last executing test programs: 7m39.164637537s ago: executing program 3 (id=2670): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = dup(r0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = io_uring_setup(0x208c, &(0x7f0000000380)={0x0, 0x6d90, 0x40, 0x0, 0x29e}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x2100, 0x9, 0x427}}) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002273797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000080003000000fdffffff99090000001000002f09e911fb933aeb4cb9bb57794c747c378d7161cd998a3bf96e1516600e46d22bd072df6b417c5a08f6fef2c14cd1a58cb0751b96f05feba2140a8eef211f681070d69701f4592d987e1bb6b7bc8523786d72647adf23cc1188ba6fd1320a61651b2f83b459ccb46fe62480b1fe91fc27fb24888c4f8b711d3088ec4a1c8207800c3f7b862c8cac337b34cee3400cfd3cd6"], 0x1a8) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x12, r0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 7m38.269919234s ago: executing program 3 (id=2676): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x678, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x634, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x5f8, 0x1, [@m_simple={0x1fc, 0x1e, 0x0, 0x0, {{0xb}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x142, 0x3, '\xd5\xe9Ji\'\xc9\xb2\xcfE\xcdRO\xbd\xfd\xc8\xbd\x9f\xbb\'q}qqx\xdf\xf8\x82\xfd\x1c(\xafU\n\xeaP\xa1\xf3\x92\xa9\x16)\xb4i\xcf\x81\xb4\x0e\x8a\xa0Ou:\x18z\xad\xb8\x97\x038\xbd\x12lw\xcb\xea\xed\xad\x14E-\x91U\xa5R-\xb5\xb6\x0ehba\ar\xb0N\x9ek\xff}\x00\v\x86\xe8\xd7\xd9\xf4\x1a\a\xb3\xce\x1d\xe3fI\x1f\xdc\xab0G\xc5b\xa3gF\xd5\x9f\xde\t\xcc\xaf*\x90\xea\a\f3l\xf2g?\x9b\x96\xb2\x9b\r\x98\x83\'T\xc4\x810]\xbf4\x8a\x10\x92I\x19\xa5\xa4\x90\xe9u\xc2\xf7\xed\x15\xf9\n6\x98\x85\'\xfb\x00\x00\x00\x00\x00\xe8\xa54*\v&\n\xbb-\x81\xa9\x91E\x94\t\xdew1^hZ\xe5{\x1f\xcb\vzG&\xf1xj\x10\x020\\\xde\\\xdc:\x8aL\xd1\x0e\xbd\xf7F\xce\x88\xd9\xd9\x1a\xc7\vD.\xf9);j}\x8fRY\xae\x01\xeb\xbduw~\xf9\xd1\xd1\x85\xa0\x16%\xb1\x97f\xca\xf2=\'\xb57\x94\xff\x92u\xb8\xa8\xect0\x1d\xb8\xd1\xa6F4\x934M\xe2\x9d\x94I\vf}U\x9f\xbcq\x92\xe8\xd3\xfe\xa3\xd7\xb1\xe3gi<\x00\x98\xaf7,\xec\xca\xfcU\x9f\x83\xb7\xec\'\xde\xb9\x10\x86\x93\x18'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x138, 0x13, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6, 0x4, 0x1, 0x7}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0xee, 0x6, "144d833505e6ef200c20ad2f4ee5c4c2e9f89f0445fba28aca82e7ca2726936d4c717387fc4d2c19168e132d89cb085c4d3f67b08606cf6a0ee5ae00947ff1bc110f7d1c9127ef2557d327af84971cff93750a0a8b0ae8bac7172de9d4238ad596e55b83399a52c605793166c1a5df60a955a53ffe106b9a9539204b0f6e1e616f5bede65b24928c8006419cafe78104617cd7cefd6ddfa266d7eeabd4f247a9a8b3fb7f305b5cefcc033a61ff87294b69eff857bacab41f7d6dd43b0ae9457814ca1daf60f1ee05ebf4b276f9b2b63c5d3cfab7d6663084b4a459c0d4996f9af5d713152a5ef9c5bf41"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xec, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x65, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xec, 0x8, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x2, 0x4, 0x3}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x2, 0x3, 0x3, 0x9}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x503e386e, 0x10000000, 0x3, 0xfffffffa}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x200, 0xffffffffffffffff, 0x3, 0x4}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x1ff, 0x10000000, 0x1, 0x1}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfff, 0x7, 0xfffffffe, 0x154f1214}, 0x7c}}]}, {0x16, 0x6, "4ac6768e05c6ec90b23e3707aa00b268ac03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x678}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7m38.022569073s ago: executing program 3 (id=2677): r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f00000000c0)) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) openat(r4, &(0x7f0000000100)='./file0\x00', 0xa2800, 0x10) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8010, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000d00)={0x0, 0x10}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 7m37.445207511s ago: executing program 3 (id=2679): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x9, 0x6, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x2000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x1000, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffdfffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d3af262600000000000109022400010000a017092150d029575873472e0581030002000200"/54], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x761880, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x59, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x7, 0x50, 0x6, [{{0x9, 0x4, 0x0, 0xa, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x1, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x4, 0x9, 0x7, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5a, 0x2, 0xa1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xa6, 0x1}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x6, 0x1, 0x4, 0xff, 0x1}, 0xa8, &(0x7f0000000640)={0x5, 0xf, 0xa8, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x7fffff6, 0xf0f, 0x889, [0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x4, 0x4, 0xa1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x85, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x6, 0x4}, @generic={0x74, 0x10, 0x3, "bdedd9a30cb06e09d9ac88a6301dc2ea2efc68bfd5da9ec8b18c548238cfe60b74f29e4cba16f2502951dc3e1d3fe421a9bb61de9a5ba3e866c20fe3db35ab5572434539a9357506b589f8ccfacab51bff499404c89771e222d935850ce03ebe2d117fd56d7ec98bb2d879cd872f0813bd"}]}, 0x7, [{0x9c, &(0x7f0000000700)=@string={0x9c, 0x3, "fafa7ba44807bcd73e7a9961a052289cdd660824b227216e81be27805c9745dc3d140a152b8d2e02bd2167754ea228e91a31a1820aff777c037b5890c3b3fa5c2f770e817e5d15e26af6bbda806924242e16d3885e47e410452c9dc38460c2cf588df8f6d1719868619e3cab7311a8488332423df2c1645d8b4217ff0dde1fa39927e1aff5330f783f0e9a2ed6cf9cc29c052e71e81ae0c26608"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x860}}, {0x85, &(0x7f0000000800)=@string={0x85, 0x3, "473edcd460762f809106370b04b75352e7752983fbd6844e7a8cb2f8490c1d5cb387f2b41e1d22eedb91d79a22b54158863aa3d77d6b751eb43c1937c0990c30893041a4177a20ea39e8e2d3049ae699617741c857b81d138e3f9fe6a168636d619441692e0550b305efe1f45ce6b3122ec50700dffb8313d1fcde6172a88a2f9ff8c9"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42f}}, {0xa, &(0x7f0000000940)=@string={0xa, 0x3, "836ad47c4bdb3b16"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x43e}}]}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef0000000000000000000000000600030000000000080001000000000024000200020000000000000000000000000000000100000000000000fc"], 0x4c}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card3/oss_mixer\x00', 0x101001, 0x0) 7m34.231961934s ago: executing program 3 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a00020000000000020000000500010001"], 0x28}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0xc7c7c7c7}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}]}, 0x28}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="d5200000074100000500270000000000140003006261746164763000000000000000000034001a8018000a8014000700fc000000000000000000000000000000180002"], 0x70}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 7m33.860142621s ago: executing program 3 (id=2691): clock_adjtime(0x6, &(0x7f0000000000)={0x80000001, 0x3, 0x37, 0xae, 0xa9, 0x17d3, 0x0, 0x2cbf, 0x1, 0x7, 0x5, 0x3, 0x4, 0x401, 0x5, 0x1, 0xfffffffffffffff7, 0x7, 0x1, 0x1, 0x6, 0x8, 0xfffffffffffffffb, 0xa, 0x1, 0x3}) socket(0x10, 0x80002, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 7m33.201080322s ago: executing program 32 (id=2691): clock_adjtime(0x6, &(0x7f0000000000)={0x80000001, 0x3, 0x37, 0xae, 0xa9, 0x17d3, 0x0, 0x2cbf, 0x1, 0x7, 0x5, 0x3, 0x4, 0x401, 0x5, 0x1, 0xfffffffffffffff7, 0x7, 0x1, 0x1, 0x6, 0x8, 0xfffffffffffffffb, 0xa, 0x1, 0x3}) socket(0x10, 0x80002, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 15.656018514s ago: executing program 4 (id=3937): unshare(0x22020600) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x104}, @TCA_CAKE_MPU={0x8, 0xe, 0xf6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x1df) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) 13.195735518s ago: executing program 4 (id=3943): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) eventfd2(0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, 0x0, 0x36}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="84401005515f60b44833571d6069782ea902d17d50fd2114111b4d1a0ae3eb06dc9fbc08a88013f7", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 12.895145663s ago: executing program 4 (id=3944): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000000)='\x00', 0x24000, 0x1) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_io_uring_setup(0x1513, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500280600fe8000000000000000000000000000aafe8000000800000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800001e122000e0000001000493f38718000000000000"], 0x0) 11.730536211s ago: executing program 2 (id=3947): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_cake={{0x9}, {0xe, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xed}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x4c}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = dup(r7) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r9, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$loop(0x0, 0x8000000000000000, 0x2c000) read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$FS_IOC_GETVERSION(r1, 0x5b06, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1711b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@ssrr={0x89, 0x3, 0xac}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@multicast2}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 8.57501502s ago: executing program 4 (id=3953): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x0, 0x8d, 0x80, 0xf7}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x103200) io_uring_setup(0x36dc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbec, &(0x7f0000000380)={0x0, 0x5887, 0x10}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0x20) 8.31127341s ago: executing program 1 (id=3956): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x0, 0x8d, 0x80, 0xf7}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x103200) io_uring_setup(0x36dc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbec, &(0x7f0000000380)={0x0, 0x5887, 0x10}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0x20) 8.026570879s ago: executing program 2 (id=3957): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mq_open(&(0x7f0000000140)='s(\x00', 0x40, 0x21, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002600)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400841, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x3000, 0x2}) syz_open_pts(r4, 0x60401) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000740)=0x7) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000020, &(0x7f00000011c0)=ANY=[@ANYBLOB="3d00001222"], 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000680)={{0x1, 0x2, 0xfb, 0x5, 'syz1\x00'}, 0x1, [0x0, 0x32c4fe6b, 0x4, 0x8, 0x7, 0x4, 0x6, 0x0, 0xff, 0x4, 0x80, 0xc950, 0x9, 0x1, 0x3, 0x15f, 0x1, 0x3, 0xffffffffffffffe6, 0xfff, 0x6, 0x80, 0x100, 0x40, 0x32d6, 0x9, 0xc2a, 0x7ff, 0xe, 0x8001, 0x5, 0x7, 0x7, 0xffffffff, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x3ff, 0x8, 0x3, 0x1, 0x81, 0x80000000, 0x0, 0x8000000000000000, 0x8, 0x44df, 0xf9f, 0x8, 0x800, 0x28, 0x1ee, 0x6, 0x8, 0x100, 0x23f, 0x0, 0x7, 0xffb, 0x3, 0x30, 0x1000, 0x2, 0x3, 0x4, 0x0, 0x100000000, 0x7, 0x1, 0x9, 0x5, 0x1ec, 0x100, 0x574, 0x3ff, 0x9, 0x8, 0x3ac, 0x0, 0x0, 0x9, 0xc9, 0x5, 0x5, 0x8, 0x9, 0xd, 0x6, 0x8000000000000000, 0x7fffffff, 0x1, 0x21ea7e8c, 0xeee, 0x3, 0x100000001, 0x1000, 0xb, 0x2, 0x8000000000000000, 0x334, 0x10001, 0x2, 0x4, 0x0, 0x9, 0x8, 0xb5d9, 0x926, 0x3ff, 0x4341, 0x4, 0x5, 0xfffffffffffffffb, 0x6, 0x5, 0x9, 0x9, 0x7, 0x7fff, 0x3, 0x9, 0x8000, 0x4, 0x0, 0x80, 0x9, 0xd5, 0xfffffffffffffffe]}) 7.604002173s ago: executing program 5 (id=3958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x20, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 6.477376805s ago: executing program 5 (id=3959): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, 0x0, 0x0) sync_file_range(r0, 0x4, 0x4, 0x6) 6.303645291s ago: executing program 5 (id=3960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES8], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908900d848f0a2b9d"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.935100138s ago: executing program 4 (id=3961): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000000)='\x00', 0x24000, 0x1) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_io_uring_setup(0x1513, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500280600fe8000000000000000000000000000aafe8000000800000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800001e122000e0000001000493f38718000000000000"], 0x0) 5.816034552s ago: executing program 1 (id=3962): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12015001020000102501a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a00000809ec8003000400000009040100000000000009040101"], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) sendto$inet(r3, 0x0, 0x0, 0x2000c094, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f02"]) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000003c0)={0x20006005}) poll(&(0x7f0000000000)=[{r4, 0x80}], 0x1, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) mmap(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1000009, 0x80012, r1, 0x29f50000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x4ffffffd, 0xa80, 0x5, 0x8, 0x4, 0x8000009, 0x5, 0x707f, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.663454545s ago: executing program 2 (id=3963): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000107010000000000000002000a0000060c0007800400014dfffffffd068b2e132d60fd33516a860770656418dae7506d4bfff6ae2b99adbac6053f331b18a5f78e20414c216536a14a73a9e5b7e0c133ea4b30e22bf7a0ebf9006a15cee599f3a60ba41c73ffca0d23be3bc6f7e875fa26acca7e4f8a68c08685ef8dea31daa20f4412e2b302f1bb3395"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4800) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r2 = socket$inet(0x2, 0x80001, 0x84) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async, rerun: 32) getpeername$inet(r2, 0x0, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) (async) r3 = dup2(r0, r0) write$vhost_msg_v2(r3, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0xfffffd0d, 0x0, 0x2, 0x2}}, 0x48) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000380)=0x1) 5.540026561s ago: executing program 2 (id=3964): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x5000, 0x4) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x20, 0x3, 0x0, 0x80, 0xff, 0x3, 0xae, 0x4}, 0x0) timer_create(0x3, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x40000000) timer_gettime(0x0, &(0x7f0000000240)) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000080)=0x5, 0x4, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.95600556s ago: executing program 5 (id=3965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c381032313100"], 0x20}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, {0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe87751f13a23aeaacb0565c1c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f00000001c0)={0xa0, 0x0, r5, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xee01, 0x0, 0x1}}, {0x0, 0x4}}}, 0xa0) pipe2(&(0x7f0000000000), 0x0) 3.991928801s ago: executing program 0 (id=3967): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r1, &(0x7f0000000d80)={'#! ', './file0', [], 0xa, "34e7"}, 0xd) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "116a2d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000300)={'bond0\x00'}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) chdir(&(0x7f0000004100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f000032d000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000000)={0xc, {0x2, 0x1b288141, 0xe182, 0x300}}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x40) preadv(r6, &(0x7f0000000000), 0x0, 0x38000000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0x8}, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f00000001c0)) 3.588676172s ago: executing program 0 (id=3968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x202100, 0x0) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000130000/0x2000)=nil, 0x2000, 0xd, 0x30, r2, 0x7d307000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x2800) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) 3.000646132s ago: executing program 0 (id=3969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x7ffffffe, 0x0, 0x0, 0x20040001}, 0x20000000) 2.688106648s ago: executing program 0 (id=3970): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, 0x0, 0x0) sync_file_range(r0, 0x4, 0x4, 0x6) 2.676157235s ago: executing program 1 (id=3971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14f6b2e3521aeb7d230000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000001a0a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208050840000000013c0000000e0a01020000000000000000010000000900020073797a3200000000100003802f00008008000180040002800900010073797a300000"], 0xc8}}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) write$fb(r1, &(0x7f00000006c0)="33c2aaa88c843884e1889402645c0915d89de3d16af1f8bb653db9bbfe953bf5e331630b38f362cc8dd4a58de197", 0x2e) read$FUSE(r1, &(0x7f00000079c0)={0x2020}, 0x2020) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) 2.507509538s ago: executing program 5 (id=3972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x3, 0xef, 0x92, 0x20, 0x557, 0x2021, 0x741a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x89, 0x4, 0x0, 0x8d, 0x80, 0xf7}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x103200) io_uring_setup(0x36dc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xbec, &(0x7f0000000380)={0x0, 0x5887, 0x10}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 2.356340488s ago: executing program 0 (id=3973): close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xcd}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=r1]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x80000c, 0x0, 0x80}}, 0x50) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x14020080, &(0x7f00000000c0)="a44020323157c794b618ff0db27678c7", 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000180)="55e94ac9135ca4bce3ee0e5aaafec78c23d1ebddd9f2436bc7") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x4, 0x6, 0xffffffff, 0x3, 0x1000, 0xc7], 0x0, 0x8, 0x6, 0x0, r4}}, 0x40) 2.318885498s ago: executing program 1 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff7}, {0xffff, 0xffff}, {0xc, 0x2}}}, 0xfffffffffffffff2}, 0x1, 0x0, 0x0, 0x40}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.277570259s ago: executing program 2 (id=3975): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000040)=0x8) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)="02721f03eb00", 0x6}], 0x1}}], 0x3, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0xf4240, 0x0, 0x0) r6 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x2004}) epoll_wait(r9, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000380)=0x3d70, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x14, 0x3c, 0x68, 0x0, 0xf7, 0x6, 0x0, @local, @multicast1}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x81, 0x0, 0x1, 0x2, 0x401, 0x0, 0x4e24, 0x4e24, 0x3}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0xd}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x180) 2.257613225s ago: executing program 4 (id=3976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffff8e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x8, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x663d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0xe8, 0xeb}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x800) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000d80)=""/6, 0x6}, {&(0x7f0000000dc0)=""/204, 0xcc}], 0x2}, 0x7}], 0x1, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000006c00128009000100766c616e000000005c0002800400038006000100000000004c0004800c00010248f90adcaff898f10c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010000000000040000000c000100800000000000000008000500", @ANYRES32=r2], 0x9c}, 0x1, 0xba01}, 0x810) 2.047995669s ago: executing program 1 (id=3977): socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xf9939adb6716afc8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {}, 0x105}) 1.918316972s ago: executing program 1 (id=3978): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.195068149s ago: executing program 2 (id=3979): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)="edb58d"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000005000000000000000000000000000000000000000000005863e99ec765895100c4932888634a0a559bbd80d2111950d6164f29b8a260ff389d16c77852031ca8b7d3712245e6d04e5ed0c5df3389e18ac1aed0d0344ca953b7f725faeadad84340ef970dc8a0443516af957e1d09eab8b0590d47f9476f142f0e91da4d001e59f37585aea7d156e5ab2bf6518f86a9a8c6451bba699e59443ea990dab86afcb23844860d01650ba1e38c596135ade47dd52b7604c14fcfbfec91981e8b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a00000000000000ff000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b705000008000000850000000c00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000200000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000014"], 0x50}}], 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c6000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7d2ccc1a8cedb015, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$midi(r0, &(0x7f0000001ac0)=""/4096, 0x1000) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000180)={'veth0_to_hsr\x00'}) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 427.012434ms ago: executing program 0 (id=3980): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400e0100e9000164171e38c74e2eb1bfc21a2ca5ef21109319b5578258a5dc737a6d4138a3fb3eecd211e060e7f71ad17662a1e59dba241736005068beeca9515cfc76cea29eab5bc10d1d3c93f6225fe1b0b3fdb7b7efd03be89efa63d4fcc382ad17d5633525663d5ae4d5632c28fcdfce4989a6049e96927884448a63af59c832625f6c2132cd61e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) 0s ago: executing program 5 (id=3981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300317e000000000000000000000100000000000000ffff00000000ac1414bb00000000000000000000000000010401100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x88}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000140)={0x7}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) kernel console output (not intermixed with test programs): number 107 using dummy_hcd [ 1743.610300][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1743.640592][T20754] usb 6-1: Using ep0 maxpacket: 16 [ 1743.683821][T20754] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1743.695233][T20754] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1743.771988][T20754] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1743.790979][ T9] usb 3-1: config 0 has no interfaces? [ 1743.882296][T20754] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1743.903754][T20754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.983091][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1744.000778][T20754] usb 6-1: Product: syz [ 1744.005402][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.025010][T20754] usb 6-1: Manufacturer: syz [ 1744.039672][T20754] usb 6-1: SerialNumber: syz [ 1744.063239][ T9] usb 3-1: Product: syz [ 1744.067465][ T9] usb 3-1: Manufacturer: syz [ 1744.115884][T20754] usb 6-1: config 0 descriptor?? [ 1744.136316][ T9] usb 3-1: SerialNumber: syz [ 1744.163491][T20754] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1744.200077][ T9] usb 3-1: config 0 descriptor?? [ 1744.214447][T20754] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1744.369897][ T30] audit: type=1326 audit(1748166849.502:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1744.430436][ T5882] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1744.466296][ T30] audit: type=1326 audit(1748166849.512:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1744.510490][ T5886] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1744.528425][ T30] audit: type=1326 audit(1748166849.512:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1744.658539][ T30] audit: type=1326 audit(1748166849.512:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1744.690663][ T5882] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1744.701880][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1744.715105][ T5882] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1744.725192][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1744.750449][T21423] program syz.1.3748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1744.758535][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.820636][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1744.828983][ T5886] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1744.858523][ T5882] usb 5-1: Product: syz [ 1744.858773][ T30] audit: type=1326 audit(1748166849.512:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1744.863255][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.892480][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1744.894233][ T5882] usb 5-1: Manufacturer: syz [ 1744.934100][T21426] veth1_to_bond: entered allmulticast mode [ 1744.953779][T21426] veth1_to_bond: left allmulticast mode [ 1744.998192][ T30] audit: type=1326 audit(1748166849.512:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1745.024747][ T5882] usb 5-1: SerialNumber: syz [ 1745.061686][ T5882] usb 5-1: config 0 descriptor?? [ 1745.084100][ T5882] usb 5-1: selecting invalid altsetting 0 [ 1745.179296][ T30] audit: type=1326 audit(1748166849.512:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1745.189751][ T5886] usb 1-1: config 0 descriptor?? [ 1745.273676][ T30] audit: type=1326 audit(1748166849.512:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1745.334418][ T30] audit: type=1326 audit(1748166849.512:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1745.717007][T20754] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1745.719640][T21408] fuse: Bad value for 'group_id' [ 1745.737215][T21408] fuse: Bad value for 'group_id' [ 1745.759741][ T5886] hid-led 0003:1294:1320.004B: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 1745.826424][ T5886] hid-led 0003:1294:1320.004B: Riso Kagaku Webmail Notifier initialized [ 1745.841473][ T30] audit: type=1326 audit(1748166849.512:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3efd38e969 code=0x7ffc0000 [ 1745.902036][T21435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.911832][T21435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.129717][ T5886] usb 1-1: USB disconnect, device number 72 [ 1746.186315][T12846] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1746.193318][T14320] usb 6-1: USB disconnect, device number 107 [ 1746.230488][T19888] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1746.255357][T20754] usb 2-1: config 0 has no interfaces? [ 1746.266655][T20754] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1746.279517][T20754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.305268][T19888] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1746.351778][T20754] usb 2-1: Product: syz [ 1746.388488][T20754] usb 2-1: Manufacturer: syz [ 1746.463183][T21433] fido_id[21433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1746.479001][T20754] usb 2-1: SerialNumber: syz [ 1746.521164][T20754] usb 2-1: config 0 descriptor?? [ 1746.759095][T21432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1747.126018][T20754] usb 3-1: USB disconnect, device number 36 [ 1747.180737][T14320] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1747.333724][T14320] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 1747.342813][T14320] usb 1-1: config 0 has no interface number 0 [ 1747.350704][T14320] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.456992][T14320] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.505841][T14320] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1747.546647][T14320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.581868][T14320] usb 1-1: config 0 descriptor?? [ 1748.182745][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.220393][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.231429][T21452] netlink: 'syz.2.3754': attribute type 5 has an invalid length. [ 1748.251926][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.287423][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.311846][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.353436][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.379224][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3751'. [ 1748.404328][T14320] logitech-djreceiver 0003:046D:C71B.004C: unknown main item tag 0x0 [ 1748.442284][T14320] logitech-djreceiver 0003:046D:C71B.004C: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 1748.520906][T14320] usb 5-1: USB disconnect, device number 54 [ 1748.799209][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1749.069620][ T5882] usb 1-1: USB disconnect, device number 73 [ 1749.440383][T14320] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1749.600408][T14320] usb 5-1: Using ep0 maxpacket: 16 [ 1749.610350][T14320] usb 5-1: config 2 has an invalid interface number: 251 but max is 0 [ 1749.629105][T14320] usb 5-1: config 2 has an invalid interface number: 89 but max is 0 [ 1749.661824][T21469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1749.672405][T14320] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1749.720965][T14320] usb 5-1: config 2 has no interface number 0 [ 1749.760665][T14320] usb 5-1: config 2 has no interface number 1 [ 1749.880063][T14320] usb 5-1: config 2 interface 251 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 1749.934236][ T5882] usb 2-1: USB disconnect, device number 35 [ 1749.976464][T14320] usb 5-1: config 2 interface 251 altsetting 13 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1750.029767][T14320] usb 5-1: config 2 interface 251 altsetting 13 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1750.151387][T14320] usb 5-1: too many endpoints for config 2 interface 89 altsetting 29: 79, using maximum allowed: 30 [ 1750.186442][T14320] usb 5-1: config 2 interface 89 altsetting 29 bulk endpoint 0x6 has invalid maxpacket 64 [ 1750.199378][T21478] blktrace: Concurrent blktraces are not allowed on sg0 [ 1750.243687][T14320] usb 5-1: config 2 interface 89 altsetting 29 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1750.309983][T14320] usb 5-1: config 2 interface 89 altsetting 29 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1750.361442][ T5882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1750.390256][T14320] usb 5-1: config 2 interface 89 altsetting 29 has 3 endpoint descriptors, different from the interface descriptor's value: 79 [ 1750.485865][T14320] usb 5-1: config 2 interface 251 has no altsetting 0 [ 1750.511292][T14320] usb 5-1: config 2 interface 89 has no altsetting 0 [ 1750.544779][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 1750.628327][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1750.641686][ T5882] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1750.675507][T14320] usb 5-1: Dual-Role OTG device on HNP port [ 1750.682230][T14320] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=17.34 [ 1750.686567][ T5882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1750.704216][T14320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.759031][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1750.767484][T14320] usb 5-1: Product: ୍獓Ⰵ푻᪽첲펳ⵡ鉛㻩쑜䟇வ퇫멏ᤶ鯄몾䝆þ窂≭搯뼰䁔 [ 1750.789752][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.799101][T14320] usb 5-1: Manufacturer: ࠠ [ 1750.809569][T14320] usb 5-1: SerialNumber: э [ 1750.817024][ T5882] usb 2-1: Product: syz [ 1750.833242][ T5882] usb 2-1: Manufacturer: syz [ 1750.837339][T21462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1750.838144][ T5882] usb 2-1: SerialNumber: syz [ 1750.930349][ T5886] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1751.040463][ T5906] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1751.080438][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 1751.089796][ T5886] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1751.106922][ T5886] usb 1-1: config 0 has no interface number 0 [ 1751.109664][T14320] option 5-1:2.251: GSM modem (1-port) converter detected [ 1751.117089][ T5886] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1751.149645][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1751.167557][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.185842][ T5886] usb 1-1: Product: syz [ 1751.191229][T14320] usb 5-1: USB disconnect, device number 55 [ 1751.192135][ T5886] usb 1-1: Manufacturer: syz [ 1751.205010][ T5886] usb 1-1: SerialNumber: syz [ 1751.224755][T14320] option 5-1:2.251: device disconnected [ 1751.232778][ T5886] usb 1-1: config 0 descriptor?? [ 1751.240383][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 1751.258546][ T5906] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1751.298341][ T5886] smsc75xx v1.0.0 [ 1751.302653][ T5906] usb 6-1: config 0 has no interface number 0 [ 1751.311759][ T5882] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1751.324871][ T5882] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1751.332168][ T5906] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1751.346799][ T5906] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1751.363557][ T5906] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1751.374312][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.398642][ T5882] usb 2-1: USB disconnect, device number 36 [ 1751.404860][ T5906] usb 6-1: Product: syz [ 1751.409107][ T5906] usb 6-1: Manufacturer: syz [ 1751.418184][ T5906] usb 6-1: SerialNumber: syz [ 1751.491501][ T5906] usb 6-1: config 0 descriptor?? [ 1751.528135][T21484] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1751.834214][T21488] loop2: detected capacity change from 0 to 7 [ 1751.842121][T21488] Dev loop2: unable to read RDB block 7 [ 1751.847857][T21488] loop2: unable to read partition table [ 1751.854538][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1751.859375][T21488] loop2: partition table beyond EOD, truncated [ 1751.880255][T21488] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1751.884525][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1751.973833][ T5906] ir_usb 6-1:0.126: required endpoints missing [ 1752.200668][T21497] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 1752.231242][T21497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 46243 - 0 [ 1752.240933][T21497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 46243 - 0 [ 1752.249813][T21497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 46243 - 0 [ 1752.259295][T21497] geneve2: entered promiscuous mode [ 1752.480250][ T5906] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1752.680415][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 1752.693058][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1752.702222][ T5906] usb 3-1: config 0 has no interface number 0 [ 1752.708997][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.729179][ T5906] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1752.739574][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1752.751064][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1752.761243][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.769290][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1752.783454][ T5906] usb 3-1: config 0 descriptor?? [ 1752.788864][ T5886] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1752.803328][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1752.817984][ T5906] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1752.850289][T20322] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1752.952296][T14320] usb 1-1: USB disconnect, device number 74 [ 1752.978154][ T9] usb 2-1: config 0 has no interfaces? [ 1752.998616][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1753.004561][T20322] usb 5-1: Using ep0 maxpacket: 16 [ 1753.014783][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.030758][T20322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.035434][ T9] usb 2-1: Product: syz [ 1753.045713][ T9] usb 2-1: Manufacturer: syz [ 1753.054036][ T9] usb 2-1: SerialNumber: syz [ 1753.058964][T20322] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1753.063554][ T9] usb 2-1: config 0 descriptor?? [ 1753.086688][T20322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.101252][T20322] usb 5-1: config 0 descriptor?? [ 1753.317846][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1753.933846][T14320] usb 6-1: USB disconnect, device number 108 [ 1754.310262][ T9] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1754.482498][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1754.491920][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.503791][ T9] usb 1-1: config 0 has no interface number 0 [ 1754.515505][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1754.526318][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.537187][ T9] usb 1-1: Product: syz [ 1754.541992][ T9] usb 1-1: Manufacturer: syz [ 1754.547559][ T9] usb 1-1: SerialNumber: syz [ 1754.558420][ T9] usb 1-1: config 0 descriptor?? [ 1754.566607][ T9] hub 1-1:0.31: bad descriptor, ignoring hub [ 1754.572930][ T5906] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1754.573493][ T9] hub 1-1:0.31: probe with driver hub failed with error -5 [ 1754.593288][ T9] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1754.600660][ T9] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1754.610850][ T9] usb 1-1: Failed to create links for entity 6 [ 1754.617530][ T9] usb 1-1: Failed to register entities (-22). [ 1754.732312][ T5906] usb 6-1: config 2 has an invalid interface number: 99 but max is 0 [ 1754.754416][ T5906] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.822644][ T5906] usb 6-1: config 2 has no interface number 0 [ 1754.844578][ T5906] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1754.890926][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.915554][ T5906] usb 6-1: Product: syz [ 1754.922288][ T5906] usb 6-1: Manufacturer: syz [ 1754.927440][ T5906] usb 6-1: SerialNumber: syz [ 1754.990725][T14320] usb 1-1: USB disconnect, device number 75 [ 1755.309265][T14320] usb 3-1: USB disconnect, device number 37 [ 1755.730231][ T5881] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1755.940809][T14320] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1755.961202][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 1756.050674][ T5881] usb 1-1: config 2 has an invalid interface number: 251 but max is 0 [ 1756.059100][ T5881] usb 1-1: config 2 has an invalid interface number: 89 but max is 0 [ 1756.075162][ T5881] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1756.086542][ T5881] usb 1-1: config 2 has no interface number 0 [ 1756.101425][T14320] usb 3-1: Using ep0 maxpacket: 16 [ 1756.118803][ T5881] usb 1-1: config 2 has no interface number 1 [ 1756.127463][T20322] usbhid 5-1:0.0: can't add hid device: -71 [ 1756.129827][ T5881] usb 1-1: config 2 interface 251 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 1756.134455][T20322] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1756.173535][T14320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1756.243959][T14320] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1756.270393][T20322] usb 5-1: USB disconnect, device number 56 [ 1756.280465][ T5881] usb 1-1: config 2 interface 251 altsetting 13 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1756.326875][ T5881] usb 1-1: config 2 interface 251 altsetting 13 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1756.356897][ T5881] usb 1-1: too many endpoints for config 2 interface 89 altsetting 29: 79, using maximum allowed: 30 [ 1756.370664][T14320] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1756.380291][T14320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.388584][T14320] usb 3-1: Product: syz [ 1756.393633][T14320] usb 3-1: Manufacturer: syz [ 1756.398317][ T5881] usb 1-1: config 2 interface 89 altsetting 29 bulk endpoint 0x6 has invalid maxpacket 64 [ 1756.402948][ T5886] usb 2-1: USB disconnect, device number 37 [ 1756.408609][T14320] usb 3-1: SerialNumber: syz [ 1756.412431][T14320] usb 3-1: config 0 descriptor?? [ 1756.430561][ T5881] usb 1-1: config 2 interface 89 altsetting 29 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1756.454632][T21524] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1756.516986][T14320] hub 3-1:0.0: bad descriptor, ignoring hub [ 1756.524959][T14320] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1756.549082][ T5881] usb 1-1: config 2 interface 89 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 79 [ 1756.572525][T14320] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input138 [ 1756.589489][ T5881] usb 1-1: config 2 interface 251 has no altsetting 0 [ 1756.607319][ T5881] usb 1-1: config 2 interface 89 has no altsetting 0 [ 1756.625431][ T5881] usb 1-1: Dual-Role OTG device on HNP port [ 1756.633151][ T5881] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=17.34 [ 1756.640323][T20322] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1756.652974][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.674694][ T5881] usb 1-1: Product: ୍獓Ⰵ푻᪽첲펳ⵡ鉛㻩쑜䟇வ퇫멏ᤶ鯄몾䝆þ窂≭搯뼰䁔 [ 1756.726631][ T5881] usb 1-1: Manufacturer: ࠠ [ 1756.751004][ T5881] usb 1-1: SerialNumber: э [ 1756.808944][T21522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1756.823206][T20322] usb 5-1: Using ep0 maxpacket: 16 [ 1756.853897][T20322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.865774][T20322] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1756.876266][T20322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.887789][T20322] usb 5-1: config 0 descriptor?? [ 1757.000279][ T5886] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1757.037838][ T5881] option 1-1:2.251: GSM modem (1-port) converter detected [ 1757.067227][ T5881] usb 1-1: USB disconnect, device number 76 [ 1757.088732][ T5881] option 1-1:2.251: device disconnected [ 1757.162573][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 1757.171070][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.184640][ T5886] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1757.195229][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.207593][ T5886] usb 2-1: config 0 descriptor?? [ 1757.324786][T21527] fuse: Bad value for 'group_id' [ 1757.329952][T21527] fuse: Bad value for 'group_id' [ 1757.353586][T20322] hid-led 0003:1294:1320.004D: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1757.383133][T20322] hid-led 0003:1294:1320.004D: Riso Kagaku Webmail Notifier initialized [ 1757.444271][T14320] usb 6-1: USB disconnect, device number 109 [ 1757.569856][T20322] usb 5-1: USB disconnect, device number 57 [ 1757.637501][T19888] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1757.689769][T19888] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1757.709644][T19888] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1759.030609][ T5906] usb 3-1: USB disconnect, device number 38 [ 1759.552983][T20322] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1759.847176][T20322] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1759.860340][T20322] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1759.871985][ T5889] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1759.876537][T21566] FAULT_INJECTION: forcing a failure. [ 1759.876537][T21566] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.924063][T21566] CPU: 0 UID: 0 PID: 21566 Comm: syz.4.3788 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1759.924096][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1759.924108][T21566] Call Trace: [ 1759.924118][T21566] [ 1759.924126][T21566] dump_stack_lvl+0x189/0x250 [ 1759.924163][T21566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1759.924190][T21566] ? __pfx__printk+0x10/0x10 [ 1759.924218][T21566] ? __pfx___might_resched+0x10/0x10 [ 1759.924236][T21566] ? fs_reclaim_acquire+0x7d/0x100 [ 1759.924270][T21566] should_fail_ex+0x414/0x560 [ 1759.924297][T21566] should_failslab+0xa8/0x100 [ 1759.924325][T21566] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1759.924352][T21566] ? __alloc_skb+0x112/0x2d0 [ 1759.924382][T21566] __alloc_skb+0x112/0x2d0 [ 1759.924412][T21566] nl80211_notify_iface+0x32/0x170 [ 1759.924442][T21566] nl80211_set_interface+0x8b4/0xaa0 [ 1759.924478][T21566] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1759.924508][T21566] ? nl80211_pre_doit+0x4fb/0x930 [ 1759.924539][T21566] genl_family_rcv_msg_doit+0x215/0x300 [ 1759.924583][T21566] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1759.924629][T21566] ? bpf_lsm_capable+0x9/0x20 [ 1759.924655][T21566] ? security_capable+0x7e/0x2e0 [ 1759.924686][T21566] genl_rcv_msg+0x60e/0x790 [ 1759.924720][T21566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1759.924745][T21566] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1759.924765][T21566] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1759.924787][T21566] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1759.924812][T21566] ? ref_tracker_free+0x63a/0x7d0 [ 1759.924831][T21566] ? __copy_skb_header+0xa7/0x550 [ 1759.924867][T21566] netlink_rcv_skb+0x219/0x490 [ 1759.924892][T21566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1759.924922][T21566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1759.924975][T21566] ? down_read+0x1ad/0x2e0 [ 1759.925005][T21566] genl_rcv+0x28/0x40 [ 1759.925029][T21566] netlink_unicast+0x75b/0x8d0 [ 1759.925066][T21566] netlink_sendmsg+0x805/0xb30 [ 1759.925102][T21566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.925129][T21566] ? aa_sock_msg_perm+0x94/0x160 [ 1759.925153][T21566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1759.925175][T21566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.925200][T21566] __sock_sendmsg+0x21c/0x270 [ 1759.925226][T21566] ____sys_sendmsg+0x505/0x830 [ 1759.925260][T21566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1759.925296][T21566] ? import_iovec+0x74/0xa0 [ 1759.925329][T21566] ___sys_sendmsg+0x21f/0x2a0 [ 1759.925360][T21566] ? __pfx____sys_sendmsg+0x10/0x10 [ 1759.925431][T21566] ? __fget_files+0x2a/0x420 [ 1759.925455][T21566] ? __fget_files+0x3a0/0x420 [ 1759.925494][T21566] __x64_sys_sendmsg+0x19b/0x260 [ 1759.925525][T21566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1759.925578][T21566] ? do_syscall_64+0xba/0x210 [ 1759.925607][T21566] do_syscall_64+0xf6/0x210 [ 1759.925634][T21566] ? clear_bhb_loop+0x60/0xb0 [ 1759.925659][T21566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.925678][T21566] RIP: 0033:0x7f96b558e969 [ 1759.925696][T21566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1759.925711][T21566] RSP: 002b:00007f96b6402038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1759.925732][T21566] RAX: ffffffffffffffda RBX: 00007f96b57b5fa0 RCX: 00007f96b558e969 [ 1759.925748][T21566] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1759.925761][T21566] RBP: 00007f96b6402090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.925773][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.925785][T21566] R13: 0000000000000000 R14: 00007f96b57b5fa0 R15: 00007f96b58dfa28 [ 1759.925819][T21566] [ 1759.931881][T20322] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1760.310650][T20322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.318858][T20322] usb 3-1: Product: syz [ 1760.323298][T20322] usb 3-1: Manufacturer: syz [ 1760.328283][T20322] usb 3-1: SerialNumber: syz [ 1760.398115][ T5889] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1760.423930][ T5889] usb 6-1: config 0 has no interface number 0 [ 1760.437760][ T5889] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1760.451696][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 1760.470856][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1760.492341][ T5889] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1760.507886][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.519062][ T5886] usb 2-1: USB disconnect, device number 38 [ 1760.531223][ T5889] usb 6-1: Product: syz [ 1760.535669][ T5889] usb 6-1: Manufacturer: syz [ 1760.548304][T21560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1760.572081][ T5889] usb 6-1: SerialNumber: syz [ 1760.588736][ T5889] usb 6-1: config 0 descriptor?? [ 1760.613895][ T5889] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1760.916902][ T5882] usb 6-1: USB disconnect, device number 110 [ 1760.934042][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1760.950284][ T5881] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1761.020458][ T5889] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1761.125616][ T5881] usb 5-1: config 0 has no interfaces? [ 1761.142403][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1761.152510][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1761.166862][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1761.177588][T21560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1761.190937][ T5881] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1761.192874][ T5886] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1761.210418][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.220588][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1761.230699][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1761.241112][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1761.251247][ T5886] usb 2-1: Product: syz [ 1761.255476][ T5886] usb 2-1: Manufacturer: syz [ 1761.261050][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1761.261068][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.261140][ T5881] usb 5-1: Product: syz [ 1761.271413][ T5886] usb 2-1: SerialNumber: syz [ 1761.293358][ T5881] usb 5-1: Manufacturer: syz [ 1761.293418][ T5889] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1761.298086][ T5881] usb 5-1: SerialNumber: syz [ 1761.319779][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.328390][ T5889] usb 1-1: Product: syz [ 1761.335583][ T5881] usb 5-1: config 0 descriptor?? [ 1761.340442][ T5886] usb 2-1: config 0 descriptor?? [ 1761.351155][ T5886] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1761.360043][ T5889] usb 1-1: Manufacturer: syz [ 1761.393107][T20322] cdc_ncm 3-1:1.0: bind() failure [ 1761.404387][T20322] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1761.429623][ T5889] usb 1-1: SerialNumber: syz [ 1761.439772][T20322] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1761.451334][ T5889] usb 1-1: config 0 descriptor?? [ 1761.469086][T20322] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1761.478385][ T5889] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1761.537603][T20322] usb 3-1: USB disconnect, device number 39 [ 1761.573933][ T5886] usb 2-1: USB disconnect, device number 39 [ 1761.666677][T21573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1761.683580][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.703312][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.716081][T21575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.735712][T21575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.785857][ T5889] scsi host2: usb-storage 1-1:0.0 [ 1761.838021][ T5889] usb 1-1: USB disconnect, device number 77 [ 1762.221932][T20754] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1762.391959][T20754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1762.459365][T20754] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1762.537208][T20754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1762.564470][T20754] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1762.705818][T20754] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1762.741436][T20754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.869030][T20754] usb 6-1: Product: syz [ 1762.902871][T20754] usb 6-1: Manufacturer: syz [ 1762.917206][T20754] usb 6-1: SerialNumber: syz [ 1762.949143][T20754] usb 6-1: config 0 descriptor?? [ 1763.016173][T20754] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1763.024257][ T5881] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1763.090910][T20754] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1763.115476][T20754] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1763.170770][ T5889] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1763.221278][T20754] usb 6-1: USB disconnect, device number 111 [ 1763.267548][ T5881] usb 2-1: config 0 has no interfaces? [ 1763.290972][ T5881] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1763.302062][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.314334][ T5881] usb 2-1: Product: syz [ 1763.318628][ T5881] usb 2-1: Manufacturer: syz [ 1763.325308][ T5881] usb 2-1: SerialNumber: syz [ 1763.344313][ T5881] usb 2-1: config 0 descriptor?? [ 1763.355189][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 1763.371151][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.390161][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.421226][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1763.430609][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.459258][ T5889] usb 1-1: Product: syz [ 1763.484281][ T5889] usb 1-1: Manufacturer: syz [ 1763.511528][ T5889] usb 1-1: SerialNumber: syz [ 1763.749743][ T5889] usb 1-1: 0:2 : does not exist [ 1763.762853][ T5889] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1763.848942][ T5889] usb 1-1: USB disconnect, device number 78 [ 1763.860335][ T5881] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1763.907544][T10627] udevd[10627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.028568][T20322] usb 5-1: USB disconnect, device number 58 [ 1764.060260][ T5881] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1764.085109][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.115251][ T5881] usb 3-1: Product: syz [ 1764.185020][ T5881] usb 3-1: Manufacturer: syz [ 1764.189914][ T5881] usb 3-1: SerialNumber: syz [ 1764.199811][ T5881] usb 3-1: config 0 descriptor?? [ 1764.216845][ T5881] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1764.230335][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1764.380401][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1764.420795][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1764.439939][ T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1764.449979][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.465062][ T9] usb 6-1: config 0 descriptor?? [ 1764.530578][T20322] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1764.640449][ T5889] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1764.660731][T20322] usb 5-1: device descriptor read/64, error -71 [ 1764.754343][ T5881] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input139 [ 1764.843742][ T5889] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1764.852317][ T5889] usb 1-1: config 0 has no interface number 0 [ 1764.858682][ T5889] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1764.873197][ T5889] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1764.883002][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.896611][ T5889] usb 1-1: Product: syz [ 1764.901730][ T5889] usb 1-1: Manufacturer: syz [ 1764.909943][ T5889] usb 1-1: SerialNumber: syz [ 1765.139879][T20322] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1765.229911][ T5889] usb 1-1: config 0 descriptor?? [ 1765.257602][ T5889] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1765.320307][T20322] usb 5-1: device descriptor read/64, error -71 [ 1765.430696][T20322] usb usb5-port1: attempt power cycle [ 1765.708908][ T5886] usb 1-1: USB disconnect, device number 79 [ 1765.709917][ T5881] usb 3-1: USB disconnect, device number 40 [ 1765.826963][T14320] usb 2-1: USB disconnect, device number 40 [ 1765.920431][T20322] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1765.951816][T20322] usb 5-1: device descriptor read/8, error -71 [ 1766.250233][T20322] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1766.286452][T20322] usb 5-1: device descriptor read/8, error -71 [ 1766.412927][T20322] usb usb5-port1: unable to enumerate USB device [ 1766.780338][ T5881] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1766.940237][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 1767.037801][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.059296][ T5881] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1767.079703][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.110783][ T5881] usb 1-1: config 0 descriptor?? [ 1768.033587][T21634] delete_channel: no stack [ 1768.300662][T20322] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1768.575425][T20322] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1768.618210][T20322] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1768.658629][T20322] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1768.696775][T20322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.790183][T21634] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1768.805067][T20322] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1769.070316][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.081725][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.459806][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1769.488067][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1769.550967][ T9] usb 6-1: USB disconnect, device number 112 [ 1769.637078][T21641] random: crng reseeded on system resumption [ 1770.296877][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1770.296897][ T30] audit: type=1326 audit(1748166875.432:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21639 comm="syz.2.3810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd55338e969 code=0x0 [ 1770.961757][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 1770.967942][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1771.000469][ T5886] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1771.027919][ T5881] usb 1-1: USB disconnect, device number 80 [ 1771.127292][ T5889] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1771.300737][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1771.347457][ T5886] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1771.399646][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.466782][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 1771.505277][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1771.515138][ T5886] usb 6-1: config 0 descriptor?? [ 1771.527140][ T5889] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.40 [ 1771.568667][ T5886] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1771.590319][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.626595][ T5889] usb 3-1: Product: 줺豬്팳਑炽ꀯ恥뉏Ἱ⸄鮋婼蟝폧쀥첯崙䡪朶耷乡縍ᮛ啮ဲ럌좛㹽䏗盟去텀篓쉠톑耦䇝蕦ḋ铛뺩坲쿅强≄蛗쏤ᱣ [ 1771.651631][ T5886] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1771.712004][ T5889] usb 3-1: SerialNumber: ࠓ [ 1771.728019][T21666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1771.926281][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.958178][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1771.988745][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.055673][T21672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.110467][ T5889] usbhid 3-1:1.0: can't add hid device: -71 [ 1772.116555][ T5889] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1772.124876][ T5881] usb 5-1: USB disconnect, device number 63 [ 1772.128220][ T5889] usb 3-1: USB disconnect, device number 41 [ 1772.258806][T21666] sctp: [Deprecated]: syz.0.3817 (pid 21666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1772.258806][T21666] Use struct sctp_sack_info instead [ 1772.591045][ T5881] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1772.700502][ T5893] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1772.753976][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1772.769089][ T5881] usb 5-1: config 2 has an invalid interface number: 251 but max is 0 [ 1772.786514][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1772.808521][ T5881] usb 5-1: config 2 has an invalid interface number: 89 but max is 0 [ 1772.850248][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1772.861084][ T5881] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1772.889622][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.913297][ T5881] usb 5-1: config 2 has no interface number 0 [ 1772.924436][ T5893] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1772.949536][ T5881] usb 5-1: config 2 has no interface number 1 [ 1772.966192][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.974528][ T5881] usb 5-1: config 2 interface 251 altsetting 13 bulk endpoint 0xE has invalid maxpacket 64 [ 1773.044610][ T5893] usb 1-1: config 0 descriptor?? [ 1773.049819][ T5881] usb 5-1: config 2 interface 251 altsetting 13 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1773.064527][ T5881] usb 5-1: too many endpoints for config 2 interface 89 altsetting 29: 79, using maximum allowed: 30 [ 1773.079504][ T5881] usb 5-1: config 2 interface 89 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 1773.093460][ T5881] usb 5-1: config 2 interface 251 has no altsetting 0 [ 1773.100805][ T5889] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1773.112944][ T5881] usb 5-1: config 2 interface 89 has no altsetting 0 [ 1773.131080][ T5881] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=17.34 [ 1773.140708][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.148794][ T5881] usb 5-1: Product: ୍獓Ⰵ푻᪽첲펳ⵡ鉛㻩쑜䟇வ퇫멏ᤶ鯄몾䝆þ窂≭搯뼰䁔 [ 1773.160668][ T5881] usb 5-1: Manufacturer: ࠠ [ 1773.169539][ T5881] usb 5-1: SerialNumber: э [ 1773.182311][T21675] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1773.260478][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 1773.274445][ T5889] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 1773.288043][ T5889] usb 3-1: config 0 has no interface number 0 [ 1773.294766][ T5889] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1773.306960][ T5889] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1773.317231][ T5889] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1773.327954][ T5889] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1773.490678][ T5889] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1773.504954][ T5881] option 5-1:2.251: GSM modem (1-port) converter detected [ 1773.764004][ T5889] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1773.786571][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.804901][ T5881] usb 5-1: USB disconnect, device number 64 [ 1773.819055][ T5889] usb 3-1: config 0 descriptor?? [ 1773.856909][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1773.894797][ T5881] option 5-1:2.251: device disconnected [ 1774.064352][T15763] udevd[15763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1774.151042][T20322] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1774.350331][T20322] usb 2-1: Using ep0 maxpacket: 16 [ 1774.359219][T20322] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1774.367911][T20322] usb 2-1: config 0 has no interface number 0 [ 1774.476814][T21689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1774.619927][T20322] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.638222][ T5886] usb 6-1: USB disconnect, device number 113 [ 1774.751644][T20322] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.880744][ T5889] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1774.920505][T20322] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1774.941471][T20322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.965558][T20322] usb 2-1: config 0 descriptor?? [ 1775.050503][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1775.064036][ T5889] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1775.074234][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.096095][ T5889] usb 5-1: config 0 descriptor?? [ 1775.122535][ T5889] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1775.133605][ T5889] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1775.314886][ T5886] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1775.427687][T21694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.442762][T21694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.577504][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1775.594153][T20322] usbhid 2-1:0.1: can't add hid device: -71 [ 1775.659637][ T5881] usb 3-1: USB disconnect, device number 42 [ 1775.678196][T20322] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1775.709473][T20322] usb 2-1: USB disconnect, device number 41 [ 1775.738015][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1775.760297][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1775.787684][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 29706, setting to 64 [ 1775.815845][ T5886] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1775.874058][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.899745][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 1775.913777][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1775.927132][ T5886] usb 6-1: Product: syz [ 1775.936188][ T5886] usb 6-1: Manufacturer: syz [ 1775.957693][ T5886] usb 6-1: SerialNumber: syz [ 1775.973836][ T5893] usb 1-1: USB disconnect, device number 81 [ 1775.988617][ T5886] usb 6-1: config 0 descriptor?? [ 1776.014053][ T5886] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0250 [ 1776.202813][ T5893] usb 6-1: USB disconnect, device number 114 [ 1776.540361][ T5886] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1776.710295][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 1776.731021][ T5906] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1776.788824][ T5886] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 1776.806036][ T5886] usb 2-1: config 0 has no interface number 0 [ 1776.815495][ T5886] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1776.830982][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.866604][ T5886] usb 2-1: config 0 descriptor?? [ 1776.950327][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 1776.957501][ T5906] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.971508][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1776.979627][ T5906] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1776.989691][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.010392][ T5906] usb 3-1: config 0 descriptor?? [ 1777.094238][T21703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.103564][T21703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.182725][ T5886] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1777.196394][T20322] usb 2-1: USB disconnect, device number 42 [ 1777.275019][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.294340][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.360886][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1777.397546][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.418930][ T5886] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1777.438916][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.500869][ T5886] usb 6-1: config 0 descriptor?? [ 1777.510621][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 1777.538527][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1777.599457][ T5906] usb 3-1: USB disconnect, device number 43 [ 1777.740431][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1777.753025][ T5889] usb 5-1: USB disconnect, device number 65 [ 1777.911011][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1777.923484][T21713] fuse: Bad value for 'group_id' [ 1777.928519][T21713] fuse: Bad value for 'group_id' [ 1777.942588][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1777.986522][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1777.996962][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1777.997466][ T5886] hid-led 0003:1294:1320.004E: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 1778.048155][ T9] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1778.079944][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.156933][ T9] usb 1-1: Product: syz [ 1778.159878][ T5906] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1778.172462][ T9] usb 1-1: Manufacturer: syz [ 1778.177131][ T9] usb 1-1: SerialNumber: syz [ 1778.189707][ T5886] hid-led 0003:1294:1320.004E: Riso Kagaku Webmail Notifier initialized [ 1778.205236][ T9] usb 1-1: config 0 descriptor?? [ 1778.239959][ T9] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1778.280548][ T5886] usb 6-1: USB disconnect, device number 115 [ 1778.328603][ T59] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1778.356171][T21726] fido_id[21726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1778.409247][ T59] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1778.410549][ T5893] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1778.431962][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 1778.445457][ T9] scsi host1: usb-storage 1-1:0.0 [ 1778.462441][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 1778.468941][ T9] usb 1-1: USB disconnect, device number 82 [ 1778.496691][T19888] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1778.548393][ T5906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1778.580324][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1778.598215][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.620042][ T5893] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1778.630059][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.643871][ T5906] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1778.687066][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.708979][ T5906] usb 3-1: Product: syz [ 1778.855911][ T5906] usb 3-1: Manufacturer: syz [ 1778.867260][ T5893] usb 2-1: config 0 descriptor?? [ 1778.980651][ T5906] usb 3-1: SerialNumber: syz [ 1779.006673][ T5906] usb 3-1: config 0 descriptor?? [ 1779.032797][T21724] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1779.043257][ T5906] hub 3-1:0.0: bad descriptor, ignoring hub [ 1779.075349][ T5906] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1779.087787][ T5906] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input142 [ 1779.580505][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1779.720895][ T9] usb 5-1: device descriptor read/64, error -71 [ 1779.981012][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1780.138671][ T9] usb 5-1: device descriptor read/64, error -71 [ 1780.245768][T21753] FAULT_INJECTION: forcing a failure. [ 1780.245768][T21753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.260821][ T9] usb usb5-port1: attempt power cycle [ 1780.290366][ T5886] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1780.313858][T21753] CPU: 1 UID: 0 PID: 21753 Comm: syz.5.3843 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1780.313889][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1780.313901][T21753] Call Trace: [ 1780.313910][T21753] [ 1780.313919][T21753] dump_stack_lvl+0x189/0x250 [ 1780.313952][T21753] ? __lock_acquire+0xaac/0xd20 [ 1780.313982][T21753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.314010][T21753] ? __pfx__printk+0x10/0x10 [ 1780.314030][T21753] ? __might_fault+0xb0/0x130 [ 1780.314068][T21753] should_fail_ex+0x414/0x560 [ 1780.314094][T21753] _copy_from_user+0x2d/0xb0 [ 1780.314121][T21753] input_event_from_user+0xb2/0x280 [ 1780.314143][T21753] ? __pfx_input_event_from_user+0x10/0x10 [ 1780.314169][T21753] ? input_inject_event+0xbc/0x320 [ 1780.314199][T21753] evdev_write+0x2a6/0x480 [ 1780.314225][T21753] ? __pfx_evdev_write+0x10/0x10 [ 1780.314244][T21753] ? bpf_lsm_file_permission+0x9/0x20 [ 1780.314267][T21753] ? security_file_permission+0x75/0x290 [ 1780.314297][T21753] ? rw_verify_area+0x258/0x650 [ 1780.314323][T21753] ? __pfx_evdev_write+0x10/0x10 [ 1780.314355][T21753] vfs_write+0x27b/0xa90 [ 1780.314387][T21753] ? __pfx_vfs_write+0x10/0x10 [ 1780.314411][T21753] ? __fget_files+0x2a/0x420 [ 1780.314437][T21753] ? __fget_files+0x2a/0x420 [ 1780.314459][T21753] ? __fget_files+0x3a0/0x420 [ 1780.314482][T21753] ? __fget_files+0x2a/0x420 [ 1780.314516][T21753] ksys_write+0x145/0x250 [ 1780.314537][T21753] ? rcu_is_watching+0x15/0xb0 [ 1780.314556][T21753] ? __pfx_ksys_write+0x10/0x10 [ 1780.314582][T21753] ? do_syscall_64+0xba/0x210 [ 1780.314610][T21753] do_syscall_64+0xf6/0x210 [ 1780.314635][T21753] ? clear_bhb_loop+0x60/0xb0 [ 1780.314658][T21753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.314675][T21753] RIP: 0033:0x7f7c8e78e969 [ 1780.314687][T21753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.314698][T21753] RSP: 002b:00007f7c8f599038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1780.314713][T21753] RAX: ffffffffffffffda RBX: 00007f7c8e9b5fa0 RCX: 00007f7c8e78e969 [ 1780.314726][T21753] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 1780.314739][T21753] RBP: 00007f7c8f599090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.314751][T21753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1780.314763][T21753] R13: 0000000000000000 R14: 00007f7c8e9b5fa0 R15: 00007f7c8eadfa28 [ 1780.314796][T21753] [ 1780.880481][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1780.911044][ T9] usb 5-1: device descriptor read/8, error -71 [ 1780.930233][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 1781.039900][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1781.071537][ T5886] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1781.110638][ T5886] usb 1-1: config 7 has no interface number 0 [ 1781.116836][ T5886] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1781.160439][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1781.184879][ T5886] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1781.201220][T20754] usb 3-1: USB disconnect, device number 44 [ 1781.209011][ T9] usb 5-1: device descriptor read/8, error -71 [ 1781.238474][ T5886] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1781.277104][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.310622][ T5886] usb 1-1: Product: syz [ 1781.314862][ T5886] usb 1-1: Manufacturer: syz [ 1781.319490][ T5886] usb 1-1: SerialNumber: syz [ 1781.360923][ T9] usb usb5-port1: unable to enumerate USB device [ 1781.598996][ T5886] usb 1-1: Limiting number of CPorts to U8_MAX [ 1781.634463][ T5886] usb 1-1: Unknown endpoint type found, address 0x07 [ 1781.647261][ T5886] usb 1-1: Unknown endpoint type found, address 0x03 [ 1781.657129][ T5886] usb 1-1: Not enough endpoints found in device, aborting! [ 1781.662684][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 1781.671642][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1781.690375][ T5906] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1781.725435][ T5893] usb 2-1: USB disconnect, device number 43 [ 1781.850650][T20754] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1781.865021][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.890357][ T5906] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1781.929096][ T5906] usb 6-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1781.949558][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.966636][ T5906] usb 6-1: Product: syz [ 1781.971366][ T5906] usb 6-1: Manufacturer: syz [ 1781.976007][ T5906] usb 6-1: SerialNumber: syz [ 1782.040674][ T5906] cdc_ncm 6-1:1.0: skipping garbage [ 1782.047730][T20754] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1782.066834][T20754] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1782.106739][T20754] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1782.115381][T20754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.125961][T20754] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1782.135324][T20754] usb 3-1: config 0 has no interface number 0 [ 1782.141687][T20754] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1782.158610][T20754] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1782.168418][T20754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.176688][T20754] usb 3-1: Product: syz [ 1782.181200][T20754] usb 3-1: Manufacturer: syz [ 1782.185846][T20754] usb 3-1: SerialNumber: syz [ 1782.201920][T20754] usb 3-1: config 0 descriptor?? [ 1782.360579][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1782.425739][T20754] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1782.437589][T20754] usb 3-1: MIDIStreaming interface descriptor not found [ 1782.483745][T20754] usb 3-1: USB disconnect, device number 45 [ 1782.520598][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1782.561153][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.583134][T20308] udevd[20308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1782.601125][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1782.617527][ T5906] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1782.626720][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1782.636236][ T5906] cdc_ncm 6-1:1.0: bind() failure [ 1782.647439][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.665511][ T5893] usb 2-1: Product: syz [ 1782.675867][ T5893] usb 2-1: Manufacturer: syz [ 1782.698837][ T5893] usb 2-1: SerialNumber: syz [ 1782.923221][ T5893] usb 2-1: 0:2 : does not exist [ 1782.943562][ T5893] usb 2-1: USB disconnect, device number 44 [ 1782.974722][T10627] udevd[10627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1783.239125][T21784] FAULT_INJECTION: forcing a failure. [ 1783.239125][T21784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1783.254785][T21784] CPU: 0 UID: 0 PID: 21784 Comm: syz.4.3853 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1783.254816][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1783.254829][T21784] Call Trace: [ 1783.254838][T21784] [ 1783.254848][T21784] dump_stack_lvl+0x189/0x250 [ 1783.254886][T21784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1783.254914][T21784] ? __pfx__printk+0x10/0x10 [ 1783.254937][T21784] ? fs_reclaim_acquire+0x7d/0x100 [ 1783.254978][T21784] should_fail_ex+0x414/0x560 [ 1783.255007][T21784] prepare_alloc_pages+0x213/0x610 [ 1783.255046][T21784] __alloc_frozen_pages_noprof+0x123/0x370 [ 1783.255071][T21784] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1783.255114][T21784] alloc_pages_mpol+0x232/0x4a0 [ 1783.255148][T21784] alloc_pages_noprof+0xa9/0x190 [ 1783.255183][T21784] pte_alloc_one+0x1e/0x160 [ 1783.255210][T21784] __pte_alloc+0x25/0x160 [ 1783.255245][T21784] mfill_atomic_zeropage+0x78b/0xcc0 [ 1783.255290][T21784] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 1783.255332][T21784] userfaultfd_ioctl+0x2697/0x4bc0 [ 1783.255375][T21784] ? do_vfs_ioctl+0xf36/0x1eb0 [ 1783.255394][T21784] ? __se_sys_ioctl+0x47/0x170 [ 1783.255412][T21784] ? do_syscall_64+0xf6/0x210 [ 1783.255439][T21784] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1783.255464][T21784] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1783.255518][T21784] ? kasan_quarantine_put+0xdd/0x220 [ 1783.255545][T21784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1783.255563][T21784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1783.255579][T21784] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1783.255593][T21784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1783.255611][T21784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1783.255634][T21784] ? vfs_write+0x8d8/0xa90 [ 1783.255683][T21784] ? ksys_write+0x1e1/0x250 [ 1783.255699][T21784] ? rcu_is_watching+0x15/0xb0 [ 1783.255717][T21784] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1783.255736][T21784] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1783.255753][T21784] __se_sys_ioctl+0xf9/0x170 [ 1783.255772][T21784] do_syscall_64+0xf6/0x210 [ 1783.255791][T21784] ? clear_bhb_loop+0x60/0xb0 [ 1783.255811][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.255826][T21784] RIP: 0033:0x7f96b558e969 [ 1783.255842][T21784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1783.255855][T21784] RSP: 002b:00007f96b6402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1783.255872][T21784] RAX: ffffffffffffffda RBX: 00007f96b57b5fa0 RCX: 00007f96b558e969 [ 1783.255883][T21784] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 1783.255893][T21784] RBP: 00007f96b6402090 R08: 0000000000000000 R09: 0000000000000000 [ 1783.255903][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.255913][T21784] R13: 0000000000000000 R14: 00007f96b57b5fa0 R15: 00007f96b58dfa28 [ 1783.255938][T21784] [ 1783.646829][ T5893] usb 1-1: USB disconnect, device number 83 [ 1784.100709][ T5906] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1784.160163][ T5886] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1784.270207][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1784.281179][ T5906] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1784.295374][ T5906] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1784.309899][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1784.326069][ T5886] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1784.336225][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.347116][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1784.357084][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.373270][ T5886] usb 2-1: config 0 descriptor?? [ 1784.378680][ T5906] usb 1-1: Product: syz [ 1784.384695][ T5906] usb 1-1: Manufacturer: syz [ 1784.392902][ T5886] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1784.399671][ T5906] usb 1-1: SerialNumber: syz [ 1784.443864][T20322] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1784.522665][ T5889] usb 6-1: USB disconnect, device number 116 [ 1784.670197][T20322] usb 3-1: Using ep0 maxpacket: 8 [ 1784.677478][T20322] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1784.697271][T20322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.715471][T21800] loop8: detected capacity change from 0 to 1 [ 1784.761066][T20322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.762983][T21800] Dev loop8: unable to read RDB block 1 [ 1784.772047][T20322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1784.790735][T20322] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1784.805495][T20322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.822222][T21800] loop8: unable to read partition table [ 1784.829808][T20322] usb 3-1: config 0 descriptor?? [ 1784.837553][T21800] loop8: partition table beyond EOD, truncated [ 1784.844244][T21800] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1785.032991][ T5906] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1785.050644][ T5906] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1785.106745][ T5906] usb 1-1: USB disconnect, device number 84 [ 1785.216949][T21792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.233404][T21792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.310905][T21792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.364223][T21792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.372466][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.389937][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.436068][T20322] usbhid 3-1:0.0: can't add hid device: -71 [ 1785.444080][T20322] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1785.486855][ T5886] gspca_sunplus: reg_w_riv err -71 [ 1785.492562][ T5886] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1785.521009][ T5886] usb 2-1: USB disconnect, device number 45 [ 1785.530772][T20322] usb 3-1: USB disconnect, device number 46 [ 1785.760842][ T5893] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1785.934970][ T5893] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1785.946374][ T5893] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1785.956861][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1785.969856][ T5893] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1786.019922][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.043379][T21805] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1786.086755][ T5893] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1786.297610][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.335829][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1786.349246][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1786.363274][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.379423][ T5893] usb 6-1: USB disconnect, device number 117 [ 1786.392822][ T9] usb 1-1: config 0 descriptor?? [ 1786.420419][T14320] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1786.594856][T14320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.767743][T14320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1786.782002][T14320] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1786.795336][T21821] delete_channel: no stack [ 1786.889764][T14320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.899124][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1786.919485][ T9] usb 1-1: USB disconnect, device number 85 [ 1786.948843][T14320] usb 3-1: config 0 descriptor?? [ 1787.035440][ T5893] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1787.213063][ T5893] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1787.223280][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.241608][ T5893] usb 6-1: config 0 descriptor?? [ 1787.280513][T20754] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1787.443205][T20754] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1787.488480][T14320] kye 0003:0458:0138.004F: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 1787.507916][ T5893] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1787.516832][T20754] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1787.540689][ T5893] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1787.563753][T20754] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1787.629004][T20754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.646000][ T5893] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1787.663435][T20322] usb 3-1: USB disconnect, device number 47 [ 1787.692961][T21822] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1787.705155][ T5893] [drm] Initialized udl on minor 2 [ 1787.753302][T20754] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1787.770678][T21827] fido_id[21827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1788.019008][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.030536][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.046457][T21805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.058384][T21805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.087716][T21805] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3860'. [ 1788.101656][ T5886] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1788.121070][ T5893] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1788.141043][ T5893] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1788.167311][T20754] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1788.186870][ T5893] usb 6-1: USB disconnect, device number 118 [ 1788.201588][T20754] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1788.250323][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1788.490323][ T5886] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1788.521933][T21836] delete_channel: no stack [ 1788.590810][ T5906] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1788.640592][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1788.743166][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1788.755161][ T5886] usb usb5-port1: attempt power cycle [ 1788.835027][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1788.855372][ T5889] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1788.877933][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1788.948739][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1788.977461][ T5906] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1789.019875][T21842] CIFS: VFS: Malformed UNC in devname [ 1789.103120][ T5906] usb 1-1: Manufacturer: syz [ 1789.154326][ T5906] usb 1-1: config 0 descriptor?? [ 1789.163768][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1789.181951][ T5906] smsusb:smsusb_probe: board id=9, interface number 0 [ 1789.198543][ T5889] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1789.210817][ T5886] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1789.221581][ T5906] smsusb:smsusb_probe: Device initialized with return code -19 [ 1789.229823][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1789.241228][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1789.251330][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.294911][T21837] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1789.311156][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1789.570503][T21836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.583535][ T5886] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1789.593371][T21836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.631706][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1789.895171][ T5886] usb usb5-port1: unable to enumerate USB device [ 1790.353558][ T5906] usb 1-1: USB disconnect, device number 86 [ 1790.541173][T20754] usb 2-1: USB disconnect, device number 46 [ 1791.431090][ T5906] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1791.600557][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1791.617281][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1791.628694][ T5906] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.40 [ 1791.688510][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.727626][ T5906] usb 2-1: Product: 줺豬്팳਑炽ꀯ恥뉏Ἱ⸄鮋婼蟝폧쀥첯崙䡪朶耷乡縍ᮛ啮ဲ럌좛㹽䏗盟去텀篓쉠톑耦䇝蕦ḋ铛뺩坲쿅强≄蛗쏤ᱣ [ 1791.836184][ T5906] usb 2-1: SerialNumber: ࠓ [ 1791.870746][ T5886] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1791.887065][T21862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1792.010653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.017436][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.064019][ T5906] usbhid 2-1:1.0: can't add hid device: -71 [ 1792.077257][ T5906] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1792.088697][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.111750][ T5886] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1792.159166][ T5906] usb 2-1: USB disconnect, device number 47 [ 1792.165577][ T5886] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1792.231098][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.304609][ T5886] usb 6-1: config 0 descriptor?? [ 1792.794884][ T5886] usb 6-1: string descriptor 0 read error: -71 [ 1792.844216][ T5886] usb 6-1: USB disconnect, device number 119 [ 1792.929403][ T5906] usb 3-1: USB disconnect, device number 48 [ 1794.140443][T20754] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1794.201780][T21884] delete_channel: no stack [ 1794.220302][ T5906] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1794.338603][T20754] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1794.350004][T20754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.399988][T20754] usb 1-1: Product: syz [ 1794.477339][T20754] usb 1-1: Manufacturer: syz [ 1794.480459][ T5906] usb 6-1: device descriptor read/64, error -71 [ 1794.500642][T20754] usb 1-1: SerialNumber: syz [ 1794.539233][T20754] usb 1-1: config 0 descriptor?? [ 1794.550545][T14320] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1794.632785][T20754] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1794.716230][T14320] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1794.728793][T14320] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1794.749421][T14320] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1794.769033][ T5906] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1794.829123][T14320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.861960][T21884] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1794.885077][T14320] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1794.900269][ T5893] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1794.950499][ T5906] usb 6-1: device descriptor read/64, error -71 [ 1794.998445][T20322] usb 1-1: USB disconnect, device number 87 [ 1795.061748][T20754] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1795.062360][ T5906] usb usb6-port1: attempt power cycle [ 1795.069603][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 1795.102708][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.113919][ T5893] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1795.133781][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.164777][ T5893] usb 5-1: config 0 descriptor?? [ 1795.234158][T21884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.250578][T20754] usb 3-1: Using ep0 maxpacket: 32 [ 1795.253812][T21884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.269383][T20754] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.280001][T20754] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1795.299479][T20754] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1795.314147][T20754] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1795.330206][T20754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.362930][T20754] usb 3-1: config 0 descriptor?? [ 1795.430786][ T5906] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1795.465063][ T5906] usb 6-1: device descriptor read/8, error -71 [ 1795.685977][T21894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.703045][T21889] fuse: Bad value for 'group_id' [ 1795.712058][T21894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.725935][T20754] corsair-cpro 0003:1B1C:0C10.0050: item fetching failed at offset 2/5 [ 1795.736714][T21889] fuse: Bad value for 'group_id' [ 1795.785677][T20754] corsair-cpro 0003:1B1C:0C10.0050: probe with driver corsair-cpro failed with error -22 [ 1795.812827][ T5893] hid-led 0003:1294:1320.0051: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1795.820237][ T5906] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1795.845133][ T5893] hid-led 0003:1294:1320.0051: Riso Kagaku Webmail Notifier initialized [ 1795.914300][T20322] usb 3-1: USB disconnect, device number 49 [ 1796.001729][ T5906] usb 6-1: device descriptor read/8, error -71 [ 1796.111223][ T5893] usb 5-1: USB disconnect, device number 74 [ 1796.120904][ T5906] usb usb6-port1: unable to enumerate USB device [ 1796.138624][ T59] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1796.152043][ T59] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1796.160955][T21898] fido_id[21898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1796.217988][ T59] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1797.485422][T21911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.564869][T21912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.630263][T21912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.698590][T21911] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1797.766025][ T5893] usb 2-1: USB disconnect, device number 48 [ 1798.232372][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3893'. [ 1798.270505][T21920] vlan0: entered promiscuous mode [ 1798.277028][T21920] batadv0: entered promiscuous mode [ 1798.310431][T14320] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1798.340300][ T5893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1798.512155][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1798.520068][T14320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.534212][T14320] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1798.543744][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.554208][T14320] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1798.563928][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1798.575101][T14320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.583264][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1798.594972][ T5893] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1798.609298][T14320] usb 5-1: config 0 descriptor?? [ 1798.621113][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1798.631068][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.639257][ T5893] usb 2-1: Product: syz [ 1798.643696][ T5893] usb 2-1: Manufacturer: syz [ 1798.648385][ T5893] usb 2-1: SerialNumber: syz [ 1798.910350][T14320] usb 5-1: string descriptor 0 read error: -71 [ 1798.932107][T14320] usb 5-1: USB disconnect, device number 75 [ 1798.990923][ T5893] usb 2-1: USB disconnect, device number 49 [ 1799.190531][T20322] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1799.370930][T20322] usb 6-1: Using ep0 maxpacket: 16 [ 1799.431695][T20322] usb 6-1: config 0 has no interfaces? [ 1799.441610][T20322] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1799.470910][T20322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.478957][T20322] usb 6-1: Product: syz [ 1799.535042][ T5906] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1799.552469][T20322] usb 6-1: Manufacturer: syz [ 1799.561263][T20322] usb 6-1: SerialNumber: syz [ 1799.606292][T20322] usb 6-1: config 0 descriptor?? [ 1799.650239][ T5886] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1799.720899][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 1799.727972][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.744534][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.755506][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1799.765902][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.792194][ T5906] usb 1-1: config 0 descriptor?? [ 1799.800349][ T5882] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1799.813952][ T5906] hub 1-1:0.0: USB hub found [ 1799.823561][ T5886] usb 3-1: config 0 has no interfaces? [ 1799.846846][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1799.857717][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.886653][ T5886] usb 3-1: Product: syz [ 1799.903714][ T5886] usb 3-1: Manufacturer: syz [ 1799.915612][ T5886] usb 3-1: SerialNumber: syz [ 1799.940649][ T5882] usb 2-1: device descriptor read/64, error -71 [ 1799.950359][ T5886] usb 3-1: config 0 descriptor?? [ 1799.965614][T21944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.977353][T21944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.033088][ T5906] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1800.190884][ T5882] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1800.326251][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 1800.332870][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1800.341033][ T5882] usb 2-1: device descriptor read/64, error -71 [ 1800.391233][ T5906] usb 1-1: USB disconnect, device number 88 [ 1800.483354][ T5882] usb usb2-port1: attempt power cycle [ 1800.880374][ T5882] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1800.912361][ T5882] usb 2-1: device descriptor read/8, error -71 [ 1801.326469][ T5882] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1801.351446][ T5882] usb 2-1: device descriptor read/8, error -71 [ 1801.470619][ T5882] usb usb2-port1: unable to enumerate USB device [ 1802.441843][ T5882] usb 6-1: USB disconnect, device number 124 [ 1802.679886][T20322] usb 3-1: USB disconnect, device number 50 [ 1802.780405][ T5893] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1802.922066][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1802.990655][ T5906] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1803.102647][T21982] veth1_to_bond: entered allmulticast mode [ 1803.115277][T21982] veth1_to_bond: left allmulticast mode [ 1803.170277][ T5893] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1803.194626][ T5906] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1803.226759][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1803.253392][ T5906] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1803.257131][T21987] FAULT_INJECTION: forcing a failure. [ 1803.257131][T21987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.267449][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.289937][T21987] CPU: 0 UID: 0 PID: 21987 Comm: syz.4.3915 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1803.289968][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1803.289981][T21987] Call Trace: [ 1803.289989][T21987] [ 1803.289999][T21987] dump_stack_lvl+0x189/0x250 [ 1803.290036][T21987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1803.290063][T21987] ? __pfx__printk+0x10/0x10 [ 1803.290102][T21987] should_fail_ex+0x414/0x560 [ 1803.290129][T21987] _copy_to_user+0x31/0xb0 [ 1803.290158][T21987] simple_read_from_buffer+0xe1/0x170 [ 1803.290188][T21987] proc_fail_nth_read+0x1df/0x250 [ 1803.290218][T21987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1803.290250][T21987] ? rw_verify_area+0x258/0x650 [ 1803.290272][T21987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1803.290310][T21987] vfs_read+0x1fd/0x980 [ 1803.290340][T21987] ? __pfx___mutex_lock+0x10/0x10 [ 1803.290367][T21987] ? __pfx_vfs_read+0x10/0x10 [ 1803.290392][T21987] ? __fget_files+0x2a/0x420 [ 1803.290423][T21987] ? __fget_files+0x3a0/0x420 [ 1803.290447][T21987] ? __fget_files+0x2a/0x420 [ 1803.290483][T21987] ksys_read+0x145/0x250 [ 1803.290504][T21987] ? rcu_is_watching+0x15/0xb0 [ 1803.290525][T21987] ? __pfx_ksys_read+0x10/0x10 [ 1803.290552][T21987] ? do_syscall_64+0xba/0x210 [ 1803.290581][T21987] do_syscall_64+0xf6/0x210 [ 1803.290606][T21987] ? clear_bhb_loop+0x60/0xb0 [ 1803.290630][T21987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.290648][T21987] RIP: 0033:0x7f96b558d37c [ 1803.290667][T21987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1803.290684][T21987] RSP: 002b:00007f96b6402030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1803.290707][T21987] RAX: ffffffffffffffda RBX: 00007f96b57b5fa0 RCX: 00007f96b558d37c [ 1803.290721][T21987] RDX: 000000000000000f RSI: 00007f96b64020a0 RDI: 0000000000000006 [ 1803.290733][T21987] RBP: 00007f96b6402090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.290744][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.290756][T21987] R13: 0000000000000000 R14: 00007f96b57b5fa0 R15: 00007f96b58dfa28 [ 1803.290789][T21987] [ 1803.352268][ T5906] usb 2-1: config 0 descriptor?? [ 1803.355681][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1803.533970][ T5906] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1803.650870][ T5893] usb usb1-port1: attempt power cycle [ 1803.754296][ T5906] usb 2-1: USB disconnect, device number 54 [ 1804.046433][ T5893] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1804.097084][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1804.240892][ T5906] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1804.340289][ T5893] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1804.360953][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1804.460433][ T5906] usb 6-1: device descriptor read/64, error -71 [ 1804.580858][ T5893] usb usb1-port1: unable to enumerate USB device [ 1804.730904][ T5906] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1804.893212][ T5906] usb 6-1: device descriptor read/64, error -71 [ 1805.000702][ T5906] usb usb6-port1: attempt power cycle [ 1805.140327][T20322] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1805.150293][ T5893] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1805.304117][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.310636][T20322] usb 5-1: Using ep0 maxpacket: 16 [ 1805.314572][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1805.322939][T20322] usb 5-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1805.329216][ T5893] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1805.342770][ T5906] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1805.351114][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.362884][T20322] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1805.373843][ T5893] usb 2-1: config 0 descriptor?? [ 1805.382667][T20322] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.40 [ 1805.398053][T20322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.410572][ T5906] usb 6-1: device descriptor read/8, error -71 [ 1805.421961][T20322] usb 5-1: Product: 줺豬്팳਑炽ꀯ恥뉏Ἱ⸄鮋婼蟝폧쀥첯崙䡪朶耷乡縍ᮛ啮ဲ럌좛㹽䏗盟去텀篓쉠톑耦䇝蕦ḋ铛뺩坲쿅强≄蛗쏤ᱣ [ 1805.441040][T20322] usb 5-1: SerialNumber: ࠓ [ 1805.661164][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1805.681419][ T5906] usb 6-1: device descriptor read/8, error -71 [ 1805.760600][T20322] usbhid 5-1:1.0: can't add hid device: -71 [ 1805.766910][T20322] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1805.787708][T20322] usb 5-1: USB disconnect, device number 76 [ 1805.795011][T22008] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1805.881315][ T5906] usb usb6-port1: unable to enumerate USB device [ 1805.972339][T22008] 1: renamed from 70 (while UP) [ 1805.998279][T22008] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 1806.030015][ T5893] Bluetooth: Can't get state to change to load configuration err [ 1806.080415][ T5893] Bluetooth: Loading sysconfig file failed [ 1806.089017][ T5893] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 1806.105327][ T5893] usb 2-1: USB disconnect, device number 55 [ 1806.392095][T22014] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3923'. [ 1806.480339][T20322] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1806.652804][T20322] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1806.661657][T20322] usb 3-1: config 0 has no interface number 0 [ 1806.667772][T20322] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.695297][T20322] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1806.723191][T20322] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1806.869268][T20322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.921459][T20322] usb 3-1: config 0 descriptor?? [ 1807.055637][T14320] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1807.220226][T14320] usb 2-1: Using ep0 maxpacket: 16 [ 1807.254893][T14320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.338125][T14320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.408069][T14320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1807.415488][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.442685][T14320] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1807.472925][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.554069][T14320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.560153][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.570026][T22018] loop6: detected capacity change from 0 to 7 [ 1807.590345][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.619775][T22018] Dev loop6: unable to read RDB block 7 [ 1807.619826][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.632603][T14320] usb 2-1: config 0 descriptor?? [ 1807.640448][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1807.648482][T22018] loop6: unable to read partition table [ 1807.666173][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.671557][T22018] loop6: partition table beyond EOD, truncated [ 1807.701006][T20322] logitech-djreceiver 0003:046D:C71B.0052: unknown main item tag 0x0 [ 1807.741241][T20322] logitech-djreceiver 0003:046D:C71B.0052: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32 [ 1807.780868][T22018] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1807.852745][ T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1807.900361][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1807.957242][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1808.018479][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.082515][T14320] usbhid 2-1:0.0: can't add hid device: -71 [ 1808.096167][T14320] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1808.114633][ T9] usb 6-1: config 0 descriptor?? [ 1808.154861][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1808.170493][T14320] usb 2-1: USB disconnect, device number 56 [ 1808.535768][T20322] usb 3-1: USB disconnect, device number 51 [ 1809.378333][T14320] usb 6-1: USB disconnect, device number 3 [ 1809.800267][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1809.955308][ T9] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1809.990336][ T9] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1810.009576][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 1810.026392][ T9] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1810.041706][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1810.056158][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.160558][ T5893] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1810.321994][T22050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.348323][T22050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.366679][ T5893] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 1810.375612][ T5893] usb 5-1: config 0 has no interface number 0 [ 1810.384808][ T5893] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.423782][T22050] netlink: 'syz.2.3934': attribute type 4 has an invalid length. [ 1810.432060][T22050] netlink: 'syz.2.3934': attribute type 2 has an invalid length. [ 1810.447128][ T5893] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.467030][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1810.477271][T20322] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1810.496566][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.522332][ T5893] usb 5-1: config 0 descriptor?? [ 1810.630485][ T5906] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1810.652391][T20322] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.669672][T20322] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1810.687258][T22050] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1810.689586][T20322] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1810.714001][T22050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1810.761177][T22050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.776329][T22050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.784881][T20322] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1810.798704][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1810.809298][T20322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.822326][ T9] ath6kl: Failed to read usb control message: -71 [ 1810.829119][ T5906] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1810.832866][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 1810.847635][ T9] ath6kl: Unable to recv target info: -71 [ 1810.871196][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.876190][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1810.921541][ T9] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1810.934202][T20322] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1810.963688][ T5906] usb 2-1: config 0 descriptor?? [ 1810.967804][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1810.982801][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1810.997267][ T9] usb 3-1: USB disconnect, device number 52 [ 1811.015835][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1811.015861][T20322] usb 1-1: invalid MIDI out EP 0 [ 1811.030550][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1811.069982][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1811.085709][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1811.094982][ T5893] logitech-djreceiver 0003:046D:C71B.0053: unknown main item tag 0x0 [ 1811.138199][ T5906] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1811.142202][T22060] loop6: detected capacity change from 0 to 7 [ 1811.151966][ T5906] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1811.173144][T22060] Dev loop6: unable to read RDB block 7 [ 1811.178797][T22060] loop6: unable to read partition table [ 1811.220660][ T5893] logitech-djreceiver 0003:046D:C71B.0053: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 1811.267092][T22060] loop6: partition table beyond EOD, truncated [ 1811.348051][T22071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.358461][T22071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.373541][T22060] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1811.458391][T10627] udevd[10627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1811.497418][T20322] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1811.537166][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1811.586385][T20322] usb 1-1: USB disconnect, device number 93 [ 1811.702912][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1811.911922][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.930221][ T5906] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1811.939854][ T5906] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1811.950021][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.008393][ T5906] usb 6-1: config 0 descriptor?? [ 1812.204878][ T9] usb 5-1: USB disconnect, device number 77 [ 1812.428726][T22077] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1812.440354][T22077] 0: renamed from 71 (while UP) [ 1812.454914][T22077] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 1812.560336][ T5886] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1812.618455][ T5906] Bluetooth: Can't get state to change to load configuration err [ 1812.628486][ T5906] Bluetooth: Loading sysconfig file failed [ 1812.738139][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.765688][ T5906] ath3k 6-1:0.0: probe with driver ath3k failed with error -16 [ 1812.786113][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1812.825270][ T5906] usb 6-1: USB disconnect, device number 4 [ 1812.926397][ T5886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1813.019039][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.037943][ T5886] usb 1-1: Product: syz [ 1813.044133][ T5886] usb 1-1: Manufacturer: syz [ 1813.051069][ T5886] usb 1-1: SerialNumber: syz [ 1813.200653][T14320] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1813.273703][T22068] loop2: detected capacity change from 0 to 7 [ 1813.281426][T22068] Dev loop2: unable to read RDB block 7 [ 1813.330990][T22068] loop2: AHDI p1 p2 p3 [ 1813.340435][T22068] loop2: partition table partially beyond EOD, truncated [ 1813.360554][T14320] usb 5-1: Using ep0 maxpacket: 8 [ 1813.394164][T22068] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1813.405243][ T9] usb 2-1: USB disconnect, device number 57 [ 1813.422676][T14320] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1813.448197][T22068] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1813.488094][ T5886] usb 1-1: 0:2 : does not exist [ 1813.495035][T14320] usb 5-1: config 179 has no interface number 0 [ 1813.526233][ T5886] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1813.548823][T14320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1813.635761][ T5886] usb 1-1: USB disconnect, device number 94 [ 1813.660429][T14320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1813.738521][T14320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 1813.780828][T14320] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 1813.827670][T14320] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1813.855775][T10627] udevd[10627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1813.882803][T14320] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1813.903438][T14320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.934206][T22092] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1813.970358][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1814.182453][ T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1814.200410][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1814.220393][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1814.231305][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1814.275301][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.296489][ T9] usb 6-1: config 0 descriptor?? [ 1814.306448][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1814.330636][ T5889] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1814.384134][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input146 [ 1814.431058][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1814.468410][ T5906] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1814.502116][ T5906] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1814.522954][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1814.557911][ T9] usb 6-1: USB disconnect, device number 5 [ 1814.572707][ T5889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1814.587523][ T5906] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1814.621367][ T5889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1814.706163][T22105] blktrace: Concurrent blktraces are not allowed on sg0 [ 1814.824977][T22092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.838014][T22092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.879809][ T5889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1814.894111][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1814.918027][ T5889] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1814.935885][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.947048][ T5906] usb 2-1: Product: syz [ 1814.956617][ T5889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1814.967086][ T5906] usb 2-1: Manufacturer: syz [ 1814.975308][ T5906] usb 2-1: SerialNumber: syz [ 1814.980064][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.200897][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1815.224204][ T5889] usb 3-1: usb_control_msg returned -32 [ 1815.241319][ T5889] usbtmc 3-1:16.0: can't read capabilities [ 1815.380494][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1815.397968][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1815.444894][ T9] usb 6-1: can't read configurations, error -61 [ 1815.551094][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1815.561717][ T5906] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1815.590408][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1815.606801][ T5906] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1815.631051][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1815.652511][T22109] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1815.750404][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1815.766487][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1815.777232][ T9] usb 6-1: can't read configurations, error -61 [ 1815.788770][ T9] usb usb6-port1: attempt power cycle [ 1815.854243][T22110] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1815.871532][ T5906] usb 2-1: USB disconnect, device number 58 [ 1816.166937][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1816.233778][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1816.263958][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1816.277685][ T9] usb 6-1: can't read configurations, error -61 [ 1816.411259][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1816.493766][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1816.508047][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1816.535625][ T9] usb 6-1: can't read configurations, error -61 [ 1816.548640][ T9] usb usb6-port1: unable to enumerate USB device [ 1816.835970][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1816.835971][ T5906] usb 5-1: USB disconnect, device number 78 [ 1816.836100][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1816.893155][ T5906] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1817.410361][ T5906] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1817.453009][ T978] usb 3-1: USB disconnect, device number 53 [ 1817.537506][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1817.611932][ T5893] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1817.625327][ T5906] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1817.670590][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.702444][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1817.702510][ T5906] usb 5-1: config 0 descriptor?? [ 1817.717416][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.748020][ T9] usb 2-1: config 0 descriptor?? [ 1817.756790][ T5906] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1817.854525][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 1817.878499][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1817.890014][ T5893] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1817.905837][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.944317][ T5893] usb 1-1: config 0 descriptor?? [ 1817.953195][ T5893] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1817.969918][ T5893] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1818.178597][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1818.229130][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1818.245836][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1818.338970][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1818.682428][T22118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.698207][T22125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.698645][T22118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.746976][T22125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.770006][T22118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.784201][T22118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.798398][T22125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.856596][ T5906] gspca_sunplus: reg_w_riv err -71 [ 1818.862865][ T5906] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1818.894026][ T5906] usb 5-1: USB disconnect, device number 79 [ 1818.939032][T22125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.990944][ T9] gspca_sunplus: reg_w_riv err -110 [ 1818.996384][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1819.095198][ T9] usb 2-1: USB disconnect, device number 59 [ 1819.530726][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1819.715254][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.768117][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1819.788747][ T5906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1819.798948][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.823279][ T5906] usb 6-1: config 0 descriptor?? [ 1819.868799][ T5906] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1820.000878][ T5889] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1820.060281][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1820.180384][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 1820.193122][ T5889] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1820.204429][ T5889] usb 5-1: config 179 has no interface number 0 [ 1820.211346][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1820.247771][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1820.278803][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 1820.292612][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 1820.311298][ T5889] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1820.327850][ T5889] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1820.342180][ T5882] usb 6-1: USB disconnect, device number 10 [ 1820.368679][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.382488][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.399987][T22144] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1820.407398][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1820.490500][ T5886] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1820.514135][ T9] usb 2-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 1820.575789][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.630288][ T5886] usb 3-1: device descriptor read/64, error -71 [ 1820.647535][ T9] usb 2-1: Product: syz [ 1820.659151][ T5882] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input147 [ 1820.680241][ T9] usb 2-1: Manufacturer: syz [ 1820.708180][ T9] usb 2-1: SerialNumber: syz [ 1820.822129][ T9] cdc_ncm 2-1:1.0: skipping garbage [ 1820.866612][T22144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.898571][ T978] usb 1-1: USB disconnect, device number 95 [ 1820.904036][ T5886] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1820.929712][T22144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.082654][ T5886] usb 3-1: device descriptor read/64, error -71 [ 1821.201083][ T5886] usb usb3-port1: attempt power cycle [ 1821.551355][ T5886] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1821.559383][T22163] loop6: detected capacity change from 0 to 524287999 [ 1821.631286][ T5886] usb 3-1: device descriptor read/8, error -71 [ 1821.881085][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1821.895257][ T9] cdc_ncm 2-1:1.0: bind() failure [ 1822.012096][ T5886] usb 3-1: device descriptor read/8, error -71 [ 1822.192023][ T5886] usb usb3-port1: unable to enumerate USB device [ 1822.204503][ T9] usb 2-1: USB disconnect, device number 60 [ 1823.109301][ T978] usb 5-1: USB disconnect, device number 80 [ 1823.109349][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1823.124003][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1823.136233][ T978] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1823.480665][ T5882] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1823.561437][ T5886] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1823.662477][ T5882] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1823.672710][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.689493][ T5882] usb 6-1: config 0 descriptor?? [ 1823.698617][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1823.720365][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1823.754338][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.770454][ T5886] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1823.781619][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.802108][ T5886] usb 1-1: config 0 descriptor?? [ 1823.831007][ T978] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1823.980962][T20322] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1824.000473][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 1824.016776][ T978] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1824.036571][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.068249][ T978] usb 5-1: config 0 descriptor?? [ 1824.091162][ T978] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1824.141179][T20322] usb 2-1: Using ep0 maxpacket: 16 [ 1824.158790][T20322] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1824.165852][ T978] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1824.180193][T20322] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1824.210317][T20322] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1824.223048][T22184] fuse: Bad value for 'group_id' [ 1824.228099][T22184] fuse: Bad value for 'group_id' [ 1824.307532][T20322] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.330353][T20322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.338706][T20322] usb 2-1: Product: syz [ 1824.363456][T20322] usb 2-1: Manufacturer: syz [ 1824.368244][T20322] usb 2-1: SerialNumber: syz [ 1824.403100][ T5886] hid-led 0003:1294:1320.0054: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 1824.428564][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 1824.472528][ T5886] hid-led 0003:1294:1320.0054: Riso Kagaku Webmail Notifier initialized [ 1824.507959][T22177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.508587][T22201] binder: 22197:22201 ioctl 4018620d 0 returned -22 [ 1824.540954][T22177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.560441][T22177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.583206][T22177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.592437][T22200] binder: 22197:22200 ioctl c018620c 0 returned -14 [ 1824.717084][ T5886] usb 1-1: USB disconnect, device number 96 [ 1824.731487][ T5882] gspca_sunplus: reg_w_riv err -71 [ 1824.740357][ T5882] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1824.782728][ T5882] usb 6-1: USB disconnect, device number 11 [ 1824.792850][ T59] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1824.826984][ T59] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1824.854611][ T59] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1824.921001][ T978] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1825.008602][T20322] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1825.020338][T20322] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1825.167588][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1825.179408][ T978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1825.201878][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1825.223510][ T978] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1825.233449][ T978] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1825.244429][ T978] usb 3-1: Manufacturer: syz [ 1825.247207][T20322] usb 2-1: USB disconnect, device number 61 [ 1825.284076][ T978] usb 3-1: config 0 descriptor?? [ 1825.402929][ T978] smsusb:smsusb_probe: board id=9, interface number 0 [ 1825.438655][T22207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3980'. [ 1825.462135][ T978] smsusb:siano_media_device_register: media controller created [ 1825.545268][ T978] ------------[ cut here ]------------ [ 1825.550985][ T978] usb 3-1: BOGUS urb xfer, pipe 3 != type 1 [ 1825.573213][ T978] WARNING: CPU: 0 PID: 978 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc37/0x1870 [ 1825.584066][ T978] Modules linked in: [ 1825.588476][ T978] CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1825.601264][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1825.612039][ T978] Workqueue: usb_hub_wq hub_event [ 1825.617136][ T978] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 1825.623116][ T978] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 60 8a 12 8c 4c 89 f6 4c 89 fa e8 ba ea 6e fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 26 bd 8e e8 90 [ 1825.642974][ T978] RSP: 0018:ffffc9000388eb70 EFLAGS: 00010246 [ 1825.649055][ T978] RAX: 1e1241e346b5e300 RBX: ffff888063d8c700 RCX: 0000000000100000 [ 1825.657117][ T978] RDX: ffffc90019282000 RSI: 000000000002a0ba RDI: 000000000002a0bb [ 1825.665214][ T978] RBP: 0000000000000000 R08: ffff8880b8823e93 R09: 1ffff110171047d2 [ 1825.673345][ T978] R10: dffffc0000000000 R11: ffffed10171047d3 R12: ffffffff8c12884c [ 1825.681475][ T978] R13: dffffc0000000000 R14: ffffffff8c12f340 R15: ffff888031a545c0 [ 1825.689491][ T978] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 1825.698779][ T978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1825.705477][ T978] CR2: 000000110c423dd0 CR3: 0000000033b24000 CR4: 00000000003526f0 [ 1825.713757][ T978] Call Trace: [ 1825.717177][ T978] [ 1825.720320][ T978] smsusb_start_streaming+0x22/0x340 [ 1825.725790][ T978] smsusb_probe+0x18f6/0x2060 [ 1825.730659][ T978] ? __pfx_smsusb_probe+0x10/0x10 [ 1825.735733][ T978] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1825.741437][ T978] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1825.747485][ T978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1825.753985][ T978] ? __pm_runtime_set_status+0x785/0xa50 [ 1825.759646][ T978] usb_probe_interface+0x641/0xbc0 [ 1825.765025][ T978] ? __pfx_usb_probe_interface+0x10/0x10 [ 1825.770862][ T978] really_probe+0x26d/0x9a0 [ 1825.775385][ T978] __driver_probe_device+0x18c/0x2f0 [ 1825.780893][ T978] driver_probe_device+0x4f/0x430 [ 1825.786042][ T978] __device_attach_driver+0x2ce/0x530 [ 1825.791500][ T978] bus_for_each_drv+0x24e/0x2e0 [ 1825.796361][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1825.802589][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1825.808007][ T978] __device_attach+0x2b8/0x400 [ 1825.812875][ T978] ? __pfx___device_attach+0x10/0x10 [ 1825.818218][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1825.823569][ T978] bus_probe_device+0x185/0x260 [ 1825.828540][ T978] device_add+0x7b6/0xb50 [ 1825.833029][ T978] usb_set_configuration+0x1a87/0x20e0 [ 1825.838723][ T978] usb_generic_driver_probe+0x8d/0x150 [ 1825.844445][ T978] usb_probe_device+0x1c1/0x390 [ 1825.849343][ T978] ? __pfx_usb_probe_device+0x10/0x10 [ 1825.854925][ T978] really_probe+0x26d/0x9a0 [ 1825.859491][ T978] __driver_probe_device+0x18c/0x2f0 [ 1825.864924][ T978] driver_probe_device+0x4f/0x430 [ 1825.869986][ T978] __device_attach_driver+0x2ce/0x530 [ 1825.875445][ T978] bus_for_each_drv+0x24e/0x2e0 [ 1825.880356][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1825.886280][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1825.891683][ T978] __device_attach+0x2b8/0x400 [ 1825.896452][ T978] ? __pfx___device_attach+0x10/0x10 [ 1825.901785][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1825.907142][ T978] bus_probe_device+0x185/0x260 [ 1825.912068][ T978] device_add+0x7b6/0xb50 [ 1825.916415][ T978] usb_new_device+0xa39/0x16c0 [ 1825.921258][ T978] ? __pfx_usb_new_device+0x10/0x10 [ 1825.926513][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.931808][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1825.937043][ T978] hub_event+0x2941/0x4a00 [ 1825.941751][ T978] ? __pfx_hub_event+0x10/0x10 [ 1825.946829][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1825.952661][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.957895][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1825.963747][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1825.969562][ T978] process_scheduled_works+0xadb/0x17a0 [ 1825.975226][ T978] ? __pfx_process_scheduled_works+0x10/0x10 [ 1825.981371][ T978] worker_thread+0x8a0/0xda0 [ 1825.986016][ T978] kthread+0x70e/0x8a0 [ 1825.990336][ T978] ? __pfx_worker_thread+0x10/0x10 [ 1825.995478][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.000241][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.004980][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1826.010333][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.015547][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.020252][ T978] ret_from_fork+0x4b/0x80 [ 1826.024678][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.029289][ T978] ret_from_fork_asm+0x1a/0x30 [ 1826.034184][ T978] [ 1826.037245][ T978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1826.044550][ T978] CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 1826.056585][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1826.066768][ T978] Workqueue: usb_hub_wq hub_event [ 1826.071838][ T978] Call Trace: [ 1826.075160][ T978] [ 1826.078106][ T978] dump_stack_lvl+0x99/0x250 [ 1826.082724][ T978] ? __asan_memcpy+0x40/0x70 [ 1826.087424][ T978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1826.092647][ T978] ? __pfx__printk+0x10/0x10 [ 1826.097287][ T978] panic+0x2db/0x790 [ 1826.101221][ T978] ? __pfx_panic+0x10/0x10 [ 1826.105664][ T978] ? ret_from_fork_asm+0x1a/0x30 [ 1826.110616][ T978] __warn+0x31b/0x4b0 [ 1826.114612][ T978] ? usb_submit_urb+0xc37/0x1870 [ 1826.119574][ T978] ? usb_submit_urb+0xc37/0x1870 [ 1826.124525][ T978] report_bug+0x2be/0x4f0 [ 1826.128868][ T978] ? usb_submit_urb+0xc37/0x1870 [ 1826.133820][ T978] ? usb_submit_urb+0xc37/0x1870 [ 1826.138773][ T978] ? usb_submit_urb+0xc39/0x1870 [ 1826.143744][ T978] handle_bug+0x84/0x160 [ 1826.148002][ T978] exc_invalid_op+0x1a/0x50 [ 1826.152604][ T978] asm_exc_invalid_op+0x1a/0x20 [ 1826.157460][ T978] RIP: 0010:usb_submit_urb+0xc37/0x1870 [ 1826.163122][ T978] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 73 08 00 00 45 8b 04 24 48 c7 c7 60 8a 12 8c 4c 89 f6 4c 89 fa e8 ba ea 6e fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 10 26 bd 8e e8 90 [ 1826.182782][ T978] RSP: 0018:ffffc9000388eb70 EFLAGS: 00010246 [ 1826.188959][ T978] RAX: 1e1241e346b5e300 RBX: ffff888063d8c700 RCX: 0000000000100000 [ 1826.196959][ T978] RDX: ffffc90019282000 RSI: 000000000002a0ba RDI: 000000000002a0bb [ 1826.205115][ T978] RBP: 0000000000000000 R08: ffff8880b8823e93 R09: 1ffff110171047d2 [ 1826.213099][ T978] R10: dffffc0000000000 R11: ffffed10171047d3 R12: ffffffff8c12884c [ 1826.221105][ T978] R13: dffffc0000000000 R14: ffffffff8c12f340 R15: ffff888031a545c0 [ 1826.229383][ T978] smsusb_start_streaming+0x22/0x340 [ 1826.234693][ T978] smsusb_probe+0x18f6/0x2060 [ 1826.239397][ T978] ? __pfx_smsusb_probe+0x10/0x10 [ 1826.244435][ T978] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1826.249997][ T978] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1826.255899][ T978] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1826.262421][ T978] ? __pm_runtime_set_status+0x785/0xa50 [ 1826.268089][ T978] usb_probe_interface+0x641/0xbc0 [ 1826.273222][ T978] ? __pfx_usb_probe_interface+0x10/0x10 [ 1826.278944][ T978] really_probe+0x26d/0x9a0 [ 1826.283466][ T978] __driver_probe_device+0x18c/0x2f0 [ 1826.288764][ T978] driver_probe_device+0x4f/0x430 [ 1826.293893][ T978] __device_attach_driver+0x2ce/0x530 [ 1826.299312][ T978] bus_for_each_drv+0x24e/0x2e0 [ 1826.304174][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1826.310345][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1826.315739][ T978] __device_attach+0x2b8/0x400 [ 1826.320515][ T978] ? __pfx___device_attach+0x10/0x10 [ 1826.325826][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1826.331039][ T978] bus_probe_device+0x185/0x260 [ 1826.335907][ T978] device_add+0x7b6/0xb50 [ 1826.340262][ T978] usb_set_configuration+0x1a87/0x20e0 [ 1826.346213][ T978] usb_generic_driver_probe+0x8d/0x150 [ 1826.351786][ T978] usb_probe_device+0x1c1/0x390 [ 1826.356650][ T978] ? __pfx_usb_probe_device+0x10/0x10 [ 1826.362036][ T978] really_probe+0x26d/0x9a0 [ 1826.366564][ T978] __driver_probe_device+0x18c/0x2f0 [ 1826.371866][ T978] driver_probe_device+0x4f/0x430 [ 1826.376994][ T978] __device_attach_driver+0x2ce/0x530 [ 1826.382383][ T978] bus_for_each_drv+0x24e/0x2e0 [ 1826.387244][ T978] ? __pfx___device_attach_driver+0x10/0x10 [ 1826.393169][ T978] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1826.398566][ T978] __device_attach+0x2b8/0x400 [ 1826.403353][ T978] ? __pfx___device_attach+0x10/0x10 [ 1826.408659][ T978] ? do_raw_spin_unlock+0x122/0x240 [ 1826.414143][ T978] bus_probe_device+0x185/0x260 [ 1826.419004][ T978] device_add+0x7b6/0xb50 [ 1826.423445][ T978] usb_new_device+0xa39/0x16c0 [ 1826.428232][ T978] ? __pfx_usb_new_device+0x10/0x10 [ 1826.433447][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1826.438658][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.443888][ T978] hub_event+0x2941/0x4a00 [ 1826.448372][ T978] ? __pfx_hub_event+0x10/0x10 [ 1826.453160][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1826.458908][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1826.464158][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1826.469952][ T978] ? process_scheduled_works+0x9ec/0x17a0 [ 1826.475773][ T978] process_scheduled_works+0xadb/0x17a0 [ 1826.481444][ T978] ? __pfx_process_scheduled_works+0x10/0x10 [ 1826.487453][ T978] worker_thread+0x8a0/0xda0 [ 1826.492164][ T978] kthread+0x70e/0x8a0 [ 1826.496344][ T978] ? __pfx_worker_thread+0x10/0x10 [ 1826.501554][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.506158][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.510759][ T978] ? _raw_spin_unlock_irq+0x23/0x50 [ 1826.516022][ T978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.521236][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.525924][ T978] ret_from_fork+0x4b/0x80 [ 1826.530352][ T978] ? __pfx_kthread+0x10/0x10 [ 1826.535043][ T978] ret_from_fork_asm+0x1a/0x30 [ 1826.539837][ T978] [ 1826.543196][ T978] Kernel Offset: disabled [ 1826.547528][ T978] Rebooting in 86400 seconds..