 0xc) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x2c020400) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x85f}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002240)=""/166, 0xa6}, {&(0x7f0000005900)=""/157, 0x9d}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/202, 0xca}, {&(0x7f00000035c0)=""/136, 0x88}], 0x6}, 0x7bfd}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x36}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/122, 0x7a}], 0x5}, 0x8}], 0x8, 0x101a0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x2102008, 0x0, 0x0, 0x0, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) unshare(0x60600) (async) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/103, 0x67) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x1, &(0x7f00002dd000/0x3000)=nil, 0x3) (async) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) syz_clone(0x20004080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000480)={r6, 0xfffffffe, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54aeac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x8000000000000]}}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8001, 0x100000001, 0x0, 0x2000000000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x11c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC={0xec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_CONCAT={0xe0, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7b5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb129}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0xe1) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9000000000000000, 0x8000000000000000, 0x6, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x42032, 0xffffffffffffffff, 0x0) (async) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): uldn't find an available UDC or it's busy [ 120.501789][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.518276][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 120.545513][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.769205][ T6296] input: syz0 as /devices/virtual/input/input8 [ 120.806744][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.818597][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.100598][ T5970] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.329436][ T5970] usb 2-1: config 0 has no interfaces? [ 121.357765][ T5970] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 121.380945][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.394258][ T5970] usb 2-1: Product: syz [ 121.419343][ T5970] usb 2-1: Manufacturer: syz [ 121.454313][ T5970] usb 2-1: SerialNumber: syz [ 121.499767][ T5970] usb 2-1: config 0 descriptor?? [ 121.506115][ T5893] usb 1-1: USB disconnect, device number 15 [ 121.598337][ T882] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.983699][ T882] usb 5-1: Using ep0 maxpacket: 16 [ 122.037674][ T882] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 122.047910][ T882] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 122.060538][ T882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.078877][ T882] usb 5-1: config 0 has no interface number 0 [ 122.093855][ T882] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 122.109651][ T882] usb 5-1: config 0 interface 104 has no altsetting 1 [ 122.227341][ T882] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 122.250025][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.268282][ T882] usb 5-1: Product: syz [ 122.285600][ T882] usb 5-1: Manufacturer: syz [ 122.301846][ T882] usb 5-1: SerialNumber: syz [ 122.330598][ T5898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 122.351231][ T882] usb 5-1: config 0 descriptor?? [ 122.512870][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.572438][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.583854][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.624592][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.651202][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.669292][ T5970] usb 3-1: USB disconnect, device number 5 [ 122.752546][ T5898] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 122.819389][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.864472][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.875853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.967166][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.998587][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.031318][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.068758][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.084134][ T5898] usb 1-1: config 0 descriptor?? [ 123.164000][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.218738][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.232155][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.279643][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.338796][ T882] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 123.394076][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.409171][ T882] asix 5-1:0.104: probe with driver asix failed with error -71 [ 123.437280][ T882] usb 5-1: USB disconnect, device number 5 [ 123.452347][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.678093][ T6339] netlink: 'syz.3.114': attribute type 27 has an invalid length. [ 123.740712][ T5897] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.926932][ T5897] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 123.957529][ T5897] usb 3-1: config 0 has an invalid interface number: 127 but max is 0 [ 123.979891][ T5897] usb 3-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 123.997030][ T5897] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 124.009790][ T5897] usb 3-1: config 0 has no interface number 0 [ 124.027611][ T5897] usb 3-1: config 0 has no interface number 1 [ 124.038399][ T5897] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 124.059112][ T5897] usb 3-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.078045][ T5897] usb 3-1: too many endpoints for config 0 interface 127 altsetting 111: 135, using maximum allowed: 30 [ 124.096133][ T5970] usb 2-1: USB disconnect, device number 9 [ 124.096917][ T5897] usb 3-1: config 0 interface 127 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 124.122747][ T5897] usb 3-1: config 0 interface 127 has no altsetting 0 [ 124.173086][ T5897] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 124.184666][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.217852][ T5897] usb 3-1: Product: syz [ 124.229781][ T5897] usb 3-1: Manufacturer: syz [ 124.245699][ T5897] usb 3-1: SerialNumber: syz [ 124.267719][ T5897] usb 3-1: config 0 descriptor?? [ 124.288328][ T6335] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.323683][ T6350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.325763][ T5897] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 124.388032][ T4143] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.433286][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 124.610591][ T5897] usb 3-1: USB disconnect, device number 6 [ 124.614097][ T5970] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.631081][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.810883][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 124.818056][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 124.828257][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.839340][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.849382][ T5970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 124.859311][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.869413][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 124.879740][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.890042][ T5970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 124.899906][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.908029][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.921220][ T5970] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 124.932006][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.942006][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.951635][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.960994][ T5970] usb 2-1: config 0 descriptor?? [ 125.080590][ T9] usb 4-1: device descriptor read/64, error -71 [ 125.111644][ T5897] usb 1-1: USB disconnect, device number 16 [ 125.184125][ T5895] usb 5-1: usb_control_msg returned -32 [ 125.189834][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 125.260657][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 125.289052][ T5970] hdpvr 2-1:0.0: firmware version 0x12 dated [ 125.340576][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.397033][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.418164][ T6364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.602943][ T5970] hdpvr 2-1:0.0: device init failed [ 125.608346][ T5970] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 125.621152][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.624914][ T9] usb 4-1: device descriptor read/64, error -71 [ 125.651840][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.686005][ T5970] usb 2-1: USB disconnect, device number 10 [ 125.800994][ T9] usb usb4-port1: attempt power cycle [ 126.171274][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.223153][ T9] usb 4-1: device descriptor read/8, error -71 [ 126.310763][ T5898] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.470746][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.480584][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 126.488650][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.506722][ T5970] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 126.522308][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 126.522524][ T9] usb 4-1: device descriptor read/8, error -71 [ 126.545567][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.605686][ T5898] usb 3-1: config 0 descriptor?? [ 126.622044][ T5898] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 126.652210][ T9] usb usb4-port1: unable to enumerate USB device [ 126.700611][ T5970] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.840718][ T5970] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 127.002616][ T5970] usb 1-1: Invalid ep0 maxpacket: 64 [ 127.019806][ T5970] usb usb1-port1: attempt power cycle [ 127.404000][ T5970] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 127.431722][ T5897] usb 5-1: USB disconnect, device number 6 [ 127.442208][ T5970] usb 1-1: Invalid ep0 maxpacket: 64 [ 127.580728][ T5970] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 127.621094][ T5970] usb 1-1: Invalid ep0 maxpacket: 64 [ 127.626901][ T5970] usb usb1-port1: unable to enumerate USB device [ 127.731699][ T5898] gspca_vc032x: reg_w err -110 [ 127.736928][ T5898] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 127.945508][ T5898] usb 3-1: USB disconnect, device number 7 [ 128.690586][ T5970] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.020581][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 129.130562][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.400637][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 129.432105][ T5970] usb 2-1: config 0 has no interfaces? [ 129.439702][ T5894] usb 3-1: config 0 has no interfaces? [ 129.469246][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 129.532429][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 129.552328][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.570673][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 129.624300][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.650269][ T5894] usb 3-1: Product: syz [ 129.670593][ T5894] usb 3-1: Manufacturer: syz [ 129.675391][ T5894] usb 3-1: SerialNumber: syz [ 129.743253][ T9] usb 4-1: Product: syz [ 129.747532][ T9] usb 4-1: Manufacturer: syz [ 129.809914][ T5894] usb 3-1: config 0 descriptor?? [ 129.815166][ T9] usb 4-1: SerialNumber: syz [ 129.956743][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 130.088001][ T5970] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.132010][ T6432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.139603][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.173575][ T5196] bcm5974 4-1:1.0: could not read from device [ 130.184895][ T5970] usb 2-1: Product: syz [ 130.189160][ T5970] usb 2-1: Manufacturer: syz [ 130.203346][ T5970] usb 2-1: SerialNumber: syz [ 130.275804][ T5970] usb 2-1: config 0 descriptor?? [ 130.298285][ T9] usb 4-1: USB disconnect, device number 14 [ 130.326892][ T5196] bcm5974 4-1:1.0: could not read from device [ 132.263351][ T5898] usb 3-1: USB disconnect, device number 8 [ 132.465330][ T6474] syz.2.151: attempt to access beyond end of device [ 132.465330][ T6474] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.509182][ T5970] usb 2-1: USB disconnect, device number 11 [ 133.118398][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.125187][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270094][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.713141][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.724382][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.804196][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.044578][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.166436][ T6483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.183600][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.524874][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.545003][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.594123][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.605941][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.615563][ T6497] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[6497] [ 135.358715][ T6503] bond0: entered promiscuous mode [ 135.391823][ T6503] bond_slave_0: entered promiscuous mode [ 135.450920][ T6503] bond_slave_1: entered promiscuous mode [ 136.240596][ T5893] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 136.410662][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 136.418074][ T5893] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 136.427618][ T5893] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 136.441415][ T6513] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 136.489620][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.523506][ T5893] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.533174][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.541701][ T5893] usb 1-1: Product: syz [ 136.553804][ T5893] usb 1-1: Manufacturer: syz [ 136.568820][ T5893] usb 1-1: SerialNumber: syz [ 136.570613][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.661999][ T5897] usb 4-1: USB disconnect, device number 15 [ 136.852775][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 136.862457][ T5970] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.875685][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.902159][ T9] usb 3-1: config 0 descriptor?? [ 136.931913][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 136.947549][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 137.058612][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.061412][ T5970] usb 5-1: config 0 has no interfaces? [ 137.095412][ T5970] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.125298][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.147863][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.161181][ T5970] usb 5-1: Product: syz [ 137.165441][ T5970] usb 5-1: Manufacturer: syz [ 137.179750][ T5893] usb 1-1: 0:2 : does not exist [ 137.183107][ T5970] usb 5-1: SerialNumber: syz [ 137.194993][ T5970] usb 5-1: config 0 descriptor?? [ 137.278455][ T5893] usb 1-1: USB disconnect, device number 21 [ 137.420273][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 137.770635][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.882586][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.951501][ T10] usb 2-1: config 0 has no interfaces? [ 137.974534][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.010063][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.036359][ T10] usb 2-1: Product: syz [ 138.046242][ T10] usb 2-1: Manufacturer: syz [ 138.058331][ T10] usb 2-1: SerialNumber: syz [ 138.070920][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 138.085555][ T6527] batadv0: entered promiscuous mode [ 138.091725][ T6527] macvtap1: entered promiscuous mode [ 138.104434][ T6527] macvtap1: entered allmulticast mode [ 138.111505][ T10] usb 2-1: config 0 descriptor?? [ 138.117410][ T6527] batadv0: entered allmulticast mode [ 138.124126][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 138.140183][ T5897] usb 4-1: config index 0 descriptor too short (expected 71, got 36) [ 138.149181][ T5897] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.153438][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 138.179173][ T6527] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.188624][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.196007][ T6528] batadv0: left allmulticast mode [ 138.223662][ T6528] batadv0: left promiscuous mode [ 138.240148][ T5897] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 138.287642][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.414453][ T5897] usb 4-1: config 0 descriptor?? [ 138.557690][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'. [ 139.293695][ T5893] usb 3-1: USB disconnect, device number 9 [ 139.351132][ T5970] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 139.437563][ T5897] usb 5-1: USB disconnect, device number 7 [ 139.670938][ T5970] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.681752][ T5970] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 139.706610][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.718616][ T6554] capability: warning: `syz.4.173' uses 32-bit capabilities (legacy support in use) [ 139.838391][ T5970] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 139.916070][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.010613][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.140639][ T5970] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.192208][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.212938][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.248522][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.286148][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.309859][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.319884][ T5893] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.330459][ T5893] usb 5-1: Manufacturer: syz [ 140.337487][ T5893] usb 5-1: config 0 descriptor?? [ 140.376548][ T5898] usb 4-1: USB disconnect, device number 16 [ 140.452630][ T5970] usb 3-1: config 0 has no interfaces? [ 140.498981][ T5970] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.528326][ T5897] usb 2-1: USB disconnect, device number 12 [ 140.562870][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.614442][ T5970] usb 3-1: Product: syz [ 140.636817][ T5970] usb 3-1: Manufacturer: syz [ 140.682093][ T5970] usb 3-1: SerialNumber: syz [ 140.753470][ T5893] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 140.765502][ T5893] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 140.765887][ T5970] usb 3-1: config 0 descriptor?? [ 140.853226][ T5893] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 141.028098][ T5893] usb 5-1: USB disconnect, device number 8 [ 141.869738][ T9] usb 1-1: USB disconnect, device number 22 [ 142.381378][ T6580] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 142.415352][ T6580] bond0: entered promiscuous mode [ 142.453366][ T6580] bond_slave_0: entered promiscuous mode [ 142.479721][ T6580] bond_slave_1: entered promiscuous mode [ 142.522751][ T6589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.537086][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 143.331673][ T5897] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 143.509465][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 143.530883][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 143.747087][ T5897] usb 1-1: config index 0 descriptor too short (expected 37691, got 77) [ 143.755719][ T5897] usb 1-1: config 83 has too many interfaces: 132, using maximum allowed: 32 [ 143.771774][ T5897] usb 1-1: config 83 has an invalid descriptor of length 153, skipping remainder of the config [ 143.782779][ T5897] usb 1-1: config 83 has 0 interfaces, different from the descriptor's value: 132 [ 143.805446][ T5893] usb 3-1: USB disconnect, device number 10 [ 143.835457][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 143.849084][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.861272][ T5897] usb 1-1: Product: syz [ 143.865622][ T5897] usb 1-1: Manufacturer: syz [ 143.873274][ T5897] usb 1-1: SerialNumber: syz [ 144.528215][ T6616] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 144.547591][ T6616] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 144.609933][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.621263][ T6616] batadv0: entered promiscuous mode [ 144.630291][ T6616] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 145.253439][ T6620] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 145.650706][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 145.828011][ T9] usb 4-1: config 0 has no interfaces? [ 145.851558][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.866141][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.874905][ T9] usb 4-1: Product: syz [ 145.879276][ T9] usb 4-1: Manufacturer: syz [ 145.888612][ T9] usb 4-1: SerialNumber: syz [ 145.958587][ T9] usb 4-1: config 0 descriptor?? [ 146.497362][ T5897] usb 1-1: USB disconnect, device number 23 [ 146.689549][ T6640] input: syz0 as /devices/virtual/input/input11 [ 147.575298][ T6651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.620686][ T5898] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 147.793002][ T5898] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.885085][ T5898] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 147.930554][ T5898] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.944579][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.954086][ T5898] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 147.965299][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.984020][ T5898] usb 5-1: config 0 descriptor?? [ 147.991836][ T6646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.000719][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 148.163085][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 148.227809][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.291377][ T10] usb 1-1: config 0 descriptor?? [ 148.447513][ T5970] usb 4-1: USB disconnect, device number 17 [ 148.518563][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 148.544314][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.597121][ T5898] usb 5-1: USB disconnect, device number 9 [ 148.811081][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 148.977862][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 149.031275][ T9] usb 2-1: config 10 has an invalid interface number: 117 but max is 1 [ 149.049996][ T9] usb 2-1: config 10 has an invalid interface number: 149 but max is 1 [ 149.076038][ T9] usb 2-1: config 10 has no interface number 0 [ 149.083915][ T9] usb 2-1: config 10 has no interface number 1 [ 149.094327][ T9] usb 2-1: config 10 interface 117 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 149.106427][ T9] usb 2-1: config 10 interface 117 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 149.122689][ T9] usb 2-1: config 10 interface 117 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 149.140343][ T9] usb 2-1: config 10 interface 117 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 149.182521][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 149.198959][ T6669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.228819][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 149.242323][ T9] usb 2-1: config 10 interface 149 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 149.277205][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 149.288946][ T9] usb 2-1: config 10 interface 149 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 149.292164][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.302486][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 149.328941][ T9] usb 2-1: config 10 interface 149 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 149.355360][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 149.376482][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.387499][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 149.399754][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.423145][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 149.459995][ T9] usb 2-1: config 10 interface 149 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 149.482731][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.491207][ T5894] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.504493][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 149.519598][ T5898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.527602][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 149.529488][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.552383][ T5898] usb 3-1: Product: syz [ 149.557322][ T5898] usb 3-1: Manufacturer: syz [ 149.570014][ T5898] usb 3-1: SerialNumber: syz [ 149.575313][ T9] usb 2-1: config 10 interface 149 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 149.599514][ T9] usb 2-1: config 10 interface 117 has no altsetting 0 [ 149.612853][ T9] usb 2-1: config 10 interface 149 has no altsetting 0 [ 149.623478][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=41c3, bcdDevice=76.de [ 149.633413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.647752][ T10] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 149.670800][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 149.684961][ T5894] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 149.694867][ T10] usb 1-1: USB disconnect, device number 24 [ 149.704990][ T9] usb 2-1: Product: 굳豤꠪䬁㻙湣糍遨牛⊣횤Ᲊ꼏ᣅ逃慮汈倒뜷憍영謒㞨⥒⊼ᮊ닊睐徢嬥⻙颺α寨㺃ꙡ㚜訤᱈䬝黇䧼뉝ධ쾤풐嶒핌㘉慮穱捃뒸䑕⺄紗ᷰ抓䙹콽氁犺倾ᚤ뼿뤾翭퓁絺ૅ⨈蠚심㍧䍔좵潏⋪Ӥᯮ俈ᝢ֏꼲Ⰿ켻픂왫 [ 149.737204][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.747381][ T5894] usb 5-1: config 0 has no interface number 0 [ 149.760862][ T5894] usb 5-1: config 0 interface 230 has no altsetting 0 [ 149.779502][ T9] usb 2-1: Manufacturer: ф [ 149.785764][ T9] usb 2-1: SerialNumber: ш [ 149.792460][ T5894] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 149.803026][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.813276][ T5894] usb 5-1: Product: syz [ 149.819635][ T5894] usb 5-1: Manufacturer: syz [ 149.828203][ T6659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.837741][ T5894] usb 5-1: SerialNumber: syz [ 149.847482][ T5894] usb 5-1: config 0 descriptor?? [ 149.858975][ T5894] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 149.883633][ T5894] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 150.046547][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.055727][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.075507][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.085206][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.110305][ T9] option 2-1:10.117: GSM modem (1-port) converter detected [ 150.138245][ T9] option 2-1:10.149: GSM modem (1-port) converter detected [ 150.156353][ T9] usb 2-1: USB disconnect, device number 13 [ 150.174974][ T9] option 2-1:10.117: device disconnected [ 150.188299][ T9] option 2-1:10.149: device disconnected [ 150.629908][ T5898] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 150.644524][ T5898] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 150.652988][ T5898] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 151.023729][ T5898] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 151.141700][ T5898] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 151.174101][ T5898] usb 3-1: USB disconnect, device number 11 [ 151.201840][ T5898] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 151.540145][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 152.023974][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.202936][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.219784][ T5894] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 152.228707][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 152.245743][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.281889][ T9] usb 2-1: config 0 descriptor?? [ 152.306026][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 152.345512][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 152.420513][ T5894] usb 5-1: USB disconnect, device number 10 [ 152.563412][ T6735] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 152.606033][ T6735] netlink: 'syz.4.217': attribute type 10 has an invalid length. [ 152.657795][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 152.903494][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 152.915813][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 152.923796][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 152.931702][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 152.939144][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 152.947627][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.958931][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 152.976556][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.012116][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 153.020376][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 153.027898][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 153.042519][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 153.053559][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 153.062036][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 153.069609][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 153.200769][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.230708][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 153.239200][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 153.257244][ T9] pwc: Registered as video103. [ 153.265822][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 153.318185][ T6735] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.367267][ T6739] bond0: entered promiscuous mode [ 153.451563][ T5894] usb 2-1: USB disconnect, device number 14 [ 153.470600][ T6739] bond_slave_0: entered promiscuous mode [ 153.491125][ T6739] bond_slave_1: entered promiscuous mode [ 153.518666][ T6739] batadv0: entered promiscuous mode [ 154.232367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.311186][ T5897] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 154.500812][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 154.510494][ T5897] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 154.524097][ T5897] usb 5-1: config 0 has no interface number 0 [ 154.530366][ T5897] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 154.604326][ T5897] usb 5-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 154.650857][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 154.659920][ T5897] usb 5-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 154.671352][ T10] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 154.682517][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.713141][ T5897] usb 5-1: Product: syz [ 154.719107][ T10] usb 2-1: config 0 has no interface number 0 [ 154.726545][ T5897] usb 5-1: Manufacturer: syz [ 154.751184][ T5897] usb 5-1: SerialNumber: syz [ 154.773522][ T10] usb 2-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 154.821876][ T5897] usb 5-1: config 0 descriptor?? [ 154.829966][ T10] usb 2-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 154.854408][ T5897] spcp8x5 5-1:0.201: SPCP8x5 converter detected [ 154.869401][ T10] usb 2-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 154.898252][ T5897] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 154.901545][ T10] usb 2-1: config 0 interface 68 has no altsetting 0 [ 154.922180][ T10] usb 2-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 154.939337][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.966442][ T10] usb 2-1: Product: syz [ 154.976809][ T10] usb 2-1: Manufacturer: syz [ 154.984553][ T10] usb 2-1: SerialNumber: syz [ 155.031522][ T10] usb 2-1: config 0 descriptor?? [ 155.045258][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.061348][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.087614][ T50] usb 5-1: USB disconnect, device number 11 [ 155.105459][ T50] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 155.136837][ T50] spcp8x5 5-1:0.201: device disconnected [ 155.190709][ T5897] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 155.230703][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 155.260518][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'. [ 155.263928][ T10] sisusb 2-1:0.68: Invalid USB2VGA device [ 155.285765][ T10] sisusb 2-1:0.68: probe with driver sisusb failed with error -22 [ 155.306416][ T10] usb 2-1: USB disconnect, device number 15 [ 155.337241][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 155.380725][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 155.391889][ T5897] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 155.402042][ T5897] usb 1-1: config 8 has no interface number 0 [ 155.408221][ T5897] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 155.420991][ T5897] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.446993][ T5897] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 155.457125][ T5897] usb 1-1: config 8 interface 39 has no altsetting 0 [ 155.476838][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 155.489036][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.501932][ T5897] usb 1-1: Product: syz [ 155.506153][ T5897] usb 1-1: Manufacturer: syz [ 155.513923][ T5897] usb 1-1: SerialNumber: syz [ 155.616287][ T50] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.727874][ T6768] netlink: 64 bytes leftover after parsing attributes in process `syz.0.226'. [ 155.737681][ T6768] batadv_slave_1: entered promiscuous mode [ 155.756150][ T6770] batadv_slave_1: left promiscuous mode [ 155.771076][ T5897] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 155.794117][ T5897] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 155.806288][ T50] usb 3-1: config 0 has no interfaces? [ 155.831286][ T5897] usb 1-1: USB disconnect, device number 25 [ 155.847335][ T50] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.877724][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.886195][ T50] usb 3-1: Product: syz [ 155.890494][ T50] usb 3-1: Manufacturer: syz [ 155.895506][ T50] usb 3-1: SerialNumber: syz [ 155.904493][ T50] usb 3-1: config 0 descriptor?? [ 155.951351][ T5894] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 156.030675][ T5898] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.100940][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.123266][ T5894] usb 4-1: config 0 has no interfaces? [ 156.132853][ T5894] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.142566][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.156350][ T5894] usb 4-1: Product: syz [ 156.160785][ T5894] usb 4-1: Manufacturer: syz [ 156.165578][ T5894] usb 4-1: SerialNumber: syz [ 156.174367][ T5894] usb 4-1: config 0 descriptor?? [ 156.205752][ T5898] usb 5-1: config 0 has no interfaces? [ 156.214586][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.234630][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.247402][ T5898] usb 5-1: Product: syz [ 156.250560][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 156.267096][ T5898] usb 5-1: Manufacturer: syz [ 156.272177][ T5898] usb 5-1: SerialNumber: syz [ 156.279623][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 156.287992][ T5898] usb 5-1: config 0 descriptor?? [ 156.298900][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.320976][ T10] usb 2-1: Product: syz [ 156.325215][ T10] usb 2-1: Manufacturer: syz [ 156.329852][ T10] usb 2-1: SerialNumber: syz [ 156.395130][ T10] usb 2-1: config 0 descriptor?? [ 156.420240][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 156.427050][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 156.437422][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 156.627365][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.636562][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.647227][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.658458][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.671512][ T10] gspca_vc032x: reg_w err -71 [ 156.683031][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.699263][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.706750][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.718062][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.725316][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.733251][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.738887][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.746260][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.761647][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.775339][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.782346][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.787932][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.804223][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.809975][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.817844][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.825577][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.832877][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.838542][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.846169][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.854139][ T10] gspca_vc032x: Unknown sensor... [ 156.859437][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 156.903132][ T10] usb 2-1: USB disconnect, device number 16 [ 157.386671][ T6795] netlink: 'syz.0.233': attribute type 10 has an invalid length. [ 158.248724][ T5898] usb 3-1: USB disconnect, device number 12 [ 158.724674][ T5894] usb 5-1: USB disconnect, device number 12 [ 158.800575][ T5898] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 158.830533][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 158.985638][ T5898] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.043166][ T5898] usb 3-1: config 179 has no interface number 0 [ 159.092458][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 159.098780][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.104364][ T50] usb 4-1: USB disconnect, device number 18 [ 159.131319][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 159.170672][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 159.171824][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.274843][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.303144][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 159.310721][ T9] usb 2-1: config 0 descriptor?? [ 159.347306][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 159.360686][ T5898] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.439647][ T5898] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.485145][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.529238][ T6804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.549482][ T6826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.241'. [ 159.585902][ T5898] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 159.710067][ T5898] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 159.742043][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.754008][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.796014][ T5898] usb 3-1: USB disconnect, device number 13 [ 159.803303][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.827624][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.859643][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.939860][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.973182][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.984711][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 160.001684][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 160.010959][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 160.021373][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 160.029409][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 160.038169][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 160.048325][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 160.060263][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 160.068668][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.077637][ T9] pwc: Registered as video103. [ 160.087240][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 160.104301][ T9] usb 2-1: USB disconnect, device number 17 [ 160.188990][ T6837] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 160.199442][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 160.241441][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.387330][ T5893] usb 4-1: config index 0 descriptor too short (expected 770, got 77) [ 160.396279][ T5893] usb 4-1: config 236 has an invalid descriptor of length 91, skipping remainder of the config [ 160.411143][ T5894] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 160.420095][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.439138][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.448637][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.463931][ T5894] usb 5-1: Product: syz [ 160.501523][ T5894] usb 5-1: Manufacturer: syz [ 160.517897][ T5894] usb 5-1: SerialNumber: syz [ 160.528866][ T5893] usb 4-1: config 236 has no interfaces? [ 160.782239][ T30] audit: type=1326 audit(1744689967.523:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 160.783440][ T6833] PKCS8: Unsupported PKCS#8 version [ 160.813422][ T5894] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 160.855314][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.882998][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.893451][ T5893] usb 4-1: Product: syz [ 160.903595][ T5893] usb 4-1: Manufacturer: syz [ 160.908343][ T5893] usb 4-1: SerialNumber: syz [ 160.915371][ T30] audit: type=1326 audit(1744689967.523:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 160.938124][ T30] audit: type=1326 audit(1744689967.523:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 160.962095][ T30] audit: type=1326 audit(1744689967.523:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 160.984519][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.031877][ T5894] usb 5-1: USB disconnect, device number 13 [ 161.035626][ T30] audit: type=1326 audit(1744689967.523:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 161.141924][ T30] audit: type=1326 audit(1744689967.573:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 161.164437][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.184828][ T30] audit: type=1326 audit(1744689967.583:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x7ffc0000 [ 161.912781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.395279][ T6859] sctp: [Deprecated]: syz.2.251 (pid 6859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.395279][ T6859] Use struct sctp_sack_info instead [ 162.463635][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.630548][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 162.649986][ T5897] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.676393][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.706922][ T5897] usb 5-1: Product: syz [ 162.719383][ T5897] usb 5-1: Manufacturer: syz [ 162.734466][ T5897] usb 5-1: SerialNumber: syz [ 162.788617][ T5897] r8152-cfgselector 5-1: Unknown version 0x0000 [ 162.803070][ T5897] r8152-cfgselector 5-1: config 0 descriptor?? [ 162.815577][ T5893] usb 4-1: USB disconnect, device number 19 [ 163.439578][ T6878] sctp: [Deprecated]: syz.1.256 (pid 6878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.439578][ T6878] Use struct sctp_sack_info instead [ 163.581023][ T5894] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 163.603037][ T6880] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 163.614859][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.624396][ T6880] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.638413][ T5897] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 163.792888][ T5894] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.817009][ T5894] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.943636][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.009674][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.122906][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.240655][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 164.276509][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.286066][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.295209][ T5894] usb 1-1: Product: syz [ 164.299676][ T5894] usb 1-1: Manufacturer: syz [ 164.309962][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 164.315789][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 164.324960][ T5894] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 164.331693][ T5894] cdc_wdm 1-1:1.0: Unknown control protocol [ 164.380612][ T9] usb 2-1: device descriptor read/64, error -71 [ 164.577565][ T30] audit: type=1326 audit(1744689971.313:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f5f8d169 code=0x7ffc0000 [ 164.630649][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 164.650228][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.651577][ T5897] usb 1-1: USB disconnect, device number 26 [ 164.657233][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.657260][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 164.774005][ T30] audit: type=1326 audit(1744689971.313:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f22f5f8d169 code=0x7ffc0000 [ 164.780602][ T9] usb 2-1: device descriptor read/64, error -71 [ 164.824086][ T30] audit: type=1326 audit(1744689971.313:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.2.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f5f8d169 code=0x7ffc0000 [ 164.925789][ T6894] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 165.006437][ T9] usb usb2-port1: attempt power cycle [ 165.251416][ T5897] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 165.372212][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.400502][ T5897] usb 1-1: device descriptor read/64, error -71 [ 165.401180][ T9] usb 2-1: device descriptor read/8, error -71 [ 165.480641][ T50] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 165.640967][ T5897] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 165.650862][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.651043][ T50] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 165.672989][ T50] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 165.683697][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.694047][ T9] usb 2-1: device descriptor read/8, error -71 [ 165.699561][ T50] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 165.813115][ T5897] usb 1-1: device descriptor read/64, error -71 [ 165.821227][ T9] usb usb2-port1: unable to enumerate USB device [ 165.933656][ T5897] usb usb1-port1: attempt power cycle [ 166.080710][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.255388][ T5893] usb 5-1: config 0 has no interfaces? [ 166.268100][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.277632][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.290725][ T5897] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 166.304836][ T5893] usb 5-1: Product: syz [ 166.309472][ T5893] usb 5-1: Manufacturer: syz [ 166.316362][ T5893] usb 5-1: SerialNumber: syz [ 166.343151][ T5893] usb 5-1: config 0 descriptor?? [ 166.520607][ T5897] usb 1-1: device not accepting address 29, error -71 [ 166.714986][ T50] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 167.348512][ T50] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 167.361189][ T50] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 167.775623][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.784742][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.393476][ T6934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 168.403789][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 168.420095][ T6934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 168.498873][ T6934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 168.626361][ T6943] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 168.646124][ T6943] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 169.404640][ T5897] usb 5-1: USB disconnect, device number 16 [ 169.658068][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 169.658090][ T30] audit: type=1326 audit(1744689976.323:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 169.741021][ T30] audit: type=1326 audit(1744689976.323:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 169.780545][ T50] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.826114][ T6958] overlayfs: missing 'lowerdir' [ 169.856509][ T6960] dvmrp0: entered allmulticast mode [ 169.897658][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.959518][ T30] audit: type=1326 audit(1744689976.323:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 169.985726][ T30] audit: type=1326 audit(1744689976.323:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.011089][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 170.017823][ T30] audit: type=1326 audit(1744689976.333:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.042229][ T50] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 170.059985][ T50] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 170.075573][ T50] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 170.094508][ T50] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 170.116116][ T50] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 170.135292][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.158042][ T30] audit: type=1326 audit(1744689976.333:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29cb78bad0 code=0x7ffc0000 [ 170.196561][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.274064][ T30] audit: type=1326 audit(1744689976.333:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.303051][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 170.462243][ T50] ath6kl: Failed to submit usb control message: -71 [ 170.469451][ T50] ath6kl: unable to send the bmi data to the device: -71 [ 170.487330][ T50] ath6kl: Unable to send get target info: -71 [ 170.508009][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.525293][ T30] audit: type=1326 audit(1744689976.333:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.532954][ T50] ath6kl: Failed to init ath6kl core: -71 [ 170.579047][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 170.641354][ T50] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 170.659940][ T30] audit: type=1326 audit(1744689976.333:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.719327][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 170.723432][ T50] usb 3-1: USB disconnect, device number 14 [ 170.780662][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.826264][ T9] usb 2-1: Product: syz [ 170.839044][ T30] audit: type=1326 audit(1744689976.333:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cb78d169 code=0x7ffc0000 [ 170.873080][ T9] usb 2-1: Manufacturer: syz [ 170.914416][ T9] usb 2-1: SerialNumber: syz [ 172.100678][ T5894] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 172.314962][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.346995][ T5894] usb 1-1: config 84 has an invalid interface number: 151 but max is 0 [ 172.366617][ T5894] usb 1-1: config 84 has no interface number 0 [ 172.385281][ T5894] usb 1-1: config 84 interface 151 has no altsetting 0 [ 172.417212][ T5894] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=32.ab [ 172.437981][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.464004][ T5894] usb 1-1: Product: syz [ 172.476461][ T5894] usb 1-1: Manufacturer: syz [ 172.487826][ T5894] usb 1-1: SerialNumber: syz [ 172.704536][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 172.735278][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 172.780230][ T5894] usb 1-1: bad CDC descriptors [ 172.824231][ T6987] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 172.864436][ T9] usb 2-1: USB disconnect, device number 22 [ 172.898788][ T6987] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 172.911270][ T5894] usb 1-1: USB disconnect, device number 31 [ 173.280570][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.542670][ T9] usb 2-1: config 0 has no interfaces? [ 173.591673][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.602142][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.631407][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.639551][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.673268][ T9] usb 2-1: Product: syz [ 173.706600][ T9] usb 2-1: Manufacturer: syz [ 173.885100][ T9] usb 2-1: SerialNumber: syz [ 173.894098][ T9] usb 2-1: config 0 descriptor?? [ 174.781598][ T7013] warning: `syz.2.289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 174.823128][ T5897] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 174.879501][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 174.948353][ T7015] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 175.060549][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 175.072234][ T5897] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 175.091133][ T5897] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.158989][ T5897] usb 1-1: config 1 interface 0 has no altsetting 0 [ 175.219316][ T5897] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.40 [ 175.240205][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.278441][ T5897] usb 1-1: Product: syz [ 175.302856][ T5897] usb 1-1: Manufacturer: syz [ 175.358748][ T5897] usb 1-1: SerialNumber: syz [ 175.472003][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.495306][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.512561][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.530150][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.543405][ T7030] syz.2.294: attempt to access beyond end of device [ 175.543405][ T7030] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.594704][ T7031] blktrace: Concurrent blktraces are not allowed on loop1 [ 175.626805][ T5897] usbhid 1-1:1.0: can't add hid device: -71 [ 175.633585][ T5897] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 175.658027][ T5897] usb 1-1: USB disconnect, device number 32 [ 175.909240][ T7033] netlink: 76 bytes leftover after parsing attributes in process `syz.3.295'. [ 176.077999][ T9] usb 2-1: USB disconnect, device number 23 [ 176.428677][ T7040] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 176.513026][ T7040] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 176.538545][ T9] usb 4-1: USB disconnect, device number 20 [ 177.370910][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.581804][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.625047][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.736685][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.816493][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.909409][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.956659][ T9] usb 5-1: config 0 descriptor?? [ 178.397573][ T9] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 178.431683][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 178.559547][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 178.621046][ T9] usb 5-1: USB disconnect, device number 17 [ 179.120810][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.588178][ T9] usb 5-1: config 0 has no interfaces? [ 179.921030][ T7083] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 179.965884][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 179.981518][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.008051][ T7083] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.029111][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.038029][ T9] usb 5-1: Product: syz [ 180.044513][ T9] usb 5-1: Manufacturer: syz [ 180.061749][ T9] usb 5-1: SerialNumber: syz [ 180.086262][ T9] usb 5-1: config 0 descriptor?? [ 180.366896][ T5897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 180.463583][ T7106] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.584358][ T5897] usb 2-1: config 0 has no interfaces? [ 180.666863][ T7108] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 180.704433][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.714944][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.726876][ T5897] usb 2-1: Product: syz [ 180.736086][ T5897] usb 2-1: Manufacturer: syz [ 180.741162][ T50] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 180.755241][ T5897] usb 2-1: SerialNumber: syz [ 180.776056][ T5897] usb 2-1: config 0 descriptor?? [ 180.958206][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.976233][ T7113] fuse: Invalid uid '0x0000000000000006' [ 180.984228][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.035320][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 181.099473][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.116172][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 181.116195][ T30] audit: type=1800 audit(1744689987.853:96): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="file1" dev="tmpfs" ino=331 res=0 errno=0 [ 181.152718][ T7114] vcan1: entered promiscuous mode [ 181.166733][ T50] usb 4-1: config 0 descriptor?? [ 181.198121][ T7114] vcan1: entered allmulticast mode [ 181.262004][ T50] pwc: Askey VC010 type 2 USB webcam detected. [ 181.320650][ T7119] netlink: 1 bytes leftover after parsing attributes in process `syz.2.314'. [ 181.329936][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 181.341210][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 181.352112][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 181.665997][ T50] pwc: recv_control_msg error -32 req 02 val 2b00 [ 181.676299][ T50] pwc: recv_control_msg error -32 req 02 val 2700 [ 181.691442][ T7126] ======================================================= [ 181.691442][ T7126] WARNING: The mand mount option has been deprecated and [ 181.691442][ T7126] and is ignored by this kernel. Remove the mand [ 181.691442][ T7126] option from the mount to silence this warning. [ 181.691442][ T7126] ======================================================= [ 181.769486][ T882] usb 5-1: USB disconnect, device number 18 [ 181.801737][ T50] pwc: recv_control_msg error -32 req 02 val 2c00 [ 181.855379][ T50] pwc: recv_control_msg error -32 req 04 val 1000 [ 181.886167][ T50] pwc: recv_control_msg error -32 req 04 val 1300 [ 181.918962][ T50] pwc: recv_control_msg error -32 req 04 val 1400 [ 181.941203][ T50] pwc: recv_control_msg error -32 req 02 val 2000 [ 181.954309][ T7126] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.026853][ T50] pwc: recv_control_msg error -32 req 02 val 2100 [ 182.046943][ T50] pwc: recv_control_msg error -32 req 04 val 1500 [ 182.096350][ T7134] syz.0.317: attempt to access beyond end of device [ 182.096350][ T7134] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 182.130122][ T50] pwc: recv_control_msg error -32 req 02 val 2500 [ 182.169098][ T50] pwc: recv_control_msg error -32 req 02 val 2400 [ 182.208915][ T50] pwc: recv_control_msg error -32 req 02 val 2600 [ 182.222216][ T7135] blktrace: Concurrent blktraces are not allowed on loop1 [ 182.250344][ T50] pwc: recv_control_msg error -32 req 02 val 2900 [ 182.273805][ T50] pwc: recv_control_msg error -32 req 02 val 2800 [ 182.286772][ T50] pwc: recv_control_msg error -32 req 04 val 1100 [ 182.299514][ T50] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.308838][ T50] pwc: Registered as video103. [ 182.310248][ T30] audit: type=1326 audit(1744689989.053:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.4.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8d169 code=0x0 [ 182.439674][ T50] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 182.548746][ T50] usb 4-1: USB disconnect, device number 21 [ 183.527758][ T9] usb 2-1: USB disconnect, device number 24 [ 183.777326][ T7163] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 183.898463][ T7165] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 183.941095][ T5894] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 184.132909][ T5894] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 184.145967][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 184.414826][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.426558][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.435215][ T5894] usb 1-1: Product: syz [ 184.439694][ T5894] usb 1-1: Manufacturer: syz [ 184.445640][ T5894] usb 1-1: SerialNumber: syz [ 184.464704][ T5894] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 184.670981][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.711212][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.754395][ T5894] usb 1-1: USB disconnect, device number 33 [ 184.780906][ T882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 184.942809][ T882] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.955469][ T882] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.985828][ T882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.999229][ T882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 185.020545][ T882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 185.130884][ T882] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.146421][ T882] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.162011][ T882] usb 4-1: Product: syz [ 185.174824][ T882] usb 4-1: Manufacturer: syz [ 185.191057][ T882] cdc_wdm 4-1:1.0: skipping garbage [ 185.205207][ T882] cdc_wdm 4-1:1.0: skipping garbage [ 185.213501][ T882] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 185.219559][ T882] cdc_wdm 4-1:1.0: Unknown control protocol [ 185.240675][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 185.351557][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.393031][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 185.414354][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 185.453618][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.468543][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 185.483085][ T7187] syz.0.332: attempt to access beyond end of device [ 185.483085][ T7187] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 185.498756][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.527119][ T7187] blktrace: Concurrent blktraces are not allowed on loop1 [ 185.534999][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.557247][ T5897] usb 3-1: config 0 has no interfaces? [ 185.568547][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.579170][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.579192][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.579217][ T5897] usb 3-1: Product: syz [ 185.579233][ T5897] usb 3-1: Manufacturer: syz [ 185.631965][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.671601][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 185.681556][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 185.691463][ T50] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 185.708366][ T5897] usb 3-1: SerialNumber: syz [ 185.719034][ T5894] usb 5-1: Product: syz [ 185.735240][ T5894] usb 5-1: Manufacturer: syz [ 185.735851][ T5897] usb 3-1: config 0 descriptor?? [ 185.790319][ T5897] usb 4-1: USB disconnect, device number 22 [ 185.813981][ T5894] usb 5-1: SerialNumber: syz [ 185.870610][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 185.888254][ T50] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 185.894697][ T5894] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 185.916778][ T50] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 185.949840][ T50] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 186.321641][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.359386][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.373367][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.460758][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.491849][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.557495][ T50] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 186.586555][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.600552][ T50] usb 2-1: can't read configurations, error -71 [ 186.614077][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.640725][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.684881][ T7181] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 186.892417][ T5894] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 187.145579][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.159199][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 187.191977][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.258165][ T5894] usb 1-1: config 0 descriptor?? [ 187.292721][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 187.709057][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.722091][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 187.731035][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 187.810088][ T5894] pwc: recv_control_msg error -32 req 04 val 1000 [ 187.823681][ T5894] pwc: recv_control_msg error -32 req 04 val 1300 [ 187.831519][ T5894] pwc: recv_control_msg error -32 req 04 val 1400 [ 187.841395][ T5894] pwc: recv_control_msg error -32 req 02 val 2000 [ 187.848840][ T5894] pwc: recv_control_msg error -32 req 02 val 2100 [ 187.857132][ T5894] pwc: recv_control_msg error -32 req 04 val 1500 [ 187.865111][ T5894] pwc: recv_control_msg error -32 req 02 val 2500 [ 187.872724][ T5894] pwc: recv_control_msg error -32 req 02 val 2400 [ 187.918809][ T5894] pwc: recv_control_msg error -32 req 02 val 2600 [ 187.927577][ T5894] pwc: recv_control_msg error -32 req 02 val 2900 [ 187.952067][ T50] usb 3-1: USB disconnect, device number 15 [ 187.961579][ T5894] pwc: recv_control_msg error -32 req 02 val 2800 [ 187.970016][ T5894] pwc: recv_control_msg error -32 req 04 val 1100 [ 187.982947][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 188.008606][ T5894] pwc: Registered as video103. [ 188.095939][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 188.096143][ T5893] usb 5-1: USB disconnect, device number 19 [ 188.136726][ T7210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 188.161241][ T5894] usb 1-1: USB disconnect, device number 34 [ 188.217166][ T5893] appletouch 5-1:1.0: input: appletouch disconnected [ 188.302491][ T7213] bond0: entered promiscuous mode [ 188.314815][ T7213] bond_slave_0: entered promiscuous mode [ 188.380756][ T7213] bond_slave_1: entered promiscuous mode [ 188.415726][ T7213] batadv0: entered promiscuous mode [ 188.750847][ T5893] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 188.939983][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.974463][ T5893] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.035017][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.099143][ T5893] usb 5-1: config 0 descriptor?? [ 189.183779][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 189.295960][ T882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 189.499397][ T882] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.511177][ T882] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.552543][ T882] usb 2-1: config 220 has no interface number 2 [ 189.569906][ T882] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.611233][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 189.627946][ T882] usb 2-1: config 220 interface 0 has no altsetting 0 [ 189.660106][ T882] usb 2-1: config 220 interface 76 has no altsetting 0 [ 189.832964][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 189.861535][ T882] usb 2-1: config 220 interface 1 has no altsetting 0 [ 189.874751][ T882] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.886093][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.894397][ T882] usb 2-1: Product: syz [ 189.900077][ T882] usb 2-1: Manufacturer: syz [ 189.905980][ T882] usb 2-1: SerialNumber: syz [ 190.057492][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.097184][ T5897] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 190.169754][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.278318][ T5897] usb 4-1: config 0 descriptor?? [ 190.702713][ T5897] logitech 0003:046D:C50C.0006: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0 [ 190.897417][ T50] usb 4-1: USB disconnect, device number 23 [ 191.240534][ T5894] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 191.417084][ T5894] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 191.456025][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.570889][ T5894] usb 1-1: config 0 descriptor?? [ 191.675139][ T5894] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 191.721471][ T5894] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 192.070721][ T50] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 192.154771][ T5893] pwc: recv_control_msg error -71 req 02 val 2700 [ 192.171647][ T5894] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.186326][ T5893] pwc: recv_control_msg error -71 req 02 val 2c00 [ 192.208930][ T5893] pwc: recv_control_msg error -71 req 04 val 1000 [ 192.217928][ T5893] pwc: recv_control_msg error -71 req 04 val 1300 [ 192.225949][ T5893] pwc: recv_control_msg error -71 req 04 val 1400 [ 192.243525][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.268452][ T5893] pwc: recv_control_msg error -71 req 02 val 2000 [ 192.281456][ T50] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 192.307397][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 192.320864][ T5893] pwc: recv_control_msg error -71 req 02 val 2100 [ 192.328035][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 192.338538][ T5893] pwc: recv_control_msg error -71 req 04 val 1500 [ 192.345788][ T50] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.359388][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 192.367849][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 192.372190][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.375054][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 192.399771][ T5894] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.421745][ T50] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 192.436694][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 192.445014][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.445845][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.469398][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 192.485609][ T5894] usb 3-1: config 0 descriptor?? [ 192.496989][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 192.500681][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 192.512631][ T50] usb 4-1: Product: syz [ 192.535869][ T50] usb 4-1: Manufacturer: syz [ 192.548496][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 192.557676][ T50] usb 4-1: SerialNumber: syz [ 192.586611][ T5893] pwc: Registered as video103. [ 192.665318][ T50] usb 4-1: config 0 descriptor?? [ 192.710762][ T882] usb 2-1: selecting invalid altsetting 0 [ 192.741030][ T882] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 192.776473][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 192.789458][ T50] xbox_remote_probe: endpoint_in message size==0? [ 192.796512][ T882] usb 2-1: No valid video chain found. [ 192.837236][ T882] usb 2-1: selecting invalid altsetting 0 [ 192.854346][ T5893] usb 5-1: USB disconnect, device number 20 [ 192.869363][ T882] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 192.920798][ T882] usb 2-1: USB disconnect, device number 27 [ 192.939846][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 192.957458][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 192.981659][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 192.990163][ T5897] usb 4-1: USB disconnect, device number 24 [ 193.026862][ T5894] pwc: recv_control_msg error -32 req 04 val 1000 [ 193.057747][ T5894] pwc: recv_control_msg error -32 req 04 val 1300 [ 193.092029][ T5894] pwc: recv_control_msg error -32 req 04 val 1400 [ 193.109841][ T5894] pwc: recv_control_msg error -32 req 02 val 2000 [ 193.120702][ T5894] pwc: recv_control_msg error -32 req 02 val 2100 [ 193.167193][ T5894] pwc: recv_control_msg error -32 req 04 val 1500 [ 193.207208][ T5894] pwc: recv_control_msg error -32 req 02 val 2500 [ 193.226114][ T5894] pwc: recv_control_msg error -32 req 02 val 2400 [ 193.234345][ T5894] pwc: recv_control_msg error -32 req 02 val 2600 [ 193.242365][ T5894] pwc: recv_control_msg error -32 req 02 val 2900 [ 193.249909][ T5894] pwc: recv_control_msg error -32 req 02 val 2800 [ 193.259206][ T5894] pwc: recv_control_msg error -32 req 04 val 1100 [ 193.269054][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 193.285817][ T5894] pwc: Registered as video103. [ 193.307295][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 193.376185][ T5894] usb 3-1: USB disconnect, device number 16 [ 193.996449][ T7268] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 194.006624][ T7268] validate_nla: 42 callbacks suppressed [ 194.006638][ T7268] netlink: 'syz.3.355': attribute type 10 has an invalid length. [ 194.026086][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.076571][ T7268] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 194.100634][ T5894] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 194.127301][ T7271] bond0: entered promiscuous mode [ 194.286515][ T7271] bond_slave_0: entered promiscuous mode [ 194.326062][ T7271] bond_slave_1: entered promiscuous mode [ 194.336246][ T7271] batadv0: entered promiscuous mode [ 194.365201][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 194.374386][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 194.386613][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 194.417360][ T5894] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 194.427501][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.437849][ T5894] usb 2-1: Product: syz [ 194.520654][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.570354][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599426][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609401][ T5894] usb 2-1: Manufacturer: syz [ 194.619104][ T882] usb 1-1: USB disconnect, device number 35 [ 194.628363][ T5894] usb 2-1: SerialNumber: syz [ 194.656797][ T5894] usb 2-1: config 0 descriptor?? [ 194.672072][ T5894] usb 2-1: no audio or video endpoints found [ 194.800522][ T5893] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 194.843792][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 194.913394][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.922112][ T5895] usb 2-1: USB disconnect, device number 28 [ 194.937538][ T9] usb 3-1: config 0 descriptor?? [ 194.957259][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 195.001491][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 195.014254][ T5893] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 195.022784][ T5893] usb 5-1: config 0 has no interface number 0 [ 195.031832][ T5893] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 195.045104][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.053867][ T5893] usb 5-1: Product: syz [ 195.058177][ T5893] usb 5-1: Manufacturer: syz [ 195.064075][ T5893] usb 5-1: SerialNumber: syz [ 195.070543][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 195.072592][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 195.094534][ T5893] usb 5-1: config 0 descriptor?? [ 195.105374][ T5893] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 195.116863][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 195.128731][ T5893] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 195.246348][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.255716][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.435995][ T5893] usb 5-1: USB disconnect, device number 21 [ 195.437070][ T7288] dccp_invalid_packet: pskb_may_pull failed [ 195.479319][ T5893] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 195.525182][ T5893] kobil_sct 5-1:0.148: device disconnected [ 195.536879][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 195.680915][ T9] usb 4-1: device descriptor read/64, error -71 [ 195.920547][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.060729][ T9] usb 4-1: device descriptor read/64, error -71 [ 196.190911][ T9] usb usb4-port1: attempt power cycle [ 196.490627][ T5895] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 196.540633][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 196.567709][ T9] usb 4-1: device descriptor read/8, error -71 [ 196.643484][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.654004][ T5895] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 196.660628][ T882] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 196.663638][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.701740][ T5895] usb 5-1: config 0 descriptor?? [ 196.729170][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 196.815880][ T7310] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 196.827226][ T7310] netlink: 'syz.1.369': attribute type 10 has an invalid length. [ 196.834904][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 196.840925][ T882] usb 1-1: Using ep0 maxpacket: 8 [ 196.857713][ T882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 196.861668][ T9] usb 4-1: device descriptor read/8, error -71 [ 196.878387][ T882] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 196.888984][ T882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.916058][ T882] usb 1-1: config 0 descriptor?? [ 196.981480][ T9] usb usb4-port1: unable to enumerate USB device [ 197.138077][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 197.154705][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 197.165484][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 197.176861][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 197.187938][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 197.204488][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 197.216850][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 197.254744][ T5895] pwc: recv_control_msg error -32 req 02 val 2100 [ 197.288749][ T9] usb 3-1: USB disconnect, device number 17 [ 197.340004][ T5895] pwc: recv_control_msg error -32 req 04 val 1500 [ 197.350067][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.367754][ T882] kye 0003:0458:0087.0007: hidraw0: USB HID v1.ff Device [HID 0458:0087] on usb-dummy_hcd.0-1/input0 [ 197.386490][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.402828][ T5895] pwc: recv_control_msg error -32 req 02 val 2500 [ 197.428538][ T5895] pwc: recv_control_msg error -32 req 02 val 2400 [ 197.445527][ T5895] pwc: recv_control_msg error -32 req 02 val 2600 [ 197.482866][ T5895] pwc: recv_control_msg error -32 req 02 val 2900 [ 197.502974][ T5895] pwc: recv_control_msg error -32 req 02 val 2800 [ 197.519379][ T5895] pwc: recv_control_msg error -32 req 04 val 1100 [ 197.547204][ T10] usb 1-1: USB disconnect, device number 36 [ 197.563784][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 197.616264][ T5895] pwc: Registered as video103. [ 197.653150][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 197.684728][ T5895] usb 5-1: USB disconnect, device number 22 [ 198.230688][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 198.346250][ T7313] syzkaller1: entered promiscuous mode [ 198.373917][ T7313] syzkaller1: entered allmulticast mode [ 198.416257][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.444009][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.461291][ T7335] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 198.477641][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.495847][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.518114][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.542763][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.542798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.542820][ T9] usb 2-1: Product: syz [ 198.542835][ T9] usb 2-1: Manufacturer: syz [ 198.589839][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 198.589866][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 198.600305][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 198.600335][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 198.847460][ T7351] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 198.894317][ T7351] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 198.981486][ T9] usb 2-1: USB disconnect, device number 29 [ 199.296213][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.384'. [ 199.872906][ T5893] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 199.980641][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 200.059549][ T7370] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 200.059770][ T7372] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 200.130802][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 200.138088][ T5893] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 200.155817][ T5893] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.175208][ T5893] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.183701][ T5893] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.193514][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.195767][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.202661][ T5893] usb 5-1: config 0 has no interface number 0 [ 200.204041][ T5893] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 200.236683][ T5893] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 200.247011][ T5893] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.262521][ T5893] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.265872][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.366244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.374507][ T5893] usb 5-1: config 0 interface 125 has no altsetting 2 [ 200.380763][ T5897] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 200.411522][ T5893] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 200.428686][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.444169][ T5893] usb 5-1: Product: syz [ 200.448860][ T5893] usb 5-1: Manufacturer: syz [ 200.461048][ T5893] usb 5-1: SerialNumber: syz [ 200.482559][ T5893] usb 5-1: config 0 descriptor?? [ 200.483498][ T9] usb 2-1: config 0 descriptor?? [ 200.513481][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 200.519030][ T5893] usb 5-1: selecting invalid altsetting 2 [ 200.595960][ T5897] usb 1-1: config 0 has no interfaces? [ 200.733433][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.745592][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.754326][ T5897] usb 1-1: Product: syz [ 200.758578][ T5897] usb 1-1: Manufacturer: syz [ 200.763820][ T5897] usb 1-1: SerialNumber: syz [ 200.775669][ T5897] usb 1-1: config 0 descriptor?? [ 200.923430][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.943943][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 200.952587][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 200.960043][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 200.977292][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 200.984979][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 200.993552][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 201.001238][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 201.009968][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 201.017408][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 201.024688][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 201.032115][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 201.039095][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 201.047055][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 201.056609][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 201.074024][ T7371] sg_write: data in/out 2097117/14 bytes for SCSI command 0x0-- guessing data in; [ 201.074024][ T7371] program syz.0.389 not setting count and/or reply_len properly [ 201.091445][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.106998][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.129964][ T9] pwc: Registered as video103. [ 201.148320][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 201.161170][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.227982][ T9] usb 2-1: USB disconnect, device number 30 [ 201.676335][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.797920][ T7394] fuse: Bad value for 'user_id' [ 201.818298][ T7394] fuse: Bad value for 'user_id' [ 201.867057][ T10] usb 3-1: config 0 has no interfaces? [ 201.895053][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.905272][ T7398] IPv6: addrconf: prefix option has invalid lifetime [ 202.029696][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.067344][ T10] usb 3-1: Product: syz [ 202.081128][ T10] usb 3-1: Manufacturer: syz [ 202.103065][ T10] usb 3-1: SerialNumber: syz [ 202.134949][ T10] usb 3-1: config 0 descriptor?? [ 202.672454][ T10] usb 5-1: USB disconnect, device number 23 [ 203.141916][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 203.300600][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 203.328316][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.380179][ T10] usb 5-1: config 255 has an invalid interface number: 190 but max is 1 [ 203.447440][ T10] usb 5-1: config 255 has an invalid interface number: 137 but max is 1 [ 203.488459][ T10] usb 5-1: config 255 has no interface number 0 [ 203.535059][ T10] usb 5-1: config 255 has no interface number 1 [ 203.536453][ T5893] usb 1-1: USB disconnect, device number 37 [ 203.580323][ T10] usb 5-1: config 255 interface 190 has no altsetting 0 [ 203.605724][ T10] usb 5-1: config 255 interface 137 has no altsetting 0 [ 203.627372][ T10] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 203.682148][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 203.691136][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.726654][ T10] usb 5-1: Product: syz [ 203.770508][ T10] usb 5-1: Manufacturer: syz [ 203.804961][ T10] usb 5-1: SerialNumber: syz [ 203.882569][ T7417] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 204.178873][ T10] usb 5-1: USB disconnect, device number 24 [ 204.211184][ T9] usb 2-1: config 0 has no interfaces? [ 204.233999][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.243377][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.256003][ T9] usb 2-1: Product: syz [ 204.260200][ T9] usb 2-1: Manufacturer: syz [ 204.294362][ T9] usb 2-1: SerialNumber: syz [ 204.304306][ T5894] usb 3-1: USB disconnect, device number 18 [ 204.329043][ T9] usb 2-1: config 0 descriptor?? [ 205.223217][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 205.730838][ T882] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 205.850591][ T5893] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 205.893107][ T882] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 205.900525][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 205.912225][ T882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.936616][ T882] usb 1-1: config 0 descriptor?? [ 206.020675][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 206.050541][ T9] usb 3-1: device descriptor read/64, error -71 [ 206.064672][ T5893] usb 5-1: config 0 has an invalid interface number: 249 but max is 2 [ 206.080731][ T5893] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 206.089508][ T5893] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 206.107143][ T5893] usb 5-1: config 0 has an invalid interface number: 93 but max is 2 [ 206.160125][ T5893] usb 5-1: config 0 has an invalid interface number: 61 but max is 2 [ 206.168900][ T5893] usb 5-1: config 0 has no interface number 0 [ 206.175604][ T5893] usb 5-1: config 0 has no interface number 1 [ 206.182041][ T5893] usb 5-1: config 0 has no interface number 2 [ 206.188728][ T5893] usb 5-1: config 0 interface 249 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 206.200256][ T5893] usb 5-1: config 0 interface 249 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 206.211823][ T5893] usb 5-1: config 0 interface 249 altsetting 147 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 206.223250][ T5893] usb 5-1: config 0 interface 249 altsetting 147 endpoint 0x9 has an invalid bInterval 127, changing to 7 [ 206.238062][ T5893] usb 5-1: config 0 interface 249 altsetting 147 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 206.250036][ T5893] usb 5-1: config 0 interface 93 altsetting 93 has an invalid descriptor for endpoint zero, skipping [ 206.266283][ T5893] usb 5-1: config 0 interface 93 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 206.279719][ T5893] usb 5-1: config 0 interface 93 altsetting 93 bulk endpoint 0xE has invalid maxpacket 0 [ 206.290567][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 206.294690][ T5893] usb 5-1: config 0 interface 93 altsetting 93 has an invalid descriptor for endpoint zero, skipping [ 206.309695][ T5893] usb 5-1: config 0 interface 93 altsetting 93 has a duplicate endpoint with address 0x2, skipping [ 206.330204][ T5893] usb 5-1: config 0 interface 61 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 206.346664][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 206.360911][ T882] uclogic 0003:28BD:0055.0008: interface is invalid, ignoring [ 206.377778][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 206.389007][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 206.400348][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 206.411744][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 206.420618][ T9] usb 3-1: device descriptor read/64, error -71 [ 206.422529][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 206.440754][ T5893] usb 5-1: config 0 interface 61 altsetting 9 endpoint 0x3 has an invalid bInterval 133, changing to 7 [ 206.646678][ T5894] usb 1-1: USB disconnect, device number 38 [ 206.695159][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 206.731631][ T5893] usb 5-1: config 0 interface 61 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 206.755085][ T9] usb usb3-port1: attempt power cycle [ 206.767293][ T5893] usb 5-1: config 0 interface 61 altsetting 9 endpoint 0x4 has an invalid bInterval 159, changing to 7 [ 206.780280][ T5893] usb 5-1: config 0 interface 249 has no altsetting 0 [ 206.825804][ T5893] usb 5-1: config 0 interface 93 has no altsetting 0 [ 206.841855][ T5893] usb 5-1: config 0 interface 61 has no altsetting 0 [ 206.858072][ T5893] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0128, bcdDevice=df.28 [ 206.874188][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.941730][ T7454] netlink: 'syz.3.414': attribute type 39 has an invalid length. [ 206.964765][ T5893] usb 5-1: Product: syz [ 206.969036][ T5893] usb 5-1: Manufacturer: syz [ 206.990852][ T5893] usb 5-1: SerialNumber: syz [ 207.004433][ T10] usb 2-1: USB disconnect, device number 31 [ 207.007759][ T5893] usb 5-1: config 0 descriptor?? [ 207.110718][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 207.176450][ T9] usb 3-1: device descriptor read/8, error -71 [ 207.292693][ T5893] option 5-1:0.249: GSM modem (1-port) converter detected [ 207.466841][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 207.478269][ T5893] usb 5-1: USB disconnect, device number 25 [ 207.507664][ T5893] option 5-1:0.249: device disconnected [ 207.514876][ T9] usb 3-1: device descriptor read/8, error -71 [ 207.540781][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 207.696597][ T9] usb usb3-port1: unable to enumerate USB device [ 207.716361][ T5897] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 207.831024][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.894267][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 207.905473][ T5897] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.920521][ T5897] usb 1-1: config 0 has no interface number 0 [ 207.930720][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.947249][ T5897] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.009458][ T5897] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.030202][ T5897] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.051505][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.080604][ T5897] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.110795][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.111415][ T5897] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.169477][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.200955][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.201182][ T5897] usb 1-1: config 0 descriptor?? [ 208.237341][ T5897] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 208.260535][ T5893] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 208.278941][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.340882][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.423492][ T5893] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 208.437946][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.463849][ T5893] usb 5-1: config 150 has no interface number 0 [ 208.467909][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.478588][ T5893] usb 5-1: config 150 interface 204 has no altsetting 0 [ 208.478617][ T5893] usb 5-1: config 150 interface 1 has no altsetting 0 [ 208.480165][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.507410][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 208.519514][ T5893] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 208.534678][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.540914][ T9] usb 1-1: USB disconnect, device number 39 [ 208.542920][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 208.555736][ T5893] usb 5-1: Product: syz [ 208.559953][ T5893] usb 5-1: Manufacturer: syz [ 208.564972][ T5893] usb 5-1: SerialNumber: syz [ 208.576237][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 208.585248][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 208.609156][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.661544][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.759252][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 208.765456][ T5970] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 208.777382][ T5894] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.782000][ T5893] xr_serial 5-1:150.204: xr_serial converter detected [ 208.789960][ T5894] usb 4-1: config 0 has no interface number 0 [ 208.803733][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.815296][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.827921][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.839644][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.856457][ T5894] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.873230][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.910530][ T5970] usb 2-1: device descriptor read/64, error -71 [ 208.947760][ T5894] usb 4-1: config 0 descriptor?? [ 208.968262][ T5894] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 209.120993][ T7487] netlink: 'syz.0.424': attribute type 12 has an invalid length. [ 209.260502][ T5970] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 209.411060][ T5970] usb 2-1: device descriptor read/64, error -71 [ 209.531003][ T5970] usb usb2-port1: attempt power cycle [ 209.604722][ T5893] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 209.871236][ T5970] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 209.903526][ T5970] usb 2-1: device descriptor read/8, error -71 [ 210.155566][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 210.165164][ T5970] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 210.178954][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.188632][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.196712][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.207021][ T5970] usb 2-1: device descriptor read/8, error -71 [ 210.281755][ T10] usb 5-1: USB disconnect, device number 26 [ 210.295700][ T10] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 210.339992][ T10] xr_serial 5-1:150.204: device disconnected [ 210.353878][ T5970] usb usb2-port1: unable to enumerate USB device [ 210.385050][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 210.393839][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.416828][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.432034][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.446032][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 210.463610][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.473555][ T9] usb 3-1: Product: syz [ 210.480901][ T9] usb 3-1: Manufacturer: syz [ 210.486120][ T9] usb 3-1: SerialNumber: syz [ 210.563222][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 210.589544][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 210.613072][ T9] usb 3-1: config 0 descriptor?? [ 210.649316][ T7503] syz.0.426: attempt to access beyond end of device [ 210.649316][ T7503] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 210.666952][ T7502] blktrace: Concurrent blktraces are not allowed on loop1 [ 210.720160][ T9] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 210.930094][ T5970] usb 3-1: USB disconnect, device number 23 [ 211.000521][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 211.160492][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 211.178224][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.197758][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.217281][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.236837][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.254188][ T9] usb 5-1: Product: syz [ 211.262090][ T9] usb 5-1: Manufacturer: syz [ 211.270024][ T9] usb 5-1: SerialNumber: syz [ 211.382556][ T5970] usb 4-1: USB disconnect, device number 29 [ 211.442122][ T5970] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 211.993612][ T5151] Bluetooth: hci4: command 0x0406 tx timeout [ 211.996747][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.999899][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 212.007225][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 212.014059][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 212.231998][ T7531] tipc: Started in network mode [ 212.291885][ T7531] tipc: Node identity ac14142f, cluster identity 4711 [ 212.303921][ T7531] tipc: New replicast peer: 0.0.0.0 [ 212.312649][ T7531] tipc: Enabled bearer , priority 10 [ 212.347897][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.434'. [ 212.789467][ T7523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.800546][ T7523] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.820124][ T7523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.879467][ T7523] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.923423][ T7523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.931379][ T7523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 212.958600][ T7523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.967538][ T7523] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 212.977755][ T7523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.985266][ T7523] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 213.234138][ T7550] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 213.302526][ T10] tipc: Node number set to 2886997039 [ 213.510593][ T5970] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 213.670952][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 213.677348][ T5970] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 213.697251][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 213.776336][ T5970] usb 3-1: config 0 has no interface number 0 [ 213.812461][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 213.825307][ T5970] usb 3-1: config 0 has no interface number 0 [ 213.833650][ T9] usb 5-1: skipping empty audio interface (v1) [ 213.854590][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 213.864724][ T5970] usb 3-1: config 0 has no interface number 0 [ 213.883814][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 213.913403][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 213.937968][ T9] usb 5-1: USB disconnect, device number 27 [ 213.948612][ T5970] usb 3-1: config 0 has no interface number 0 [ 213.983052][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 214.009085][ T5970] usb 3-1: config 0 has no interface number 0 [ 214.052566][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 214.106568][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 214.142117][ T5970] usb 3-1: config 0 has no interface number 0 [ 214.143515][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 214.156087][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 214.166685][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 214.174804][ T5970] usb 3-1: config 0 has no interface number 0 [ 214.196162][ T5970] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 214.207702][ T5970] usb 3-1: config 0 has no interface number 0 [ 214.234799][ T5970] usb 3-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=91.1b [ 214.273784][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.301052][ T5970] usb 3-1: Product: syz [ 214.305296][ T5970] usb 3-1: Manufacturer: syz [ 214.309928][ T5970] usb 3-1: SerialNumber: syz [ 214.366827][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.376312][ T5970] usb 3-1: config 0 descriptor?? [ 214.403047][ T5970] gspca_main: 04cb:0109 too many config [ 214.545013][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 214.569002][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 214.579521][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 214.605982][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.610063][ T882] usb 3-1: USB disconnect, device number 24 [ 214.620279][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 214.657628][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 214.664363][ T7564] pimreg: entered allmulticast mode [ 214.685423][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.707896][ T9] usb 5-1: Product: syz [ 214.749334][ T9] usb 5-1: Manufacturer: syz [ 214.761196][ T9] usb 5-1: SerialNumber: syz [ 214.779129][ T9] usb 5-1: config 0 descriptor?? [ 214.794621][ T7555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.807909][ T9] usb 5-1: ucan: probing device on interface #0 [ 214.832575][ T9] usb 5-1: ucan: invalid endpoint configuration [ 214.838928][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 214.864089][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.880964][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 214.951521][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 215.016795][ T9] usb 5-1: USB disconnect, device number 28 [ 215.041159][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 215.047283][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 215.430656][ T5897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 215.438494][ T882] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 215.610844][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 215.627773][ T882] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 215.640908][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.656301][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.670299][ T5897] usb 4-1: config 0 has no interface number 0 [ 215.679767][ T882] usb 3-1: Product: syz [ 215.686469][ T882] usb 3-1: Manufacturer: syz [ 215.691865][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.703057][ T882] usb 3-1: SerialNumber: syz [ 215.713677][ T5897] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.724334][ T882] usb 3-1: config 0 descriptor?? [ 215.739981][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.763079][ T5897] usb 4-1: config 0 descriptor?? [ 215.807045][ T5897] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 215.936236][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 215.948716][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 216.230721][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 216.356918][ T882] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 216.437562][ T882] asix 3-1:0.0: probe with driver asix failed with error -71 [ 216.703270][ T882] usb 3-1: USB disconnect, device number 25 [ 216.950935][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 217.026328][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.456'. [ 217.070488][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 217.087432][ T7615] bond0: left promiscuous mode [ 217.092761][ T7615] bond_slave_0: left promiscuous mode [ 217.098502][ T7615] bond_slave_1: left promiscuous mode [ 217.127776][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 217.128050][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 217.163141][ T7615] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 217.171132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.213104][ T7615] bond1: left promiscuous mode [ 217.219121][ T7615] macvtap1: left promiscuous mode [ 217.225558][ T7615] vcan1: left promiscuous mode [ 217.261803][ T882] usb 4-1: USB disconnect, device number 30 [ 217.706432][ T7629] wireguard0: entered promiscuous mode [ 217.733564][ T7629] wireguard0: entered allmulticast mode [ 217.916084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.091037][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 218.310694][ T882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 218.627806][ T7664] netlink: 556 bytes leftover after parsing attributes in process `syz.1.470'. [ 218.961833][ T7655] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 219.038056][ T7674] [ 219.040462][ T7674] ====================================================== [ 219.047685][ T7674] WARNING: possible circular locking dependency detected [ 219.054730][ T7674] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 219.061871][ T7674] ------------------------------------------------------ [ 219.069247][ T7674] syz.3.472/7674 is trying to acquire lock: [ 219.075138][ T7674] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0 [ 219.084594][ T7674] [ 219.084594][ T7674] but task is already holding lock: [ 219.091977][ T7674] ffff88803109a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 219.102108][ T7674] [ 219.102108][ T7674] which lock already depends on the new lock. [ 219.102108][ T7674] [ 219.113219][ T7674] [ 219.113219][ T7674] the existing dependency chain (in reverse order) is: [ 219.122341][ T7674] [ 219.122341][ T7674] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 219.131225][ T7674] lock_acquire+0x116/0x2f0 [ 219.136283][ T7674] __mutex_lock+0x1a5/0x10c0 [ 219.141663][ T7674] smc_switch_to_fallback+0x35/0xda0 [ 219.147505][ T7674] smc_sendmsg+0x11f/0x530 [ 219.152536][ T7674] __sock_sendmsg+0x221/0x270 [ 219.157743][ T7674] __sys_sendto+0x365/0x4c0 [ 219.162772][ T7674] __x64_sys_sendto+0xde/0x100 [ 219.168155][ T7674] do_syscall_64+0xf3/0x230 [ 219.173193][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.179823][ T7674] [ 219.179823][ T7674] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 219.187665][ T7674] lock_acquire+0x116/0x2f0 [ 219.192704][ T7674] lock_sock_nested+0x48/0x100 [ 219.198024][ T7674] do_ipv6_setsockopt+0xccd/0x3680 [ 219.203669][ T7674] ipv6_setsockopt+0x5d/0x170 [ 219.208934][ T7674] do_sock_setsockopt+0x3b1/0x710 [ 219.215008][ T7674] __x64_sys_setsockopt+0x1ee/0x280 [ 219.220867][ T7674] do_syscall_64+0xf3/0x230 [ 219.225917][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.232352][ T7674] [ 219.232352][ T7674] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 219.239761][ T7674] validate_chain+0xa69/0x24e0 [ 219.245349][ T7674] __lock_acquire+0xad5/0xd80 [ 219.250553][ T7674] lock_acquire+0x116/0x2f0 [ 219.255578][ T7674] __mutex_lock+0x1a5/0x10c0 [ 219.260785][ T7674] do_ip_setsockopt+0x10f0/0x39c0 [ 219.266352][ T7674] ip_setsockopt+0x63/0x100 [ 219.271382][ T7674] smc_setsockopt+0x25c/0xd50 [ 219.276587][ T7674] do_sock_setsockopt+0x3b1/0x710 [ 219.282145][ T7674] __x64_sys_setsockopt+0x1ee/0x280 [ 219.287878][ T7674] do_syscall_64+0xf3/0x230 [ 219.293013][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.299521][ T7674] [ 219.299521][ T7674] other info that might help us debug this: [ 219.299521][ T7674] [ 219.309835][ T7674] Chain exists of: [ 219.309835][ T7674] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 219.309835][ T7674] [ 219.323493][ T7674] Possible unsafe locking scenario: [ 219.323493][ T7674] [ 219.330944][ T7674] CPU0 CPU1 [ 219.336402][ T7674] ---- ---- [ 219.341945][ T7674] lock(&smc->clcsock_release_lock); [ 219.347416][ T7674] lock(sk_lock-AF_INET6); [ 219.354451][ T7674] lock(&smc->clcsock_release_lock); [ 219.362696][ T7674] lock(rtnl_mutex); [ 219.366695][ T7674] [ 219.366695][ T7674] *** DEADLOCK *** [ 219.366695][ T7674] [ 219.374946][ T7674] 1 lock held by syz.3.472/7674: [ 219.379884][ T7674] #0: ffff88803109a1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 219.390697][ T7674] [ 219.390697][ T7674] stack backtrace: [ 219.396690][ T7674] CPU: 1 UID: 0 PID: 7674 Comm: syz.3.472 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 219.396709][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.396719][ T7674] Call Trace: [ 219.396726][ T7674] [ 219.396732][ T7674] dump_stack_lvl+0x241/0x360 [ 219.396755][ T7674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.396782][ T7674] ? __pfx__printk+0x10/0x10 [ 219.396801][ T7674] ? print_lock+0x171/0x1a0 [ 219.396819][ T7674] print_circular_bug+0x2e1/0x300 [ 219.396839][ T7674] check_noncircular+0x142/0x160 [ 219.396859][ T7674] validate_chain+0xa69/0x24e0 [ 219.396879][ T7674] ? finish_task_switch+0x1e5/0x870 [ 219.396897][ T7674] __lock_acquire+0xad5/0xd80 [ 219.396914][ T7674] lock_acquire+0x116/0x2f0 [ 219.396928][ T7674] ? do_ip_setsockopt+0x10f0/0x39c0 [ 219.396948][ T7674] __mutex_lock+0x1a5/0x10c0 [ 219.396967][ T7674] ? do_ip_setsockopt+0x10f0/0x39c0 [ 219.396984][ T7674] ? look_up_lock_class+0x7b/0x170 [ 219.397001][ T7674] ? register_lock_class+0x54/0x330 [ 219.397016][ T7674] ? do_ip_setsockopt+0x10f0/0x39c0 [ 219.397033][ T7674] ? __pfx___mutex_lock+0x10/0x10 [ 219.397049][ T7674] ? __lock_acquire+0xad5/0xd80 [ 219.397066][ T7674] ? __pfx___mutex_trylock_common+0x10/0x10 [ 219.397086][ T7674] do_ip_setsockopt+0x10f0/0x39c0 [ 219.397106][ T7674] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 219.397123][ T7674] ? smc_setsockopt+0x1b2/0xd50 [ 219.397140][ T7674] ? __pfx___mutex_lock+0x10/0x10 [ 219.397161][ T7674] ip_setsockopt+0x63/0x100 [ 219.397177][ T7674] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 219.397198][ T7674] smc_setsockopt+0x25c/0xd50 [ 219.397215][ T7674] ? __pfx_aa_sk_perm+0x10/0x10 [ 219.397234][ T7674] ? __pfx_smc_setsockopt+0x10/0x10 [ 219.397250][ T7674] ? aa_sock_opt_perm+0x79/0x120 [ 219.397271][ T7674] ? __pfx_smc_setsockopt+0x10/0x10 [ 219.397287][ T7674] do_sock_setsockopt+0x3b1/0x710 [ 219.397303][ T7674] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 219.397316][ T7674] ? __fget_files+0x2a/0x420 [ 219.397330][ T7674] ? __fget_files+0x39d/0x420 [ 219.397342][ T7674] ? __fget_files+0x2a/0x420 [ 219.397356][ T7674] __x64_sys_setsockopt+0x1ee/0x280 [ 219.397372][ T7674] do_syscall_64+0xf3/0x230 [ 219.397390][ T7674] ? clear_bhb_loop+0x45/0xa0 [ 219.397406][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.397420][ T7674] RIP: 0033:0x7f7aa298d169 [ 219.397434][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.397447][ T7674] RSP: 002b:00007f7aa3740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.397463][ T7674] RAX: ffffffffffffffda RBX: 00007f7aa2ba5fa0 RCX: 00007f7aa298d169 [ 219.397474][ T7674] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 219.397483][ T7674] RBP: 00007f7aa2a0e990 R08: 000000000000000c R09: 0000000000000000 [ 219.397493][ T7674] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 219.397502][ T7674] R13: 0000000000000000 R14: 00007f7aa2ba5fa0 R15: 00007f7aa2ccfa28 [ 219.397517][ T7674] [ 219.397701][ T5970] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 219.750662][ T882] usb 2-1: device descriptor read/64, error -71 [ 219.870870][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 219.984286][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.994371][ T5970] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 220.002254][ T5970] usb 3-1: can't read configurations, error -71 [ 220.014179][ T882] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 220.153292][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.180589][ T882] usb 2-1: Using ep0 maxpacket: 16 [ 220.187092][ T882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 220.197287][ T882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 220.208359][ T882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 220.220252][ T882] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 220.230302][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.238439][ T882] usb 2-1: Product: syz [ 220.242666][ T882] usb 2-1: Manufacturer: syz [ 220.247355][ T882] usb 2-1: SerialNumber: syz [ 220.253576][ T882] usb 2-1: config 0 descriptor?? [ 220.260212][ T7671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 220.275115][ T882] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 220.281366][ T882] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 220.287828][ T882] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 220.293702][ T882] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 220.300176][ T882] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 220.513635][ T5505] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 221.631054][ T5894] usb 2-1: USB disconnect, device number 37 [ 221.637855][ T5894] mcba_usb 2-1:0.0 can0: device disconnected