last executing test programs: 12.328046046s ago: executing program 4 (id=1220): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x5, &(0x7f0000001540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0xffffffff}, 0x8}, 0x94) (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x134) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x84000100) (async) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007617072696f00ffffff7f0000000000"], 0x14) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a1b", 0x2}, {0x0}], 0x2}) (async) io_uring_enter(r5, 0x4d10, 0x2, 0x22, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f0000000100)="d2ffb49ede31518d65a476b76e4a4e0b8ddb47c327ab5b7233ac3527e16db41df04709094056582b59b23832da481c0ebee16aa6a8ca9d1aa565ff47dafa0c71"}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_MAP(r8, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac00000012000105b43000"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000040002005c0001000058"], 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r9 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r9) syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 9.26389631s ago: executing program 4 (id=1230): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000004c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xb) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x1, 0x0, 0x1}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x9226}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010100, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x10, 0x0, 0x1, {[@eol, @timestamp={0x8, 0xa, 0x1, 0x80000}, @exp_smc={0xfe, 0x6}]}}}}}, 0x4a) 9.171732849s ago: executing program 4 (id=1231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) socket(0x2d, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0xfe0e}], 0x1) ioctl(0xffffffffffffffff, 0x8b23, &(0x7f0000000040)) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x4, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5de8, 0x447}, &(0x7f0000000240)=0x8, &(0x7f0000000140)=0xffff, 0x2a4, 0x8000000000000001, 0x9, 0x7, 0x10, 0x9}}], 0xb0, 0x10}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 6.290175909s ago: executing program 3 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x36) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = io_uring_setup(0x1939, &(0x7f0000000480)={0x0, 0xe739, 0x4000, 0x8000002, 0x1d4}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 5.57139444s ago: executing program 2 (id=1252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf90, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e2, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfc6) 5.411756933s ago: executing program 2 (id=1254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000280)={0xd4, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = dup(r2) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x0) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000180)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x1405, 0x800, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x81}, {r0, 0x200}, {r2, 0xa}, {r3, 0x200}], 0x4, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x4]}, 0x8) request_key(&(0x7f0000000140)='asymmetric\x00', 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.381116645s ago: executing program 3 (id=1255): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000004c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xb) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x1, 0x0, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x9226}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010100, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x10, 0x0, 0x1, {[@eol, @timestamp={0x8, 0xa, 0x1, 0x80000}, @exp_smc={0xfe, 0x6}]}}}}}, 0x4a) 5.200009582s ago: executing program 3 (id=1256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x20000045) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000091210001e46fd07fe4c4432cf1ae7ca98518985c417b742dc3fddbdf2520aa707d7d28b70bc93afbabff780eaeda7294525cb7ba446b11bf5f0d2b0a1787fae128318b728039d2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500160000000000"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000004000000000000000f00000018110000", @ANYRES32, @ANYRES64=0x0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="3857a42e9f0ccd550aaec2ea8782e26a2a9f"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @private1, 0x7}}, 0x80) syz_emit_ethernet(0x32, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x440402, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2b, 0x1, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/register\x00', 0x0}, 0x30) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x0, 0x0, 0x0, 0x7400}, 0x4000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='8\x00\x00\x00!\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="1486cc172be8b0d00491a1834e1b6a0e4366d1e98cd21a690e75d11f4eb2a604ac7b2d05437dce916407a816ff4d5418e5a77e", @ANYRES32=r7, @ANYRES64=r6], 0x20) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r0, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3a9288a1, 0x20}, &(0x7f0000000040)=0xc) 5.165279751s ago: executing program 2 (id=1257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000600)=@x86={0xfe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8, 0x8b, 0x4, 0xf, 0x5, 0x0, 0x0, 0x9, 0x2b, 0x0, 0x8, 0x2, 0x45, '\x00', 0x4, 0xf}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) 5.038211532s ago: executing program 4 (id=1258): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) unshare(0x20020000) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="314be1c97b6591ff7cfa77f188ef9e99f0eac2792b8b4676b3b28b6613e9837e8aea81e4600bfbaa366b497c5a66b05ff6d0b0c66a367e170012373db101ff88fc8b7d211c059e77c0e0b819b06d5e20fb4e8ad6b6373fb9af", 0x59}, {&(0x7f0000000380)="be44a90b0ea89b88403eca6e6d262d01ce5bf011c5d6469e820f1d69d38278f99e23cfb9fb0e11a6184166032296709b0b347a8d081ee7abb9916a47260cabca19904be65264583885433add3cdbd4a34952093d9c4594823af98ec3a958b1cd5d9cc0994eced27f9438964712e54f3ac240793f30878850e1d17f3231840fb7cd122d059dd1f5108e9c53fa51852d38d805429add07f93d3f28b389be545c0442e307f71f54a664840f87", 0xab}], 0x2) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r10 = getpid() syz_pidfd_open(r10, 0x0) r11 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r11, &(0x7f0000caa000/0x3000)=nil, 0x7000) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) futex(&(0x7f000000cffc)=0x20001, 0x800000000006, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) ioctl$TIOCGWINSZ(r12, 0x5413, &(0x7f0000000000)) madvise(&(0x7f0000969000/0x2000)=nil, 0x2000, 0x14) syz_open_procfs(r10, &(0x7f0000000040)='net/vlan/config\x00') remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 4.94343947s ago: executing program 2 (id=1259): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/71, 0x47}], 0x1}, 0x1}], 0x1, 0x40000002, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4.900113015s ago: executing program 2 (id=1260): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="1bfc17"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200700, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) (async) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@remote, @multicast1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001100)=""/203, 0xcb}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0x2}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000140)=""/60, 0x3c}], 0x6, &(0x7f0000000800)=""/73, 0x49}, 0x1}], 0x2, 0x2021, 0x0) 4.575658282s ago: executing program 0 (id=1263): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x220400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x2df0, 0x4000, 0x4, 0x0, 0x0) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) r13 = open(&(0x7f0000000400)='./file1\x00', 0x58900, 0x57) fcntl$setlease(r13, 0x400, 0x1) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r13}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x23, 0x2, 0x4, 0x40}, 0x8) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) 3.858537617s ago: executing program 2 (id=1265): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/129, 0x81}, {0x0}], 0x2) (async) syz_usb_connect(0x5, 0x76c, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xe5, 0x71, 0x1c, 0x20, 0x7c0, 0x1504, 0xb269, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75a, 0x2, 0x9, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0xa, 0x2, 0x7, 0x56, 0xbe, 0x6, 0x5, [@hid_hid={0x9, 0x21, 0x469d, 0xdb, 0x1, {0x22, 0xd7f}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a9fe"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x4, 0x768}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x10a, 0x4, 0x9, 0x5, 0xf9}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xb, 0xc}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0xab, 0x1, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x4, 0x7, 0x28, [@generic={0x90, 0x1, "440de00063d2ab16094447857c22a7479ff8da5354c9dbb276f4cec11f212bd57299849c5c67ff2db69d5ad79642ec8b3429ea44faba96001dbfe61080b3c8e8f6330ab1468c6e9cf5ca834b6292df2608bd1bb109d3c09b78a8ded14a05065fd9fbf7e35dfe794d7f017b81a6ced8b5d10b5ebee5796d9e2dab89f13aefc067f7eb3918060ab5193864cf8193c4"}, @generic={0x18, 0x21, "833b165ed6d1e94bc95e0c79aadd5805177f7e7f4c52"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x3, 0x3, 0x2, [@generic={0xe3, 0x23, "2098451864b892d37f1a79055b47bfad6a113a81efc4cab1c610d8c70878b61a3b5b8a3c8c478ba8c55da3828d444f42c21d9eae1770a3400900a9b180490e5c3a4a67bb3c129132e49f1164e8bc201d90eb8c81a1bf89b3c461d10b7dde3337e29ad4ca91af7b2ec8756487d93d5569780f569b97d7ce4c039d24e494eb5e42d642ccc92bedf02d839d68ce4c6b67d41d8dfd8b024dc00a310e27bcd80fa64075cc74ca9284aaf7d5f50ed1965c51c5fdae809f60cba1b9ec2eff67a7cb9c20fe3d416a0d02c378535925fb57aeac5e0a045ea5c562fa6b5a1d3a73228874b137"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x8, 0x0, [@generic={0x79, 0x4, "47525c4c1bdc9eb83c9fb0c95dac82345f8439cfd2861863bc9bd58951881b5a0e555e086fb4e48cbbf5db82ee01ac44de64b7ed06b79ed770f0539104888ecd559d8cbd24056b870d18bbc06dd653a3556471bdd7ba06f498c2d389d1f6201e1562d806c050d64058ee455488f8037f9f6a2eb3002730"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x8, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x1c, 0x3ff, 0x1, 0xe1, 0x0, [@generic={0x74, 0x10, "e3a98aa5c65b4fec4bbe4eb74c50e9e6347474bf4850e6ef4eef7ea2103e3e310d1cc0766bcd2bf696e351f3d379b89713108b5e37d501a48c7a4638884d52a18dcb1333b01f68672a266164947628b428625c5f58660234150388bd3274daa50a294220079f520d9d773a8d842153b09595"}]}}]}}, {{0x9, 0x4, 0x1f, 0x2, 0x9, 0x64, 0x48, 0x14, 0x2f, [], [{{0x9, 0x5, 0x40, 0x4, 0x8, 0xc, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x8, 0x1, 0x10, [@generic={0x1a, 0x1, "12f411a4a9be6397598bffbd2d28cd4f2d4203d3e2ae2d25"}, @generic={0x77, 0x1, "5e3563ebff8f6936ef787408e6ceb4ef0966ebb8f002f9bdd111614016d0bccb5daa875b8a85e981d76ba308247b8058f1c9f974d0e0aaadf92393b5af5f6265edcbed4ebe9b5be5762dcc3bbc0f6981809ddc52b26ef2f83348462c62a59536550dcb0f7523d797fd85fcd241ee97b5ec9c4d67cf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x6, 0x6, 0x0, [@generic={0xa6, 0x2, "3fbc5b6744106fdc73057199b9e9465887f061c95a6071e0f923df02dceb3e7645b71b1972d13bded171aabf9e1ca06e6d5d88dbe74e3d95b70a77f0b57bfd12e1c0c6b667866540e98453fc25d2d49492f6835c5713f47e1819acaf7c1aaeb6295e148e8b82c6590c51476f5bf0c7e8e5f2c8ca0e7e285ef835ef69e097513dc0c16e9426fc318df6cab7c1f849f03f115a0964bfb53aeb7e5ed1b87bd29cb263f6eab5"}]}}, {{0x9, 0x5, 0xd, 0x13, 0x3ff, 0x11, 0x0, 0x9, [@generic={0xe8, 0xd, "d476494c1077baa191ca2caf0fe07ccb935d113c8899261e8a3e4e6e79e8de94f5ad70be9b0e17af0ec2735a6e86550b46f70ab7575470d3b2d327f7536f77d06fa7b174a9fe130021cea5da91ef956e9322ff618b09293d4fd3ec6d6c447ccf319345d3a6c0c227dad2e248029305296f443509181467ef09823434705c4b6c7214a409738660ffe0d9389b9b6f0391124f609f1d24926bf718a0ccad9e770e071c272d3727701993c6c43fa5b7826a66604fd087aecb1deec07b5acee6a409dd452c0d63cea0b158f9c1c16d3ef386e04ddf8f027b76de69f53d63b318de321f95fc5feedc"}, @generic={0xe9, 0x3, "de7b94e9e78bb26524650c5dbbe3fb79c8e4126f72f61f716468fbda3220dfaa55f77c3221d1a89afca3226835cfb8345bfc2485270ab15879d0cb8461e124294741f9e2795e0d5aaa739585f03f952b96bf8cc794e60a09c262cbe61c6e24b5140c07c5b47d831f21ea981f54a2add3dd2c2380be4dc85adc1b3cd466a0d78c7ae1ef093f05fbd72c745cf60f5b824d639065fba5f3969ad4679d483e909bb56dbb49e51915a22d6fa75867c99965f6d075710b7240a1f910d1e13cd0bce61f6fb3ecd88ed2ecd544118701244d1b8c06bfff1d6bc6c13c2ac92fcf814210356d0949c6c9800a"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3b7, 0x6, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x9, 0x9}, @generic={0x9d, 0x23, "5f20841d04c3b680a021320a3f8233a482f1fcb483d3f422a9dff20a2f17b604788339c54efccb982e15487846cb848a86b0f35e67e8835012c4f43dc0b2b5c4ce6382299e718a34bd46e6ee7866598a42df88b621708f60c8db1313863a37cf507ee2d858aa876fb3fc47066d873bc54092ff1386dc62fa5ac313b62d9075fd425b88fa646497716cfe49cb375fa4ceaa3c0062eea04732ab3592"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x1, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0xad, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x10, 0x40, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xd}, @generic={0x4e, 0x4, "02d68e93ea1238624f2458b3df8ffe08904b0f88f4eba9db2f17bcdbad5c44166f3b7571e773fc01aa606b3d8f4d87ace041a6b6ab655b4856e41ba522ba5ff1e1e31beb948698de26c3f6b1"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x7f, 0x9}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x5, 0x0, 0xff, 0x20, 0x8a}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x60, 0x9, 0x1af}, @ssp_cap={0x10, 0x10, 0xa, 0xe, 0x1, 0xf, 0xff0f, 0x6, [0xc0c0]}]}, 0x3, [{0x33, &(0x7f00000001c0)=@string={0x33, 0x3, "2799ce10fe3eadeb66cc612b39444eca1204239769e2e5db52d307da513ff6add9cba6ff3d8fa50f63e0e209a4dcb3a2ee"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x426}}, {0x21, &(0x7f0000000240)=@string={0x21, 0x3, "69a56747654101884edaf33005bbd839e0ac98abdecc8a37697a0b19a49ca1"}}]}) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f637920ac053f02d8e000000001090212000110000000090400000003d602"], 0x0) (rerun: 32) 3.715737171s ago: executing program 0 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4851}, 0x8080) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async) fcntl$setsig(r3, 0xa, 0x21) (async) fcntl$setlease(r3, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) setrlimit(0xa, &(0x7f0000000040)={0x7d5f, 0x2}) (async) close_range(r3, 0xffffffffffffffff, 0x0) 3.495846911s ago: executing program 0 (id=1269): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x438001, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xaafa, 0x2, 0x4cb8, 0x4, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r6, 0x1778d2006c5c67c5, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x2}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x5e, 0x2, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x68}}, 0x4000010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r8 = gettid() fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x400c, 0x409, r8}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000180}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x24}}, 0x0) r9 = epoll_create1(0x80000) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000680)={0x60000001}) epoll_wait(r9, &(0x7f0000000000)=[{}, {}], 0x2, 0x7fff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x5, 0x7, 0x1, 0x3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x4309c1, 0x19) 3.410324997s ago: executing program 0 (id=1270): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0x7, 0x7}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x2003, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000009}) r3 = socket(0x10, 0x803, 0x0) fcntl$getflags(r3, 0x40a) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002500)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, "1678"}, 0x0, 0x0}) 2.82428396s ago: executing program 0 (id=1271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x25dfdbfe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in=@loopback, 0x2, 0x4, 0x2, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000a00000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.823632203s ago: executing program 0 (id=1272): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r2 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYRES32=0x1, @ANYRES8=r2, @ANYRES32=0x0], 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') lseek(r5, 0x80, 0x1) ioctl$TCSBRKP(r4, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) io_setup(0x7, &(0x7f0000000780)=0x0) io_pgetevents(r7, 0xb, 0x0, 0x0, &(0x7f0000000100), 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe0000b0000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500"/15], 0x3c}, 0x1, 0x11}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd7001fbdbdf25490000000800010031000000313b38bff00ff1f03b67699a0bc14ee7b9e38e76e3516067f564ad8750426b94e02bcb774f841f7a9b6be5fbe91e2c2c77436c96b4"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2000000) 2.499728666s ago: executing program 1 (id=1274): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x40, 0x18, 0x6, "d0f060ced921"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.144059971s ago: executing program 3 (id=1275): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x1, 0x4, 0x3a, 0x1e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}]}}]}}]}}, 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) syz_usb_connect(0x2, 0x61f, &(0x7f00000000c0)={{0x12, 0x1, 0x101, 0xcb, 0x22, 0x8a, 0x40, 0x711, 0x920, 0xb15e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60d, 0x4, 0x0, 0xf, 0x10, 0x9, [{{0x9, 0x4, 0xa7, 0x9, 0xa, 0xc4, 0xdd, 0x7b, 0x81, [@generic={0x65, 0x23, "63701497a42a58a9e37b429b4d711225ee7b123252d81900df7d367f30312fa01392ccdc2b8ca4f2e15685ff901ab1032bb471f6e5777d97ba51e104daa1300c38ad8f7a4bde89baeee44b1dad5be44cd5052cafe665ebdaab2f1ed40c200d07617f39"}, @hid_hid={0x9, 0x21, 0x9e, 0x7, 0x1, {0x22, 0x292}}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0xef, 0x3b}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x2, 0x4, 0x9, [@generic={0x56, 0x23, "736681edd19c5f542004d1729c728a08237767e4ad350122db5eba7d67bbc81e5f02b9424fdba4ba4fd34d53317824a5c3fa5b78a459b1106bf14b72d0e3ef036a957be62cb80b53e075dd2bd61d46ee2d63134a"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x60, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x8, 0xd4, 0xf, [@generic={0x7e, 0x10, "9572454d0865c12fe1335c4c5ec9805c4249b0ed3d30ef004d3a4d7a18ff7859b19d5c09503b8e6db55663832d03cc47e53f1779de40f08eb83e3722e7304b83dbac537d2b55637725db0707cade41e09f310abfd72a16b9944b34eedc070293b080707416533518c292caf01eea872523c89bd132f0ea7eed7583cc"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0xd0, 0x6, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x9, 0x4, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x2, 0xa9, [@generic={0xb7, 0x24, "cc4c4b5f001ac449f4e66b0a5976ffc893e6424b702b061aa665efcbccc1e3b4f9e35ae5ac9019d9c4af9fe7ac3a928231c4c3208f0908012db783fa4931a8fac42f28e57cc7326096ade983bd1e7e4a10f4896fc3b86d25728f1926c2d27b8f145ae2f77634ec3114bf5325783a262d7436366fbd900194407a53c2e927109b11ffaa3606c1ba71469c21039d65a5a030730242875d514fd6e6c5c5e02333914b1fc5a1d85bc0064b91a5112b14c386554f569ca3"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xb, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0x7, 0x9, [@generic={0x1f, 0xf, "0ff5f5e8ab70acaca23dad9e468a8910533b339d60650e403e1c2f4f03"}]}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0x2, 0xf3, 0xbd, 0x58, 0x9, [@hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xdea}}, @hid_hid={0x9, 0x21, 0xfffd, 0x70, 0x1, {0x22, 0x2b2}}], [{{0x9, 0x5, 0x4, 0xc, 0x20, 0x4, 0xf7, 0x1, [@generic={0xee, 0x6, "6b67eed5626248b8a6151f8e601e1ca5d57d6fde6274675ebede3be1ba93533b43d8adf71b50e5c4737611d5caca25d0e44ae4b8aa51423315158f86f8cef61064ffe0e4c84a1a0450809c0d535c84520cb4f491152780b25dba860df8939e7dec04ccc2392757365d40afc1c2c49e1f6a0ffa1fd49bc174e152c8fa0a3d8213ff8a58c8f495140119d68b961981c7a830a51af540e16ba61b8a1eb535cd13cb8b0ba51b2fb6c0c2eba0c6e0a2c935f82275810cdfff7e0e60c0e6e491da04a6eb747b7b24fd5945c290f7a15704b3c0bb49c1ce4c5a15efa800e2ba621b81e50290f8faa18a1542f4c58e22"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfffd}]}}]}}, {{0x9, 0x4, 0x89, 0x8, 0x0, 0xb7, 0x57, 0x39, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0xc9, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffb, 0x2, 0x9}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x100, 0x7, 0x74, "292bc884e511b4"}]}]}}, {{0x9, 0x4, 0x2f, 0x4, 0xe, 0xb9, 0x84, 0x6f, 0x1, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x85, 0x2, "778e95"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x3, 0x2, 0x9, "dc"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0xd669, 0xb, "62d8"}]}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x2, 0xb1, "f3f9c1"}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x67, 0xf2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x78, 0x83}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x63, 0xf6, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x10, 0x91, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}, @generic={0x62, 0x3, "9e09df7767587e8ea333303359783024c64d869edd44372bd30772c10d39d4a18c00a73217e0d3d90143fd4d5e499914b75f0d66032f070e748ebfc2238f37fbca6d51f81014fc935d77ab9330ca971be2383bd2ecb89c75aa6543b0b6aac20e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xf, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x218, 0x9e, 0x3, 0x9}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x8, 0x7f, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x9, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x1, 0xff, [@generic={0xc3, 0x3, "47e4afbd9982ae0b790d90582705d986f992371e837092e864a9bca37560da93d7916754caaa191a9616a1da00f5f63e6ea92acaff947f023b93f7e5229be3bf3fe52b3a6c07b3e99e4c37eff76efff2b2b9b45b710f07bfa19eb74e9099aaea5f7dfaff6ecf20fb2daa620147e729b643b823dd09a1c666c039305c44c9c44e83d00d2b23c99358b3721a2c5aaf957328dc4970fc72ee5b2ba569a9d9763cef5013f6538e4ae2117b383386eb3d4287f03ba1be04325ce8769a1dd62fb0ef3f2d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x3, 0xe, 0xe}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x8, 0x3, 0x7, [@generic={0x28, 0x3, "83574bb7130c7b3f48dbc331d592382e6a70feeb62ba2b47a411cfcb75424e23284aa96ef797"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xf5, 0x6, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x66, 0x6}]}}, {{0x9, 0x5, 0x6, 0x2b, 0x10, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0xfff9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1, 0x1, 0x91}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x92, 0x5, 0x8}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x1f, 0x10, 0x9, 0x20, 0x80}, 0x5, &(0x7f0000000740)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x438}}, {0x6d, &(0x7f00000007c0)=@string={0x6d, 0x3, "2e6c015171c33d66c5a98cd34d7898693de0cc4cdad7d53188b47e84beaad9fabbb419f1939d4dc8e566ee9fc86e3cfd9a062c8883678f6fd9315cd95dd30d99dab28ec61fd756bbcb3f63576c1e5f8c2d2e479561f4df649a612e400dc66635b81fecff900c1773c471c7"}}, {0x9e, &(0x7f0000000840)=@string={0x9e, 0x3, "65f9964c03b3fa99f3ce841b479f3cdcdbdd7f579f17ae85c90950828bbcbb68b8b5ddc24cbc984c87a301cbeb5db92ce53dc03e0ae065be32a5b0ec05e211d337fc12c07405c39bfc0aa8d5a13ebdda6d7c06caf2dcc67d48185a669227c964b937c05ebae396b2a47a42f281b89aacd2a725a9ce9775384d11b9961347ae2a9be5f4fdb1636d70190b1c85d3aa422fc11f3dc0c294d998b36157ba"}}, {0x87, &(0x7f0000000900)=@string={0x87, 0x3, "e99848f6839308dc07f8affb98210660d4fed85d6c38dbd63d311926efd0e52da134514e21facdabd4df5240e51aa9b46aa627584b95d3fa100ca50483d7af9b98a44fc7f3a41a2402aa1bb0ef3006ed725535cc4545a3ebb120e6674ecdbfdc99abcaaaba3a2fd1ca904b72d7a9606e1e5b02aec9292aafe502a0e528571161ff37efed21"}}]}) (async) write$char_usb(r0, &(0x7f0000000040)="b79fd069c4e38daea5bd06421064f87a09c21039bfb6e8c78b2079b38c8156315b9ce3e51dffdbea011c4b01550e42ef96eb8a8dd59ec52860781918361419430691affad7da9804bd9c237bcff9fda5e59b34c1519c28b4785c36fd556cd304b00c524e92fb21b9f6f55118c5c9", 0x6e) 1.995871957s ago: executing program 4 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf90, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e2, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfc6) 1.894527387s ago: executing program 4 (id=1277): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3, 0x3}, 0x63) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b1e2a00090582020002000000dde405a703229cb0fb8491275bce1b4fb661efdaffe0d5643623f67cfa94bdbfc1fa82f14419b8f6387964f5a6c47ab14d5f43c827180b4be7a52d36c871d67fff07a411ce15576d8f7878e85b326a49e207f908c096a39deb10b1b83945c313dbd07eb22c865c440ec9729b5ba7b9a4de0f2eb173d586b3cac958a5646ebc3dbdbb2d069ca28d18e9dd"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNGETFILTER(r5, 0x801054db, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x9, 0x3, 0x9, 0xfffffffffffffff8, 0x10}], &(0x7f0000000080)='GPL\x00', 0xfffffff9, 0xe4, &(0x7f0000000280)=""/228, 0x41100, 0x86eaf670dc52f185, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1ad041, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, r7, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f00000005c0)={0xe, 0x3, [{0x5, 0x0, 0xffff000000000}, {0x0, 0x0, 0x2}, {0x3ff, 0x0, 0x2}, {0x7, 0x0, 0x1}, {0xdde, 0x0, 0x401}, {0x6, 0x0, 0xfffffffffffffffb}, {0x101, 0x0, 0x6d9}, {0x4, 0x0, 0x180}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x2}, {0x9, 0x0, 0xc93e}, {0x5}, {0x51, 0x0, 0xf2ea}, {0x7, 0x0, 0x4}, {0x755, 0x0, 0x3}, {0x0, 0x0, 0x4}]}) 1.792015631s ago: executing program 1 (id=1278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000b00000400000004d09"]) syz_emit_ethernet(0x8e, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES8], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='wchan\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) r5 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x101, 0xe}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) fchdir(r11) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) read$FUSE(r12, &(0x7f0000003a80)={0x2020}, 0x2020) r13 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="920100290212005db85672ba8e91841b02da00000000004d80fe34f02c2fbf5fba8abaaa9606a9ffee75480b701b41d18387b43fb1784279cd93d2556cc8649cf1a8"], 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r13, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x0, 0x5, 0x3, "e16b03"}, 0x0, 0x0}) 1.185402118s ago: executing program 1 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_address={0x3, 0x6, 0x6c, 0x20, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010100}}]}, 0x50}}, 0x810) (async) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="f30f52a6b56566b9800000c00f326635002000000f30660f38819c008026660f1907baa10066b8b3ffffff66ef0fc7690066f426260f52390f01d1b82b018ed8", 0x40}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0fda5c00660f7fa2ff000f01faf20f06b800008ec0b80d008ec80f3566f3a5650f01c366b8dd8300000f23d80f21f86635c00000f00f23f8", 0x38}], 0x1, 0x11, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220f00000054050050182195f57584839e3ce079b5b8d9416cba12e63a021bacc4c1bb767f6b1ea0be33adca8b69068cca82326272b001c5a24f0defcab7ade303c0d7b416034a48ecbc50def62d723d9e68051f66c6e4f7b2f63c5558547708eef5d33c3176369df2d1dd679b78d220665c39b585a8135224b79caa068f161a4934c8f6ba4db3b7f0ec778ecb8545de30eeaedbdde1c77f72397d8e0f270aac537ed2cbc1c4dd988bd9efb97d12"], 0x0}, 0x0) (async, rerun: 64) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x3ff) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r9, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) close_range(r8, r0, 0x0) (async, rerun: 64) r10 = userfaultfd(0x80001) (rerun: 64) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r11, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='fuseblk\x00', 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.010541186s ago: executing program 1 (id=1280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 637.866283ms ago: executing program 3 (id=1281): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x1, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x33}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x2003e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x8000010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400beb7c700"/23, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0003000000"], 0x3c}}, 0x0) 610.483894ms ago: executing program 3 (id=1282): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000066930108205050088fcff01030109021b000100000000090402000191baf20509050b8a"], 0x0) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000440)="7596679a439229b60865c49b04db9d47d91a0ebc3125aa8a267403f53dee6dac5fde1095463bbe11b704c2c99be687be81d9", 0x32) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) clock_adjtime(0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x7c, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x2d, 0xd8, 0xb, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "0d28c4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x200, 0x1, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x7fff, 0x3905, 0x8, 0x1, 0xaee4, 0x20}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x1d, [0x2, 0x6, 0xba3, 0x3ff, 0x9, 0xfff]}, @obex={0x5, 0x24, 0x15, 0x143}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x9, 0xe5}}], {{0x9, 0x5, 0x82, 0x2, 0x28, 0x2, 0x0, 0xac}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x21, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x8, 0x40, 0xc, 0xff, 0x54}, 0x48, &(0x7f0000000300)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "830a01cf5f7ce161340f493c35aabd8d"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5e22b1187c347d732c435b4e196fe2fb"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x0, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "59b7d9fc458c543254a899930c19d367"}]}, 0x1, [{0x77, &(0x7f0000000380)=@string={0x77, 0x3, "ce065ad462d38e8ab728fa6526773ef22b63fe8c32cea07e6731d48f671f10ace157756ff51f74df99c75e51d1a00013b27b0d3940d205e18fa3602dd949da7ef5e160719f36ca0de97ab6cbd47952107273ec32c1396ccc010a80ae86dd23dbd637d68b09cfedbcf02212341a7b5a665277747f0f"}}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf2501000000835b275892021f51ff", @ANYRES32=r5, @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000100)=""/184) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r8, &(0x7f0000002080)=0x68, 0x23b) write$sysctl(r6, &(0x7f00000002c0)='0\x00', 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000004e0001"], 0x18}}, 0x0) syz_emit_vhci(&(0x7f0000000840)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}}, 0x9) 74.390892ms ago: executing program 1 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x25dfdbfe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in=@loopback, 0x2, 0x4, 0x2, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200002000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 0s ago: executing program 1 (id=1284): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @broadcast}, 0x8) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r1, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '+\'\x99\xb8\\:^'}, 0x1d, r2) keyctl$invalidate(0x15, r2) r3 = request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='ecryptfs', 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000240)={r3, 0x12, 0xdb}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha1-neon\x00'}}, &(0x7f0000000300)="feea00a8125d23ec263f295bb3ba021e07c3", &(0x7f0000000340)="ae48950637ad62a8d81a68935f5a2d8476ef76c5bf82a313c9e66b2c584116e44ae7d08f063b7fe2407fafa76d883fdea06bb68d0148a8fbb00ddbb3305a8256e5997d7c4846eeb17b5bd94169630d3d38ad47ca7466b673e9f104b6f0f8013d297b815431655cd137734b5e3a04502739a7d95b0f61f79f1d1f6a26b32a61c01bd9a1eaac030ba2423ac4241f353c3c88d8cdfb3fce5ca45f25465b6d0492f24b976269523f82592e073be85ee1b15285a9993ff82aa15dfa4e3ab0e666231d919415f283eaf7faf2dfd8db696c35d29390872c0b2a1032148b50") r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x37, 0x38, 0x33, 0x36, 0x65, 0x65, 0x51, 0x66, 0x62, 0x30, 0x33, 0x35, 0x65, 0x65, 0x65, 0x39]}, &(0x7f00000004c0)={0x0, "1abe01e5e4c9aa09696561b9b160c8788bb62bb7ae84b11451c0ad10cb0d1db36e149dc698bbab5f05f8b20fd07b8f908388941d61345d0b4c8c41c6865e75ed", 0x2b}, 0x48, r2) keyctl$set_timeout(0xf, r1, 0xca4) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000540)='}[]-[$[):*{\'\xae]}&:\xfb\\\'}\\%\x91$\x00') keyctl$negate(0xd, r3, 0x4, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getchain={0x34, 0x66, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x19}, {0xfff1, 0xffff}, {0xfff2, 0xe}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x48800) r7 = request_key(&(0x7f00000006c0)='.dead\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)=':](#', r3) keyctl$link(0x8, r7, r1) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$TIOCSCTTY(r8, 0x540e, 0x7b) set_mempolicy(0x1, &(0x7f00000007c0)=0xaea, 0x3cd9c63e) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000) keyctl$instantiate(0xc, r1, &(0x7f0000000800)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'keyring\x00'}, 0x20, 0xfffffffffffffffa) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r9, 0x4004) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r8) close_range(r5, r0, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000008c0)={0x4, 0x401}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0x8, 0xd9, 0xa, 0x2}, {0x3, 0xa, 0x4, 0x5}, {0x7, 0x0, 0x9, 0x66e}, {0x2, 0x0, 0x2, 0x7}, {0xb1, 0x0, 0x0, 0x4c}, {0xd, 0x3, 0xc, 0x6}]}) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000980)='\x00', &(0x7f00000009c0)) signalfd4(r10, &(0x7f0000000a00)={[0x2]}, 0x8, 0x80800) kernel console output (not intermixed with test programs): 273196][ T5882] usb 3-1: Manufacturer: syz [ 192.299341][ T5882] usb 3-1: SerialNumber: syz [ 192.308107][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.326572][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 192.342665][ T5912] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 192.362643][ T5912] usb 4-1: Product: syz [ 192.390762][ T5912] usb 4-1: Manufacturer: syz [ 192.402233][ T5912] usb 4-1: SerialNumber: syz [ 192.416597][ T5912] usb 4-1: config 0 descriptor?? [ 192.430208][ T5912] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 192.461016][ T5882] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.692253][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 192.703392][ T43] usb 4-1: USB disconnect, device number 40 [ 192.712241][ T43] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 192.755887][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 192.755902][ T30] audit: type=1326 audit(1755354884.882:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 192.802098][ T5926] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.939710][ T30] audit: type=1326 audit(1755354884.882:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.027067][ T8684] random: crng reseeded on system resumption [ 193.051187][ T30] audit: type=1326 audit(1755354884.882:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.073708][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.094032][ T5882] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 193.102717][ T8722] n (unregistering): Released all slaves [ 193.109754][ T30] audit: type=1326 audit(1755354884.882:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.134916][ T30] audit: type=1326 audit(1755354884.912:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.157171][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.165442][ T30] audit: type=1326 audit(1755354884.912:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.187828][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.195992][ T30] audit: type=1326 audit(1755354884.912:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.220235][ T30] audit: type=1326 audit(1755354884.912:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.244551][ T30] audit: type=1326 audit(1755354884.912:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.262094][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 193.283225][ T30] audit: type=1326 audit(1755354884.912:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.1.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 193.306812][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.313129][ T43] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 193.315250][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 193.327966][ T5882] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 193.338866][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.349010][ T5882] usb 5-1: config 0 descriptor?? [ 193.453234][ T43] usb 4-1: device descriptor read/64, error -71 [ 193.530031][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.557219][ T5882] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 193.565823][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.571265][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.588529][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.693154][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 193.823048][ T43] usb 4-1: device descriptor read/64, error -71 [ 193.933417][ T43] usb usb4-port1: attempt power cycle [ 193.943100][ T5926] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 193.950506][ T5926] ath9k_htc: Failed to initialize the device [ 193.959211][ T5882] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 193.969885][ T5882] asix 5-1:0.0: probe with driver asix failed with error -61 [ 193.991765][ T5926] usb 3-1: ath9k_htc: USB layer deinitialized [ 194.120437][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.130473][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.185432][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.191863][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260094][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.274872][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.283272][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 194.315903][ T8690] delete_channel: no stack [ 194.324626][ T43] usb 4-1: device descriptor read/8, error -71 [ 194.362492][ T8736] input: syz0 as /devices/virtual/input/input25 [ 194.419389][ T8736] input: syz1 as /devices/virtual/input/input24 [ 194.473458][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.493390][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.715826][ T5912] usb 3-1: USB disconnect, device number 49 [ 194.861107][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.874043][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.993064][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 195.013442][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 195.020105][ T43] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.033045][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.051599][ T43] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 195.062378][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.076256][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 195.085695][ T43] usb 4-1: config 0 descriptor?? [ 195.353272][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 195.413672][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.422324][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.435872][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.445926][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.493194][ T24] usb 3-1: device descriptor read/64, error -71 [ 195.515912][ T43] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 195.663685][ T10] usb 5-1: USB disconnect, device number 48 [ 195.733727][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 195.840551][ T8776] netlink: 44 bytes leftover after parsing attributes in process `syz.4.748'. [ 195.851431][ T8776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.863476][ T24] usb 3-1: device descriptor read/64, error -71 [ 195.978163][ T5926] usb 4-1: USB disconnect, device number 44 [ 195.984942][ T24] usb usb3-port1: attempt power cycle [ 196.052504][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.063569][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.265000][ T8786] tipc: Enabled bearer , priority 0 [ 196.272431][ T8786] syzkaller0: entered promiscuous mode [ 196.278337][ T8786] syzkaller0: entered allmulticast mode [ 196.290194][ T8786] tipc: Resetting bearer [ 196.296258][ T8786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.306397][ T8785] tipc: Resetting bearer [ 196.313416][ T8785] tipc: Disabling bearer [ 196.333249][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 196.354153][ T24] usb 3-1: device descriptor read/8, error -71 [ 196.593239][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 196.643248][ T5926] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 196.653583][ T24] usb 3-1: device descriptor read/8, error -71 [ 196.763268][ T24] usb usb3-port1: unable to enumerate USB device [ 196.848205][ T5926] usb 5-1: device descriptor read/64, error -71 [ 197.103223][ T5926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 197.243640][ T5926] usb 5-1: device descriptor read/64, error -71 [ 197.363254][ T5926] usb usb5-port1: attempt power cycle [ 197.567757][ T8814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.723700][ T5926] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 197.763570][ T5926] usb 5-1: device descriptor read/8, error -71 [ 197.827768][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 197.864014][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 197.864030][ T30] audit: type=1326 audit(1755354889.902:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 197.869988][ T8819] syzkaller1: entered promiscuous mode [ 197.870207][ T30] audit: type=1326 audit(1755354889.902:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 197.922700][ T8819] syzkaller1: entered allmulticast mode [ 197.940056][ T30] audit: type=1326 audit(1755354889.902:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 197.966091][ T30] audit: type=1326 audit(1755354889.902:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 197.993241][ T30] audit: type=1326 audit(1755354889.902:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 198.017161][ T30] audit: type=1326 audit(1755354889.902:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 198.094675][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.106404][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1592, setting to 1024 [ 198.117743][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 198.128128][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 198.140983][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.157906][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.166056][ T5926] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 198.174255][ T10] usb 4-1: Product: syz [ 198.182247][ T10] usb 4-1: Manufacturer: syz [ 198.190568][ T10] usb 4-1: SerialNumber: syz [ 198.196779][ T5926] usb 5-1: device descriptor read/8, error -71 [ 198.313320][ T5926] usb usb5-port1: unable to enumerate USB device [ 198.416366][ T8813] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 198.425059][ T8813] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 198.653574][ T5926] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 198.813214][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 198.821020][ T5926] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 198.830628][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.840747][ T5926] usb 3-1: config 0 descriptor?? [ 199.047761][ T5926] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 199.153978][ T10] cdc_ncm 4-1:1.0: bind() failure [ 199.173700][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 199.183239][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 199.200014][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 199.212281][ T10] usb 4-1: USB disconnect, device number 45 [ 199.645344][ T5926] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.669633][ T5926] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 200.053050][ T5926] asix 3-1:0.0: probe with driver asix failed with error -71 [ 200.081790][ T5926] usb 3-1: USB disconnect, device number 54 [ 200.139608][ T8862] binder: 8861:8862 ioctl 40187542 200000000000 returned -22 [ 200.313066][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 200.352126][ T8875] fuse: Bad value for 'fd' [ 200.513286][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 200.532093][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 200.556496][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.577486][ T10] usb 5-1: Product: syz [ 200.587545][ T10] usb 5-1: Manufacturer: syz [ 200.600917][ T8892] tipc: Started in network mode [ 200.600927][ T10] usb 5-1: SerialNumber: syz [ 200.604445][ T10] usb 5-1: config 0 descriptor?? [ 200.620081][ T8892] tipc: Node identity 1eaf3e22ddee, cluster identity 4711 [ 200.631258][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 200.638529][ T8892] tipc: Enabled bearer , priority 0 [ 200.647517][ T8892] syzkaller0: entered promiscuous mode [ 200.653335][ T8892] syzkaller0: entered allmulticast mode [ 200.671624][ T8892] tipc: Resetting bearer [ 200.684760][ T8894] program syz.1.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.690176][ T8892] input: syz1 as /devices/virtual/input/input26 [ 200.696479][ T8894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 200.711237][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 200.766757][ T8891] tipc: Resetting bearer [ 200.776550][ T8891] tipc: Disabling bearer [ 200.831868][ T10] gspca_sn9c2028: read1 error -32 [ 200.846261][ T10] gspca_sn9c2028: read1 error -32 [ 201.158561][ T43] usb 5-1: USB disconnect, device number 53 [ 201.249857][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 201.393709][ T8924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 202.163037][ T5926] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 202.264355][ T8948] netlink: 1092 bytes leftover after parsing attributes in process `syz.3.800'. [ 202.317822][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.327539][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.353116][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 202.359447][ T5926] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.369123][ T5926] usb 5-1: config 179 has no interface number 0 [ 202.371695][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 202.385242][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.398405][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 202.407851][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.420025][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.431680][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 202.452489][ T5926] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.466513][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 202.476934][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 202.508248][ T5926] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.527504][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.547564][ T8936] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.701511][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.804'. [ 202.773376][ T5926] usb 5-1: USB disconnect, device number 54 [ 202.779432][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 202.779472][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.075375][ T5912] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 203.356780][ T8985] IPv6: Can't replace route, no match found [ 203.783185][ T5912] usb 3-1: device descriptor read/64, error -71 [ 203.862214][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.872397][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.894173][ T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 204.023078][ T5912] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 204.044433][ T43] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 204.052695][ T43] usb 5-1: config 0 has no interface number 0 [ 204.061754][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 204.078047][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.091453][ T43] usb 5-1: config 0 descriptor?? [ 204.100391][ T43] gspca_main: spca500-2.14.0 probing 041e:400a [ 204.173050][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 204.180551][ T5912] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 204.198857][ T5912] usb 3-1: config 0 has no interface number 0 [ 204.211414][ T5912] usb 3-1: config 0 interface 184 has no altsetting 0 [ 204.240067][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 204.259298][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.274922][ T5912] usb 3-1: Product: syz [ 204.282047][ T5912] usb 3-1: Manufacturer: syz [ 204.289965][ T5912] usb 3-1: SerialNumber: syz [ 204.298527][ T5912] usb 3-1: config 0 descriptor?? [ 204.327875][ T5912] smsc75xx v1.0.0 [ 204.338401][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 204.362610][ T5912] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 204.445662][ T5912] usb 5-1: USB disconnect, device number 55 [ 204.655664][ T9012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3176969119 (406652047232 ns) > initial count (321993810432 ns). Using initial count to start timer. [ 204.674457][ T9012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 205.213096][ T5926] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 205.343016][ T5926] usb 5-1: device descriptor read/64, error -71 [ 205.417126][ T9026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.593177][ T5926] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 205.733163][ T5926] usb 5-1: device descriptor read/64, error -71 [ 205.853789][ T5926] usb usb5-port1: attempt power cycle [ 206.137999][ T5882] usb 3-1: USB disconnect, device number 57 [ 206.165279][ T9038] PKCS7: Unknown OID: [5] (bad) [ 206.170489][ T9038] PKCS7: Only support pkcs7_signedData type [ 206.204712][ T5926] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 206.281157][ T5926] usb 5-1: device descriptor read/8, error -71 [ 206.523048][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 206.530880][ T5926] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 206.553501][ T5926] usb 5-1: device descriptor read/8, error -71 [ 206.573028][ T5882] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 206.663500][ T5926] usb usb5-port1: unable to enumerate USB device [ 206.683171][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 206.716832][ T9] usb 4-1: config 0 has no interfaces? [ 206.723198][ T5882] usb 3-1: device descriptor read/64, error -71 [ 206.744839][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.756955][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.765944][ T9] usb 4-1: Product: syz [ 206.770309][ T9] usb 4-1: Manufacturer: syz [ 206.775522][ T9] usb 4-1: SerialNumber: syz [ 206.847448][ T9] usb 4-1: config 0 descriptor?? [ 206.983145][ T5882] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 207.135038][ T5882] usb 3-1: device descriptor read/64, error -71 [ 207.243348][ T5882] usb usb3-port1: attempt power cycle [ 207.583740][ T5882] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 207.604637][ T5882] usb 3-1: device descriptor read/8, error -71 [ 207.860251][ T5882] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 207.883929][ T5882] usb 3-1: device descriptor read/8, error -71 [ 208.003355][ T5882] usb usb3-port1: unable to enumerate USB device [ 208.108474][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.119467][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.330097][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.342760][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.502180][ T9090] __nla_validate_parse: 1 callbacks suppressed [ 208.502192][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 208.523137][ T5882] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 208.538893][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.547838][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.693064][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 208.700907][ T5882] usb 5-1: config 0 has an invalid interface number: 184 but max is 11 [ 208.709257][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 208.718380][ T5882] usb 5-1: config 0 has no interface number 0 [ 208.726841][ T5882] usb 5-1: config 0 interface 184 has no altsetting 0 [ 208.736061][ T5882] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.745354][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.755753][ T5882] usb 5-1: Product: syz [ 208.759929][ T5882] usb 5-1: Manufacturer: syz [ 208.764582][ T5882] usb 5-1: SerialNumber: syz [ 208.770243][ T5882] usb 5-1: config 0 descriptor?? [ 208.776962][ T5882] smsc75xx v1.0.0 [ 208.981995][ T5926] usb 4-1: USB disconnect, device number 46 [ 209.024357][ T5882] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 209.035090][ T5882] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 209.053920][ T5882] usb 5-1: USB disconnect, device number 60 [ 209.252629][ T9116] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.844'. [ 209.286860][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.302829][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.503466][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.521560][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.895877][ T5912] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 210.073138][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 210.089944][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.121420][ T5912] usb 3-1: config 0 has no interfaces? [ 210.131557][ T5912] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 210.142509][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.269002][ T5912] usb 3-1: config 0 descriptor?? [ 210.645293][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.682473][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.700007][ T9153] input: syz0 as /devices/virtual/input/input27 [ 210.770026][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 210.840558][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.861299][ T9155] TCP: TCP_TX_DELAY enabled [ 211.426055][ T9165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.534215][ T30] audit: type=1800 audit(1755354904.652:267): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.862" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 212.579729][ T5912] usb 3-1: USB disconnect, device number 62 [ 212.763135][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 213.054930][ T5941] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 213.087316][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 213.234045][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 213.253158][ T5941] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9 [ 213.264215][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.276874][ T5941] usb 5-1: config 0 descriptor?? [ 213.514434][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.526445][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.549720][ T980] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 213.704840][ T980] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 213.715246][ T980] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 16 [ 213.725812][ T980] usb 3-1: config 1 interface 0 has no altsetting 0 [ 213.736699][ T980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.746845][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.764893][ T980] usb 3-1: Product: 䮚礷缈á è좕餸互䪤ꀣ㜲⩒䷹墬㑯쬋צ蚹뎘ë˜ë¢›æ·¥î´…ᣲꇮصᘌ鯼⼘咑ࠕ㕕嫥껷剭ížã¥šé °èˆ¿é«Œá±­å³‘⇚Ⓥ춻㇧à²çš éº©è¤â¯ƒäµžì­¡ã©¬Û£å¯¦á§•çœ…Ṻ淃쳼楶द⇾嫭티鱳ⅴ샬䶔ᔮnjåŸç¢Žïœ¯â—‚扳 [ 213.791380][ T980] usb 3-1: Manufacturer: І [ 213.796472][ T980] usb 3-1: SerialNumber: syz [ 213.806877][ T980] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 213.816140][ T980] usb 3-1: no configuration chosen from 1 choice [ 214.823103][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 215.095205][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.106110][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.125015][ T43] usb 4-1: can't read configurations, error -71 [ 215.150995][ T5941] usb 5-1: USB disconnect, device number 61 [ 215.256324][ T9219] fuse: Unknown parameter '25! ž¯¸82ªó§”x\á(õuÌ.‚мVè' [ 215.350333][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.359644][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.743160][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 215.917148][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.927355][ T43] usb 4-1: config 0 has no interface number 0 [ 216.008010][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 216.043329][ T5912] usb 3-1: USB disconnect, device number 63 [ 216.056699][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.076111][ T43] usb 4-1: Product: syz [ 216.090975][ T43] usb 4-1: Manufacturer: syz [ 216.096816][ T43] usb 4-1: SerialNumber: syz [ 216.102920][ T43] usb 4-1: config 0 descriptor?? [ 216.318961][ T43] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 216.329463][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.340514][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 216.349181][ T43] usb 4-1: media controller created [ 216.386244][ T9245] pim6reg: entered allmulticast mode [ 216.397220][ T9245] pim6reg: left allmulticast mode [ 216.454624][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 216.532386][ T9219] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 216.558495][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.634952][ T9249] batadv0: entered promiscuous mode [ 216.640906][ T9249] batadv0: left promiscuous mode [ 216.806700][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.817606][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.484363][ T5912] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 217.643016][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 217.659616][ T5912] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 217.668143][ T5912] usb 3-1: config 0 has no interface number 0 [ 217.680139][ T5912] usb 3-1: config 0 interface 184 has no altsetting 0 [ 217.695544][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 217.704960][ T43] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 217.720042][ T9275] syz.1.888(9275): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 217.732753][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.748092][ T5912] usb 3-1: Product: syz [ 217.753214][ T5912] usb 3-1: Manufacturer: syz [ 217.757937][ T5912] usb 3-1: SerialNumber: syz [ 217.776013][ T5912] usb 3-1: config 0 descriptor?? [ 217.788922][ T5912] smsc75xx v1.0.0 [ 217.794046][ T5912] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 217.816018][ T5912] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 217.920698][ T9281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.890'. [ 217.959769][ T9281] netlink: 76 bytes leftover after parsing attributes in process `syz.1.890'. [ 218.187417][ T43] usb 4-1: USB disconnect, device number 48 [ 218.491818][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.542269][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.723272][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 218.887534][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 218.898046][ T43] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 218.923615][ T43] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 218.949947][ T43] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 218.981048][ T43] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 219.003029][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.283448][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.292292][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.105176][ T5941] usb 3-1: USB disconnect, device number 64 [ 220.483500][ T5941] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 220.485498][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.503111][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.639115][ T5941] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.659428][ T5941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.676167][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.691903][ T5941] usb 3-1: Product: syz [ 220.700230][ T5941] usb 3-1: Manufacturer: syz [ 220.710826][ T5941] usb 3-1: SerialNumber: syz [ 221.057634][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.902'. [ 221.170231][ T9326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.176692][ T9326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 221.185612][ T9326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.193407][ T9326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.209491][ T9326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.217195][ T9326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.235921][ T9326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.242243][ T9326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.462245][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 221.476076][ T43] usb 4-1: string descriptor 0 read error: -71 [ 221.541012][ T43] usb 4-1: USB disconnect, device number 49 [ 221.740462][ T5941] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.746976][ T5941] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 221.754659][ T5941] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 221.763054][ T5912] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 221.973080][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 222.149776][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.162919][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.179075][ T5941] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 222.204797][ T5941] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 222.215965][ T5912] usb 5-1: device descriptor read/64, error -71 [ 222.230525][ T5941] usb 3-1: USB disconnect, device number 65 [ 222.237761][ T5941] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 222.247181][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 222.275241][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.282035][ T43] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 222.299548][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.312111][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.329977][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.340759][ T43] usb 4-1: config 0 descriptor?? [ 222.463097][ T5912] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 222.474047][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.482673][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.593343][ T5912] usb 5-1: device descriptor read/64, error -71 [ 222.653464][ T5941] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 222.715422][ T5912] usb usb5-port1: attempt power cycle [ 222.810127][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 222.820451][ T9333] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 222.825088][ T5941] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 222.839145][ T43] holtek_mouse 0003:04D9:A070.001F: item fetching failed at offset 2/5 [ 222.847516][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.856499][ T43] holtek_mouse 0003:04D9:A070.001F: hid parse failed: -22 [ 222.864972][ T43] holtek_mouse 0003:04D9:A070.001F: probe with driver holtek_mouse failed with error -22 [ 222.876174][ T5941] usb 3-1: config 0 descriptor?? [ 222.883728][ T5941] pwc: Philips SPC 900NC USB webcam detected. [ 223.041549][ T43] usb 4-1: USB disconnect, device number 50 [ 223.063130][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 223.069298][ T5912] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 223.116258][ T5912] usb 5-1: device descriptor read/8, error -71 [ 223.234129][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 223.234822][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 223.313204][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 223.393023][ T5912] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 223.417622][ T5912] usb 5-1: device descriptor read/8, error -71 [ 223.461179][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 223.533239][ T5912] usb usb5-port1: unable to enumerate USB device [ 223.896039][ T9382] IPv6: sit1: Disabled Multicast RS [ 225.091323][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.102199][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.143036][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 225.153145][ T980] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 225.167798][ T9406] IPVS: length: 225 != 8 [ 225.279815][ T5941] pwc: send_video_command error -71 [ 225.294596][ T5941] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 225.304749][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 225.310984][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 225.320808][ T5941] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 225.324438][ T980] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.337665][ T5941] usb 3-1: USB disconnect, device number 66 [ 225.354125][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.368989][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.378151][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.390656][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 225.392524][ T980] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.407412][ T980] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.415480][ T980] usb 4-1: Product: syz [ 225.420049][ T980] usb 4-1: Manufacturer: syz [ 225.434629][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.446142][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.455094][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 225.462097][ T980] cdc_wdm 4-1:1.0: skipping garbage [ 225.468716][ T980] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 225.470202][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 225.487830][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.501175][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.513168][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 225.655184][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.663906][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.666082][ T9] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 225.672508][ T5912] usb 4-1: USB disconnect, device number 51 [ 225.685961][ T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 225.699638][ T9] usb 5-1: config 8 has no interface number 0 [ 225.707062][ T9] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.712029][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.726812][ T5941] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 225.727166][ T9] usb 5-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 225.749180][ T9] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 225.749590][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.759980][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.783186][ T9] usb 5-1: NFC: intf ffff88807b0c7000 id ffffffff8eb53de0 [ 225.991089][ T9] usb 5-1: USB disconnect, device number 66 [ 226.749136][ T9435] fuse: Bad value for 'group_id' [ 226.754208][ T9435] fuse: Bad value for 'group_id' [ 226.760431][ T9435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.933'. [ 227.153019][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 227.546707][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 227.617978][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 227.646205][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.674168][ T9442] syzkaller1: entered promiscuous mode [ 227.679671][ T9442] syzkaller1: entered allmulticast mode [ 227.694874][ T9] usb 5-1: config 0 descriptor?? [ 227.702701][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 227.731472][ T9] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 228.013115][ T5941] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 228.183996][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.203406][ T5941] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.222740][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.271466][ T5941] usb 3-1: config 0 descriptor?? [ 228.282488][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 228.282999][ T9] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 228.473176][ T9] usb 4-1: device descriptor read/64, error -71 [ 228.763081][ T9] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 228.785180][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.822665][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.901334][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 228.920358][ T5941] pwc: recv_control_msg error -32 req 04 val 1000 [ 228.933039][ T9] usb 4-1: device descriptor read/64, error -71 [ 228.949305][ T5941] pwc: recv_control_msg error -32 req 04 val 1300 [ 228.959582][ T5941] pwc: recv_control_msg error -32 req 04 val 1400 [ 228.971828][ T5941] pwc: recv_control_msg error -32 req 02 val 2000 [ 228.981727][ T5941] pwc: recv_control_msg error -32 req 02 val 2100 [ 228.989833][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 228.999194][ T5941] pwc: recv_control_msg error -32 req 04 val 1500 [ 229.015592][ T5941] pwc: recv_control_msg error -32 req 02 val 2500 [ 229.022601][ T5941] pwc: recv_control_msg error -32 req 02 val 2400 [ 229.029639][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.039715][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.049361][ T9] usb usb4-port1: attempt power cycle [ 229.056303][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.076514][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.093410][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.108294][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.126103][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.142481][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.170967][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.944'. [ 229.241609][ T5941] pwc: recv_control_msg error -32 req 02 val 2900 [ 229.242454][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.257720][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.287050][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 229.332774][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.345190][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.358379][ T5941] pwc: Registered as video103. [ 229.371579][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 229.405929][ T9] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 229.421600][ T5941] usb 3-1: USB disconnect, device number 68 [ 229.444746][ T9] usb 4-1: device descriptor read/8, error -71 [ 229.693224][ T9] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 229.699235][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.723685][ T9] usb 4-1: device descriptor read/8, error -71 [ 229.735448][ T5941] usb 5-1: USB disconnect, device number 67 [ 229.741846][ T5941] ftdi_sio 5-1:0.0: device disconnected [ 229.856246][ T9] usb usb4-port1: unable to enumerate USB device [ 231.200974][ T9522] binder: 9521:9522 ioctl c0306201 200000000540 returned -22 [ 231.298607][ T9523] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 232.412468][ T9543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.549085][ T30] audit: type=1326 audit(1755354924.672:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.0.961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f465958ebe9 code=0x0 [ 232.819397][ T9554] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 232.868638][ T9556] macvlan3: entered allmulticast mode [ 232.874790][ T9556] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 232.913075][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 233.933011][ T5941] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 233.976196][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.988405][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.083026][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 234.089441][ T5941] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 234.098598][ T5941] usb 3-1: config 0 has no interface number 0 [ 234.107187][ T5941] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 234.117170][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.125229][ T5941] usb 3-1: Product: syz [ 234.129391][ T5941] usb 3-1: Manufacturer: syz [ 234.134062][ T5941] usb 3-1: SerialNumber: syz [ 234.139804][ T5941] usb 3-1: config 0 descriptor?? [ 234.146506][ T5941] net1080 3-1:0.183: probe with driver net1080 failed with error -22 [ 234.349814][ T9570] __nla_validate_parse: 25 callbacks suppressed [ 234.349828][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.967'. [ 234.366615][ T5855] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 234.369458][ T5941] usb 3-1: USB disconnect, device number 69 [ 234.681947][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.690918][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.703022][ T980] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 234.858194][ T980] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 234.867738][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.878980][ T980] usb 5-1: Product: syz [ 234.883387][ T980] usb 5-1: Manufacturer: syz [ 234.888233][ T980] usb 5-1: SerialNumber: syz [ 234.896129][ T980] usb 5-1: config 0 descriptor?? [ 234.904260][ T980] hso 5-1:0.0: Not our interface [ 234.909618][ T980] usb-storage 5-1:0.0: USB Mass Storage device detected [ 235.107838][ T980] usb 5-1: USB disconnect, device number 68 [ 235.461301][ T9609] netlink: 348 bytes leftover after parsing attributes in process `syz.2.978'. [ 235.973546][ T9620] syzkaller1: tun_chr_ioctl cmd 35108 [ 236.742839][ T980] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 236.954230][ T980] usb 5-1: config 2 has an invalid interface number: 207 but max is 1 [ 236.978988][ T980] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.016417][ T980] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 237.040378][ T980] usb 5-1: config 2 has no interface number 0 [ 237.043083][ T5941] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 237.095896][ T980] usb 5-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 237.426964][ T980] usb 5-1: config 2 interface 207 has no altsetting 0 [ 237.476010][ T980] usb 5-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 237.531363][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.569065][ T980] usb 5-1: Product: syz [ 237.589727][ T980] usb 5-1: Manufacturer: syz [ 237.613426][ T980] usb 5-1: SerialNumber: syz [ 237.848620][ T980] qmi_wwan 5-1:2.207: skipping garbage [ 237.895574][ T980] qmi_wwan 5-1:2.207: skipping garbage [ 237.906698][ T980] qmi_wwan 5-1:2.207: bogus CDC Union: master=0, slave=0 [ 237.937290][ T980] qmi_wwan 5-1:2.207: probe with driver qmi_wwan failed with error -22 [ 237.948018][ T9658] netlink: 23 bytes leftover after parsing attributes in process `syz.1.991'. [ 237.989724][ T980] usb 5-1: USB disconnect, device number 69 [ 238.700679][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.872552][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.816095][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.837848][ T5941] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 239.870835][ T5941] usb 3-1: can't read configurations, error -71 [ 240.061660][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 240.071817][ T9689] erspan0: entered promiscuous mode [ 240.113232][ T980] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 240.243028][ T980] usb 4-1: device descriptor read/64, error -71 [ 240.473224][ T43] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 240.583159][ T980] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 240.624293][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.635448][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.649833][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 240.659404][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.733039][ T980] usb 4-1: device descriptor read/64, error -71 [ 240.739020][ T43] usb 5-1: config 0 descriptor?? [ 240.843245][ T980] usb usb4-port1: attempt power cycle [ 240.959823][ T9704] syzkaller1: entered promiscuous mode [ 240.966061][ T9704] syzkaller1: entered allmulticast mode [ 241.049866][ T9707] batadv_slave_1: entered promiscuous mode [ 241.161114][ T43] hid_parser_main: 1 callbacks suppressed [ 241.161130][ T43] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 241.288723][ T980] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 241.305820][ T43] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 241.325315][ T43] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0020/input/input29 [ 241.343536][ T980] usb 4-1: device descriptor read/8, error -71 [ 241.413159][ T5941] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 241.448291][ T43] cm6533_jd 0003:0D8C:0022.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 241.468985][ T43] usb 5-1: USB disconnect, device number 70 [ 241.517985][ T9714] fido_id[9714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 241.553758][ T5941] usb 3-1: device descriptor read/64, error -71 [ 241.613221][ T980] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 241.633606][ T980] usb 4-1: device descriptor read/8, error -71 [ 241.729699][ T9700] batadv_slave_1: left promiscuous mode [ 241.743392][ T980] usb usb4-port1: unable to enumerate USB device [ 241.784066][ T43] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 241.803678][ T5941] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 241.869282][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.882276][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.912061][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.924036][ T43] usb 5-1: device descriptor read/64, error -71 [ 241.925766][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.944604][ T30] audit: type=1326 audit(1755354934.072:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.0.1008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f465958ebe9 code=0x0 [ 241.995464][ T9727] syz.0.1008: attempt to access beyond end of device [ 241.995464][ T9727] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 242.008470][ T5941] usb 3-1: device descriptor read/64, error -71 [ 242.113243][ T5941] usb usb3-port1: attempt power cycle [ 242.243017][ T43] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 242.275740][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.293158][ T9731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.302814][ T9731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.327368][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.339303][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.443132][ T43] usb 5-1: device descriptor read/64, error -71 [ 242.463113][ T5941] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 242.496819][ T5941] usb 3-1: device descriptor read/8, error -71 [ 242.553656][ T43] usb usb5-port1: attempt power cycle [ 242.726064][ T9733] netlink: 'syz.3.1011': attribute type 4 has an invalid length. [ 242.743931][ T5941] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 242.763496][ T5941] usb 3-1: device descriptor read/8, error -71 [ 242.823555][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.832330][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.874109][ T5941] usb usb3-port1: unable to enumerate USB device [ 242.893214][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 242.914271][ T43] usb 5-1: device descriptor read/8, error -71 [ 243.153002][ T43] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 243.183859][ T43] usb 5-1: device descriptor read/8, error -71 [ 243.294316][ T43] usb usb5-port1: unable to enumerate USB device [ 243.372299][ T9746] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 243.388537][ T9746] bond1: entered promiscuous mode [ 243.394047][ T9746] bond1: entered allmulticast mode [ 243.407791][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 243.427902][ T9746] bond1: (slave geneve2): making interface the new active one [ 243.435443][ T9746] geneve2: entered promiscuous mode [ 243.440756][ T9746] geneve2: entered allmulticast mode [ 243.447041][ T9746] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 243.455933][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.467624][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.476770][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.486909][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.603836][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.614023][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.622756][ T9752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.631599][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.631806][ T9752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.640202][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.133864][ T5882] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 244.294137][ T5882] usb 4-1: not running at top speed; connect to a high speed hub [ 244.308958][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.318157][ T5882] usb 4-1: config 0 has no interface number 0 [ 244.324656][ T5882] usb 4-1: config 0 interface 1 has no altsetting 0 [ 244.337793][ T5882] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0 [ 244.347249][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.355763][ T5882] usb 4-1: Product: syz [ 244.360058][ T5882] usb 4-1: Manufacturer: syz [ 244.365043][ T5882] usb 4-1: SerialNumber: syz [ 244.372916][ T5882] usb 4-1: config 0 descriptor?? [ 245.349309][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.423007][ T43] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 245.573030][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 245.579587][ T43] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 245.588851][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.598130][ T43] usb 5-1: config 0 descriptor?? [ 245.826525][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.835294][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.907195][ T9790] netlink: 'syz.1.1031': attribute type 12 has an invalid length. [ 245.998322][ T9793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 246.039878][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.048803][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.934071][ T5882] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 246.950366][ T5882] usb 4-1: USB disconnect, device number 60 [ 247.016128][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.036346][ T9805] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[9805] [ 247.503036][ T5882] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 247.633324][ T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 247.643966][ T43] asix 5-1:0.0: probe with driver asix failed with error -71 [ 247.653001][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 247.659820][ T43] usb 5-1: USB disconnect, device number 75 [ 247.660442][ T5882] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 247.675801][ T5882] usb 4-1: config 0 has no interface number 0 [ 247.682040][ T5882] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 247.692413][ T5882] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 247.703066][ T5912] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 247.705898][ T5882] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 247.720877][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.730088][ T5882] usb 4-1: Product: syz [ 247.734637][ T5882] usb 4-1: Manufacturer: syz [ 247.739217][ T5882] usb 4-1: SerialNumber: syz [ 247.745798][ T5882] usb 4-1: config 0 descriptor?? [ 247.751239][ T9808] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 247.759290][ T9808] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 247.853171][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 247.859736][ T5912] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 247.868335][ T5912] usb 3-1: config 0 has no interface number 0 [ 247.874751][ T5912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 247.886010][ T5912] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 247.896327][ T5912] usb 3-1: config 0 interface 41 has no altsetting 0 [ 247.905249][ T5912] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 247.914630][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.922723][ T5912] usb 3-1: Product: syz [ 247.927034][ T5912] usb 3-1: Manufacturer: syz [ 247.931658][ T5912] usb 3-1: SerialNumber: syz [ 247.937599][ T5912] usb 3-1: config 0 descriptor?? [ 247.943681][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 247.951564][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 247.980122][ T5882] asix 4-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 248.000248][ T5882] asix 4-1:0.255: probe with driver asix failed with error -71 [ 248.013143][ T5882] usb 4-1: USB disconnect, device number 61 [ 248.161911][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 248.171692][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 248.582165][ T5912] Error reading MAC address [ 248.597412][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 248.607318][ T9810] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 248.821300][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.831169][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.021285][ T30] audit: type=1326 audit(1755354941.142:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.075355][ T30] audit: type=1326 audit(1755354941.172:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.103168][ T30] audit: type=1326 audit(1755354941.172:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.243065][ T30] audit: type=1326 audit(1755354941.172:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.306440][ T30] audit: type=1326 audit(1755354941.172:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.330597][ T30] audit: type=1326 audit(1755354941.172:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.394456][ T30] audit: type=1326 audit(1755354941.172:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.506199][ T5912] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 249.551677][ T5912] usb 3-1: USB disconnect, device number 76 [ 249.591420][ T30] audit: type=1326 audit(1755354941.172:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.593038][ T30] audit: type=1326 audit(1755354941.172:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.593066][ T30] audit: type=1326 audit(1755354941.172:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9830 comm="syz.3.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f847e38ebe9 code=0x7ffc0000 [ 249.708612][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.939596][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.950620][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.958528][ T9842] tipc: Enabled bearer , priority 0 [ 249.970905][ T9842] syzkaller0: entered promiscuous mode [ 250.006553][ T9842] syzkaller0: entered allmulticast mode [ 250.032692][ T9842] tipc: Resetting bearer [ 250.041026][ T9841] tipc: Resetting bearer [ 250.056127][ T9841] tipc: Disabling bearer [ 250.173284][ T5912] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 250.263037][ T5882] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 250.303416][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 250.325691][ T5912] usb 4-1: config 0 has an invalid interface number: 91 but max is 0 [ 250.343118][ T5912] usb 4-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 250.362313][ T5912] usb 4-1: config 0 has no interface number 0 [ 250.373061][ T5912] usb 4-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 250.393028][ T5912] usb 4-1: config 0 interface 91 has no altsetting 0 [ 250.399918][ T5912] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 250.415491][ T5882] usb 3-1: device descriptor read/64, error -71 [ 250.416003][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.451606][ T5912] usb 4-1: config 0 descriptor?? [ 250.484367][ T980] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 250.492671][ T980] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 250.531914][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.535589][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 250.542983][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.593040][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.601959][ T980] usb 5-1: config 0 has no interface number 0 [ 250.604820][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.613581][ T980] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 250.642545][ T980] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.655921][ T980] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.671816][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.681817][ T980] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 250.691459][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.702382][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.705381][ T5912] usb 4-1: string descriptor 0 read error: -71 [ 250.717547][ T980] usb 5-1: config 0 descriptor?? [ 250.724470][ T5882] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 250.741403][ T5912] uvcvideo 4-1:0.91: probe with driver uvcvideo failed with error -22 [ 250.757723][ T980] gspca_main: spca561-2.14.0 probing abcd:cdee [ 250.758526][ T5912] usb 4-1: USB disconnect, device number 62 [ 250.785482][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 250.798020][ T9889] loop2: detected capacity change from 0 to 7 [ 250.873161][ T5882] usb 3-1: device descriptor read/64, error -71 [ 250.923570][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.937366][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.998517][ T5882] usb usb3-port1: attempt power cycle [ 251.050539][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.069980][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.234225][ T980] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 251.254300][ T980] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.290712][ T980] usb 5-1: MIDIStreaming interface descriptor not found [ 251.353665][ T5882] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 251.367056][ T980] usb 5-1: USB disconnect, device number 76 [ 251.375829][ T5882] usb 3-1: device descriptor read/8, error -71 [ 251.623206][ T5882] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 251.656545][ T5882] usb 3-1: device descriptor read/8, error -71 [ 251.773330][ T5882] usb usb3-port1: unable to enumerate USB device [ 251.815062][ T9917] tipc: Enabled bearer , priority 0 [ 251.832142][ T9917] syzkaller0: entered promiscuous mode [ 251.840300][ T9917] syzkaller0: entered allmulticast mode [ 251.859298][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 251.870502][ T9917] tipc: Resetting bearer [ 251.914254][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.914470][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.919865][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.920086][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.119948][ T9899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.119981][ T9899] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 252.120477][ T9899] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.120492][ T9899] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 252.120896][ T9899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.164507][ T9916] tipc: Resetting bearer [ 252.171537][ T9916] tipc: Disabling bearer [ 252.177490][ T9899] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 252.191767][ T9899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.197855][ T9899] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 252.492259][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.532704][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.542001][ T9933] kvm: kvm [9929]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffcf00000000 [ 252.552588][ T9933] kvm: kvm [9929]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 252.564706][ T9933] kvm: kvm [9929]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffffffec00005088 [ 252.581050][ T9933] kvm: kvm [9929]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 252.813014][ T5912] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 252.953102][ T5912] usb 4-1: device descriptor read/64, error -71 [ 252.994959][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 253.303010][ T5912] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 253.463132][ T5912] usb 4-1: device descriptor read/64, error -71 [ 253.583313][ T5912] usb usb4-port1: attempt power cycle [ 253.598338][ T9963] tipc: Enabled bearer , priority 0 [ 253.630489][ T9963] syzkaller0: entered promiscuous mode [ 253.657966][ T9963] syzkaller0: entered allmulticast mode [ 253.752658][ T9967] tipc: Resetting bearer [ 253.856766][ T9971] syzkaller1: entered promiscuous mode [ 253.862440][ T9971] syzkaller1: entered allmulticast mode [ 253.873850][ T9975] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 253.973122][ T5912] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 254.029739][ T9960] tipc: Resetting bearer [ 254.056421][ T5912] usb 4-1: device descriptor read/8, error -71 [ 254.099274][ T9960] tipc: Disabling bearer [ 254.282704][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.313094][ T5912] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 254.331221][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.411936][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.413304][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 254.434866][ T5912] usb 4-1: device descriptor read/8, error -71 [ 254.445763][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.446746][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1089'. [ 254.479632][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.516065][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.637363][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.646983][ T5912] usb usb4-port1: unable to enumerate USB device [ 254.654545][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.688780][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.754907][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.764951][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.775199][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.793842][ T9999] kvm: kvm [9998]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xf8 [ 254.812396][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.824856][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.835445][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.848683][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.870294][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.889978][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.901471][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.912207][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.923010][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.942487][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.958590][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.093089][ T9992] program syz.4.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.425066][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.434370][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.555647][T10017] syzkaller1: entered promiscuous mode [ 255.571350][T10017] syzkaller1: entered allmulticast mode [ 255.625399][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631825][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.642984][ T5912] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 255.693077][ T5941] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 255.805940][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 255.832579][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.849762][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.863014][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 255.879841][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.891555][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.901776][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.910086][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.919320][ T5912] usb 5-1: Product: syz [ 255.924424][ T5912] usb 5-1: Manufacturer: syz [ 255.934001][ T5912] usb 5-1: SerialNumber: syz [ 255.940906][ T5941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.953005][ T5912] usb 5-1: config 0 descriptor?? [ 255.957995][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.971410][ T5912] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.983624][ T5941] usb 3-1: Product: syz [ 255.989005][ T5912] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 255.998100][ T5941] usb 3-1: Manufacturer: syz [ 256.006325][ T5941] usb 3-1: SerialNumber: syz [ 256.089242][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.098157][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.290518][ T5941] usb 3-1: 0:2 : does not exist [ 256.307472][ T5941] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 256.326226][ T5941] usb 3-1: USB disconnect, device number 81 [ 256.367431][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.583098][ T980] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 256.615163][ T5912] em28xx 5-1:0.0: chip ID is em2765 [ 256.736363][ T980] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.748389][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.756793][ T980] usb 4-1: Product: syz [ 256.761135][ T980] usb 4-1: Manufacturer: syz [ 256.767550][ T980] usb 4-1: SerialNumber: syz [ 256.778201][ T980] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 256.794411][ T5882] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.832621][T10039] fuse: Unknown parameter '»d' [ 256.928143][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.967358][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.217311][T10037] netlink: 'syz.3.1102': attribute type 31 has an invalid length. [ 257.340406][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1102'. [ 257.354883][ T5941] usb 4-1: USB disconnect, device number 67 [ 257.623576][ T5912] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 257.630813][ T5912] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 257.638380][ T5912] em28xx 5-1:0.0: No AC97 audio processor [ 257.863013][ T5882] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 257.871003][ T5882] ath9k_htc: Failed to initialize the device [ 257.882243][ T5941] usb 4-1: ath9k_htc: USB layer deinitialized [ 257.892782][T10055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1107'. [ 257.983618][T10063] syzkaller1: entered promiscuous mode [ 257.989107][T10063] syzkaller1: entered allmulticast mode [ 258.153015][ T980] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 258.283080][ T980] usb 3-1: device descriptor read/64, error -71 [ 258.523099][ T980] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 258.653088][ T5882] usb 5-1: USB disconnect, device number 77 [ 258.660255][ T5882] em28xx 5-1:0.0: Disconnecting em28xx [ 258.677039][ T5882] em28xx 5-1:0.0: Freeing device [ 258.694972][ T980] usb 3-1: device descriptor read/64, error -71 [ 258.903836][ T980] usb usb3-port1: attempt power cycle [ 259.314989][T10087] netlink: 'syz.0.1115': attribute type 2 has an invalid length. [ 259.333061][ T980] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 259.342134][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.392418][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.459585][ T980] usb 3-1: device descriptor read/8, error -71 [ 259.719079][ T980] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 259.754995][ T980] usb 3-1: device descriptor read/8, error -71 [ 259.764708][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1116'. [ 259.867555][ T980] usb usb3-port1: unable to enumerate USB device [ 259.905182][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.944179][T10111] syzkaller1: entered promiscuous mode [ 259.949779][T10111] syzkaller1: entered allmulticast mode [ 259.970788][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.575302][ T980] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 260.733029][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 260.739685][ T980] usb 5-1: config 0 has an invalid interface number: 184 but max is 11 [ 260.748561][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 260.778961][ T980] usb 5-1: config 0 has no interface number 0 [ 260.793014][ T980] usb 5-1: config 0 interface 184 has no altsetting 0 [ 260.807839][ T980] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.824588][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.840874][ T980] usb 5-1: Product: syz [ 260.849563][ T980] usb 5-1: Manufacturer: syz [ 260.863807][ T980] usb 5-1: SerialNumber: syz [ 260.889560][ T980] usb 5-1: config 0 descriptor?? [ 260.910531][T10126] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1126'. [ 260.915002][ T980] smsc75xx v1.0.0 [ 261.320647][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.333103][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.341943][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 261.362245][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 261.386933][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 261.405434][ T980] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 263.406686][ T5882] usb 5-1: USB disconnect, device number 78 [ 263.505346][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 263.505365][ T30] audit: type=1326 audit(1755354955.612:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.579187][ T30] audit: type=1326 audit(1755354955.612:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.692817][T10178] pim6reg: entered allmulticast mode [ 263.703111][T10178] pim6reg: left allmulticast mode [ 263.765897][ T30] audit: type=1326 audit(1755354955.612:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.791583][ T30] audit: type=1326 audit(1755354955.612:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.825275][ T30] audit: type=1326 audit(1755354955.612:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.851340][ T30] audit: type=1326 audit(1755354955.612:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.907294][ T30] audit: type=1326 audit(1755354955.612:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.931230][ T30] audit: type=1326 audit(1755354955.612:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.956080][ T30] audit: type=1326 audit(1755354955.612:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 263.991665][ T30] audit: type=1326 audit(1755354955.612:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 264.006771][ T5882] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 264.213400][ T5941] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 264.213899][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 264.280870][ T5882] usb 5-1: config 0 has an invalid interface number: 103 but max is 0 [ 264.291959][ T5882] usb 5-1: config 0 has no interface number 0 [ 264.375301][ T5882] usb 5-1: config 0 interface 103 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.393252][ T5882] usb 5-1: config 0 interface 103 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 264.413108][ T5941] usb 3-1: device descriptor read/64, error -71 [ 264.429806][ T5882] usb 5-1: config 0 interface 103 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 264.490145][ T5882] usb 5-1: config 0 interface 103 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 264.503972][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 264.601426][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.601599][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 264.639609][T10205] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1143'. [ 264.659770][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.669018][ T5882] usb 5-1: New USB device found, idVendor=1199, idProduct=90d3, bcdDevice=60.ce [ 264.678251][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.683002][ T5941] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 264.694074][ T5882] usb 5-1: Product: syz [ 264.713012][ T5882] usb 5-1: Manufacturer: syz [ 264.729865][ T5882] usb 5-1: SerialNumber: syz [ 264.785991][ T5882] usb 5-1: config 0 descriptor?? [ 264.799644][ T5882] option 5-1:0.103: GSM modem (1-port) converter detected [ 264.822998][ T5941] usb 3-1: device descriptor read/64, error -71 [ 264.933276][ T5941] usb usb3-port1: attempt power cycle [ 265.017129][ T5912] usb 5-1: USB disconnect, device number 79 [ 265.024717][ T5912] option 5-1:0.103: device disconnected [ 265.273012][ T5941] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 265.454962][ T5941] usb 3-1: device descriptor read/8, error -71 [ 265.657800][T10221] binder: 10220:10221 ioctl 8004f50c 200000000480 returned -22 [ 265.713166][ T5941] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 265.788422][ T5941] usb 3-1: device descriptor read/8, error -71 [ 266.010540][ T5941] usb usb3-port1: unable to enumerate USB device [ 266.078937][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.088510][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.169735][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.207503][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.315548][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 266.366210][T10230] Lens A: ================= START STATUS ================= [ 266.366224][T10230] Lens A: Focus, Absolute: 0 [ 266.366251][T10230] Lens A: ================== END STATUS ================== [ 266.413290][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 266.533064][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.533305][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.645742][T10238] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 267.005154][ T5912] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 267.404273][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.415949][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.436816][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.446854][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.456526][ T5912] usb 5-1: Product: syz [ 267.460845][ T5912] usb 5-1: Manufacturer: syz [ 267.476867][ T5912] usb 5-1: SerialNumber: syz [ 268.328515][ T980] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 268.368767][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.377808][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.511548][ T43] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 268.703033][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.711818][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 268.725201][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.725715][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.738265][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.783488][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.801798][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.812444][ T43] usb 3-1: Product: syz [ 268.844722][ T43] usb 3-1: Manufacturer: syz [ 268.852030][ T43] usb 3-1: SerialNumber: syz [ 268.865467][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.877418][ T980] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.886651][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.895962][ T980] usb 4-1: SerialNumber: syz [ 269.053881][T10291] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 269.116345][T10291] bond2: entered promiscuous mode [ 269.129680][T10291] bond2: entered allmulticast mode [ 269.146122][T10291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.621910][ T5912] usb 5-1: 0:2 : does not exist [ 269.630420][ T5912] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 269.677593][ T43] usb 3-1: 0:2 : does not exist [ 269.683258][ T43] usb 3-1: unit 4 not found! [ 269.691839][ T5912] usb 5-1: USB disconnect, device number 80 [ 269.709518][ T43] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 269.720617][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 269.737025][ T43] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 269.748836][ T980] usb 4-1: 0:2 : does not exist [ 269.752651][ T43] usb 3-1: USB disconnect, device number 90 [ 269.866458][ T980] usb 4-1: USB disconnect, device number 68 [ 270.005685][T10306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1168'. [ 270.113514][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 270.235363][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.251441][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.272717][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.288646][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.893058][ T980] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 271.056742][ T980] usb 4-1: config 0 has no interfaces? [ 271.137892][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 271.147540][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.164413][ T980] usb 4-1: Product: syz [ 271.208709][ T980] usb 4-1: Manufacturer: syz [ 271.236214][ T980] usb 4-1: SerialNumber: syz [ 271.251052][ T980] usb 4-1: config 0 descriptor?? [ 271.256536][ T5882] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 271.335189][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.352229][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.414414][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.427943][ T5882] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 271.437274][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.453551][ T5882] usb 3-1: config 0 descriptor?? [ 271.475917][ T5882] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 271.518190][ T5882] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 271.773135][ T43] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 271.933956][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 271.940678][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.951907][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 271.961142][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.975008][ T43] usb 5-1: config 0 descriptor?? [ 272.131448][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1179'. [ 272.388572][T10352] binder_alloc: 10350: pid 10350 spamming oneway? 1 buffers allocated for a total size of 4096 [ 272.411024][T10352] binder_alloc: 10350: pid 10350 spamming oneway? 2 buffers allocated for a total size of 5120 [ 272.480843][ T43] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 272.488208][ T43] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 272.501227][ T43] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 272.531522][ T43] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 272.543156][ T43] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 272.588829][ T43] koneplus 0003:1E7D:2D51.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 272.680705][ T43] koneplus 0003:1E7D:2D51.0021: couldn't init struct koneplus_device [ 272.696974][ T43] koneplus 0003:1E7D:2D51.0021: couldn't install mouse [ 272.711594][ T43] koneplus 0003:1E7D:2D51.0021: probe with driver koneplus failed with error -71 [ 272.734641][ T43] usb 5-1: USB disconnect, device number 81 [ 272.863196][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 272.863213][ T30] audit: type=1326 audit(1755354964.992:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 272.894032][ T30] audit: type=1326 audit(1755354965.022:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.0.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465958ebe9 code=0x7ffc0000 [ 273.205237][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.215853][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.250506][T10369] vxcan0: tx address claim with different name [ 273.294250][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.307671][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.320217][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.329780][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.395353][ T5882] usb 4-1: USB disconnect, device number 69 [ 273.408475][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.425235][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.442522][ T30] audit: type=1326 audit(1755354965.562:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 273.468737][ T30] audit: type=1326 audit(1755354965.562:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 273.469914][T10377] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 273.492013][ T30] audit: type=1326 audit(1755354965.562:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 273.492047][ T30] audit: type=1326 audit(1755354965.562:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb08138e7eb code=0x7ffc0000 [ 273.492073][ T30] audit: type=1326 audit(1755354965.562:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 273.492101][ T30] audit: type=1326 audit(1755354965.562:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08138ebe9 code=0x7ffc0000 [ 273.528180][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 274.039260][ T43] usb 3-1: USB disconnect, device number 91 [ 274.195708][T10389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1191'. [ 274.221458][T10389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1191'. [ 274.250540][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1190'. [ 274.387977][T10399] loop6: detected capacity change from 0 to 524287999 [ 274.395362][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.403661][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.411734][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.419880][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.428255][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.436374][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.449643][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.449897][T10401] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 274.457815][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.609032][T10399] ldm_validate_partition_table(): Disk read failed. [ 274.618779][T10399] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.638910][T10399] Dev loop6: unable to read RDB block 0 [ 274.646355][T10399] loop6: unable to read partition table [ 274.832521][T10399] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 274.995684][T10406] netlink: 'syz.3.1196': attribute type 6 has an invalid length. [ 275.346112][T10414] binder: 10413:10414 ioctl c00c620f 200000000500 returned -22 [ 275.702254][T10429] fuse: Unknown parameter '' [ 275.792987][ T5882] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 275.923063][ T5882] usb 3-1: device descriptor read/64, error -71 [ 276.163163][ T5882] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 276.293827][ T5882] usb 3-1: device descriptor read/64, error -71 [ 276.403848][ T5882] usb usb3-port1: attempt power cycle [ 276.599955][T10449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.666253][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.675323][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.743036][ T5882] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 276.763018][ T980] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 276.771044][ T5882] usb 3-1: device descriptor read/8, error -71 [ 276.922990][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 276.939407][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.948942][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.013041][ T5882] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 277.033480][ T5882] usb 3-1: device descriptor read/8, error -71 [ 277.143453][ T5882] usb usb3-port1: unable to enumerate USB device [ 277.328796][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.337653][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.347120][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.356819][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.366546][T10452] program syz.0.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.377856][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 278.519978][T10458] netlink: 'syz.3.1210': attribute type 10 has an invalid length. [ 278.570067][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1210'. [ 278.577181][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 278.589873][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.598615][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.661673][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1210'. [ 278.903002][ T5912] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 278.999886][T10472] program syz.3.1214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.056653][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.067218][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.080202][ T5912] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 279.089543][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.097775][ T5912] usb 3-1: Product: syz [ 279.102158][ T5912] usb 3-1: Manufacturer: syz [ 279.106801][ T5912] usb 3-1: SerialNumber: syz [ 279.112751][ T5912] usb 3-1: config 0 descriptor?? [ 279.123464][ T5912] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 279.134613][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.146591][ T5912] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 279.155721][ T5912] usb 3-1: media controller created [ 279.189812][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.211124][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.228721][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.258808][T10477] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1216'. [ 279.270600][ T5912] DVB: Unable to find symbol tda10046_attach() [ 279.279570][ T5912] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 279.292734][ T5912] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 279.411687][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 279.447660][ T5882] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 279.467500][ T980] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 279.476539][ T980] usb 5-1: can't read configurations, error -71 [ 279.547819][T10491] binder: 10489:10491 ioctl c0306201 200000000640 returned -22 [ 279.561142][T10492] binder: 10489:10492 ioctl c0286404 200000000000 returned -22 [ 279.603020][ T5882] usb 4-1: device descriptor read/64, error -71 [ 279.679219][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.689435][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.843011][ T5882] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 279.893047][ T980] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 279.973139][ T5882] usb 4-1: device descriptor read/64, error -71 [ 280.033122][ T980] usb 5-1: device descriptor read/64, error -71 [ 280.114302][ T5882] usb usb4-port1: attempt power cycle [ 280.130342][ T5912] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 280.143712][ T980] usb usb5-port1: attempt power cycle [ 280.191433][ T5912] usb 3-1: USB disconnect, device number 96 [ 280.277435][T10496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 280.283959][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 280.293601][T10496] vhci_hcd vhci_hcd.0: Device attached [ 280.302503][T10496] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 280.309216][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 280.317542][T10496] vhci_hcd vhci_hcd.0: Device attached [ 280.323926][T10496] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1222'. [ 280.333300][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'. [ 280.342250][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1222'. [ 280.352092][T10499] vhci_hcd: connection closed [ 280.352192][T10497] vhci_hcd: connection closed [ 280.352641][ T9870] vhci_hcd: stop threads [ 280.366272][ T9870] vhci_hcd: release socket [ 280.370693][ T9870] vhci_hcd: disconnect device [ 280.375582][ T9870] vhci_hcd: stop threads [ 280.379875][ T9870] vhci_hcd: release socket [ 280.384528][ T9870] vhci_hcd: disconnect device [ 280.463126][ T5882] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 280.483498][ T5882] usb 4-1: device descriptor read/8, error -71 [ 280.523013][ T980] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 280.543417][ T980] usb 5-1: device descriptor read/8, error -71 [ 280.733210][ T5882] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 280.753610][ T5882] usb 4-1: device descriptor read/8, error -71 [ 280.793128][ T980] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 280.825014][ T980] usb 5-1: device descriptor read/8, error -71 [ 280.863507][ T5882] usb usb4-port1: unable to enumerate USB device [ 280.886347][T10510] netem: change failed [ 280.891175][T10510] batadv_slave_1: entered promiscuous mode [ 280.897686][T10510] batadv_slave_1: left promiscuous mode [ 280.943249][ T980] usb usb5-port1: unable to enumerate USB device [ 280.951245][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.960252][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.734979][T10520] netlink: 'syz.2.1227': attribute type 4 has an invalid length. [ 281.745115][T10520] netlink: 'syz.2.1227': attribute type 4 has an invalid length. [ 282.843040][ T5912] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 283.013200][ T5912] usb 3-1: device descriptor read/64, error -71 [ 283.284369][ T5912] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 283.413203][ T5912] usb 3-1: device descriptor read/64, error -71 [ 283.523279][ T5912] usb usb3-port1: attempt power cycle [ 283.543867][T10554] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 283.551986][T10554] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 283.592359][T10554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 284.063464][ T5912] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 284.093618][ T5912] usb 3-1: device descriptor read/8, error -71 [ 285.056192][ T5912] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 285.215736][ T5912] usb 3-1: device descriptor read/8, error -71 [ 285.336144][ T5912] usb usb3-port1: unable to enumerate USB device [ 285.472542][T10590] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 285.480630][T10590] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.797137][T10601] tipc: Enabled bearer , priority 0 [ 285.834660][T10601] syzkaller0: entered promiscuous mode [ 285.877307][T10601] syzkaller0: entered allmulticast mode [ 286.001279][T10601] tipc: Resetting bearer [ 286.068316][T10598] tipc: Resetting bearer [ 286.084235][T10598] tipc: Disabling bearer [ 286.135555][T10613] netlink: 'syz.2.1249': attribute type 31 has an invalid length. [ 286.205582][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 286.885740][ T5912] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 287.033058][ T5912] usb 4-1: device descriptor read/64, error -71 [ 287.143018][ T980] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 287.194280][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 287.273682][ T5912] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 287.285144][ T980] usb 5-1: device descriptor read/64, error -71 [ 287.345043][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.365040][T10654] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1262'. [ 287.375297][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.391224][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.403019][ T5912] usb 4-1: device descriptor read/64, error -71 [ 287.409663][ T43] usb 3-1: config 0 descriptor?? [ 287.417683][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 287.533423][ T5912] usb usb4-port1: attempt power cycle [ 287.563007][ T980] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 287.617483][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.626546][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.635961][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.644676][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.653152][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.662300][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.672136][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.680813][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.689462][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.698071][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.713504][ T980] usb 5-1: device descriptor read/64, error -71 [ 287.823426][ T980] usb usb5-port1: attempt power cycle [ 287.883603][ T5912] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 287.912602][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.919886][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.926993][ T5912] usb 4-1: device descriptor read/8, error -71 [ 287.937200][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.945913][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.969037][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 287.980705][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 287.995170][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 288.006628][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 288.013516][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.024789][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.034201][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 288.048020][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 288.055924][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 288.074418][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 288.081542][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 288.088862][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.101649][ T43] pwc: Registered as video103. [ 288.133148][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 288.166769][ T980] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 288.188788][ T5912] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 288.203557][T10675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.213423][T10675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.213675][ T43] usb 3-1: USB disconnect, device number 101 [ 288.249394][T10671] tipc: Started in network mode [ 288.254775][ T980] usb 5-1: device descriptor read/8, error -71 [ 288.255037][ T5912] usb 4-1: device descriptor read/8, error -71 [ 288.287567][T10671] tipc: Node identity 080211000001, cluster identity 4711 [ 288.288312][T10675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.298165][T10671] tipc: Enabled bearer , priority 0 [ 288.330675][T10675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.367386][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 288.380661][T10675] program syz.1.1268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.385788][T10678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1269'. [ 288.404730][ T5912] usb usb4-port1: unable to enumerate USB device [ 288.435194][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.444035][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.513154][ T980] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 288.534903][ T980] usb 5-1: device descriptor read/8, error -71 [ 288.633075][ T43] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 288.643610][ T980] usb usb5-port1: unable to enumerate USB device [ 288.763057][ T43] usb 3-1: device descriptor read/64, error -71 [ 289.003161][ T43] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 289.133013][ T43] usb 3-1: device descriptor read/64, error -71 [ 289.176943][T10692] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 289.184599][T10692] team0: Device macvtap0 is already an upper device of the team interface [ 289.278460][ T43] usb usb3-port1: attempt power cycle [ 289.427350][T10691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.434614][T10691] IPv6: NLM_F_CREATE should be set when creating new route [ 289.441924][ T5912] tipc: Node number set to 134418688 [ 289.475867][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.485382][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.670715][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.682044][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.713027][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 289.733572][ T43] usb 3-1: device descriptor read/8, error -71 [ 289.973971][ T43] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 290.004898][ T43] usb 3-1: device descriptor read/8, error -71 [ 290.045239][ T5912] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 290.079517][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.088199][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.123329][ T43] usb usb3-port1: unable to enumerate USB device [ 290.195150][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 290.204185][ T5912] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 290.212571][ T5912] usb 4-1: config 0 has no interface number 0 [ 290.218998][ T5912] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.229175][ T5912] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.241112][ T5912] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 290.250591][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.258656][ T5912] usb 4-1: Product: syz [ 290.263031][ T5912] usb 4-1: Manufacturer: syz [ 290.267635][ T5912] usb 4-1: SerialNumber: syz [ 290.273574][ T5912] usb 4-1: config 0 descriptor?? [ 290.353088][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 290.359788][ T980] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 290.368476][ T980] usb 5-1: config 0 has no interface number 0 [ 290.374852][ T980] usb 5-1: config 0 interface 89 has no altsetting 0 [ 290.383235][ T980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 290.392436][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.400752][ T980] usb 5-1: Product: syz [ 290.404966][ T980] usb 5-1: Manufacturer: syz [ 290.409578][ T980] usb 5-1: SerialNumber: syz [ 290.417681][ T980] usb 5-1: config 0 descriptor?? [ 290.425503][ T980] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 290.435076][ T980] em28xx 5-1:0.89: Video interface 89 found: bulk [ 290.485103][ T5912] usb 4-1: probing VID:PID(2201:012C) [ 290.491770][ T5912] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02 [ 290.498517][ T5912] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 290.506372][ T5912] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 290.516440][ T5912] usb 4-1: USB disconnect, device number 78 [ 290.672439][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.681246][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.121778][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.130704][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.141363][ T980] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 291.162188][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.181824][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.184065][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1281'. [ 291.212693][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.251581][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.266840][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.276919][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.288388][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.398224][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.417753][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 291.438336][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 291.513101][ T43] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 291.664446][ T43] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 291.672668][ T43] usb 4-1: config 0 has no interface number 0 [ 291.679683][ T43] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 291.694691][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=fc.88 [ 291.707262][ T43] usb 4-1: New USB device strings: Mfr=255, Product=1, SerialNumber=3 [ 291.715964][ T43] usb 4-1: Product: syz [ 291.720215][ T43] usb 4-1: Manufacturer: syz [ 291.726237][ T43] usb 4-1: SerialNumber: syz [ 291.736230][ T43] usb 4-1: config 0 descriptor?? [ 291.972189][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.007557][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.020505][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.059452][ T980] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 292.068097][ T980] em28xx 5-1:0.89: board has no eeprom [ 292.075519][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.133409][ T980] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 292.142685][ T980] em28xx 5-1:0.89: analog set to bulk mode. [ 292.150736][ T5882] em28xx 5-1:0.89: Registering V4L2 extension [ 292.163870][ T980] usb 5-1: USB disconnect, device number 90 [ 292.164909][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 292.175294][ T980] em28xx 5-1:0.89: Disconnecting em28xx [ 292.211157][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.211810][ T5882] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 292.228228][ T5882] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 292.245485][ T5882] em28xx 5-1:0.89: No AC97 audio processor [ 292.274179][ T43] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 292.282102][ T5882] usb 5-1: Decoder not found [ 292.329927][ T5882] em28xx 5-1:0.89: failed to create media graph [ 292.331658][ T43] usb 4-1: USB disconnect, device number 79 [ 292.359301][ T5882] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 292.399315][ T6005] udevd[6005]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.420403][ T5882] em28xx 5-1:0.89: Registering snapshot button... [ 292.499704][ T5882] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input32 [ 292.514801][ T5882] em28xx 5-1:0.89: Remote control support is not available for this card. [ 292.523554][ T980] em28xx 5-1:0.89: Closing input extension [ 292.529480][ T980] em28xx 5-1:0.89: Deregistering snapshot button [ 292.567865][ T980] em28xx 5-1:0.89: Freeing device [ 292.592259][T10745] loop2: detected capacity change from 0 to 7 [ 292.598962][T10745] Dev loop2: unable to read RDB block 7 [ 292.604686][T10745] loop2: unable to read partition table [ 292.611184][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1286'. [ 292.623345][T10745] loop2: partition table beyond EOD, truncated [ 292.704928][T10745] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.796697][T10745] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1288'. [ 292.903081][ T5912] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 293.274257][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.303133][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 293.305465][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.324624][ T5912] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 293.335660][ T5912] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 293.352210][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.374619][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.392382][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.402667][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.404996][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.411203][ T5912] usb 3-1: Product: syz [ 293.422712][ T5912] usb 3-1: Manufacturer: syz [ 293.427393][ T5912] usb 3-1: SerialNumber: syz [ 293.613001][ T980] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 293.640931][ T5912] usb 3-1: 0:2 : does not exist [ 293.651810][ T5912] usb 3-1: USB disconnect, device number 106 [ 293.764235][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.774554][ T980] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 293.783712][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.792596][ T980] usb 4-1: config 0 descriptor?? [ 295.806237][ T5912] usb 4-1: USB disconnect, device number 80 [ 317.065541][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.071872][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.263259][ T31] INFO: task kworker/0:6:5954 blocked for more than 143 seconds. [ 336.271002][ T31] Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 [ 336.278746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.287485][ T31] task:kworker/0:6 state:D stack:19760 pid:5954 tgid:5954 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 336.299586][ T31] Workqueue: usb_hub_wq hub_event [ 336.304699][ T31] Call Trace: [ 336.307981][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 336.310912][ T31] __schedule+0x1798/0x4cc0 [ 336.315756][ T31] ? __pfx___schedule+0x10/0x10 [ 336.320631][ T31] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 336.328090][ T31] ? lock_release+0x4b/0x3e0 [ 336.352999][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.357806][ T31] schedule+0x165/0x360 [ 336.361966][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.369135][ T31] __mutex_lock+0x7e6/0x1360 [ 336.374030][ T31] ? __mutex_lock+0x5b6/0x1360 [ 336.378914][ T31] ? hub_event+0x21e5/0x4a20 [ 336.383774][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.388813][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.395969][ T31] hub_event+0x21e5/0x4a20 [ 336.400413][ T31] ? do_raw_spin_lock+0x121/0x290 [ 336.434542][ T31] ? __pfx_hub_event+0x10/0x10 [ 336.439353][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.452994][ T31] ? lock_acquire+0x5f/0x360 [ 336.457638][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.462418][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 336.470106][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 336.476411][ T31] process_scheduled_works+0xade/0x17b0 [ 336.482047][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.490892][ T31] worker_thread+0x8a0/0xda0 [ 336.495925][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.502274][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.512316][ T31] ? __kthread_parkme+0x7b/0x200 [ 336.517631][ T31] kthread+0x70e/0x8a0 [ 336.521739][ T31] ? __pfx_worker_thread+0x10/0x10 [ 336.528681][ T31] ? __pfx_kthread+0x10/0x10 [ 336.534150][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.538944][ T31] ? __pfx_kthread+0x10/0x10 [ 336.545634][ T31] ret_from_fork+0x3f9/0x770 [ 336.550242][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.556237][ T31] ? __switch_to_asm+0x39/0x70 [ 336.561033][ T31] ? __switch_to_asm+0x33/0x70 [ 336.567545][ T31] ? __pfx_kthread+0x10/0x10 [ 336.572178][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.577611][ T31] [ 336.587081][ T31] INFO: lockdep is turned off. [ 336.591996][ T31] NMI backtrace for cpu 0 [ 336.592019][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 336.592038][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.592047][ T31] Call Trace: [ 336.592054][ T31] [ 336.592059][ T31] dump_stack_lvl+0x189/0x250 [ 336.592081][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.592098][ T31] ? __pfx__printk+0x10/0x10 [ 336.592123][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 336.592143][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.592161][ T31] ? __pfx__printk+0x10/0x10 [ 336.592183][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.592207][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 336.592227][ T31] watchdog+0xf93/0xfe0 [ 336.592249][ T31] ? watchdog+0x1de/0xfe0 [ 336.592271][ T31] kthread+0x70e/0x8a0 [ 336.592291][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.592311][ T31] ? __pfx_kthread+0x10/0x10 [ 336.592330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.592350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.592369][ T31] ? __pfx_kthread+0x10/0x10 [ 336.592387][ T31] ret_from_fork+0x3f9/0x770 [ 336.592404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.592422][ T31] ? __switch_to_asm+0x39/0x70 [ 336.592440][ T31] ? __switch_to_asm+0x33/0x70 [ 336.592457][ T31] ? __pfx_kthread+0x10/0x10 [ 336.592475][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.592499][ T31] [ 336.592505][ T31] Sending NMI from CPU 0 to CPUs 1: [ 336.745341][ C1] NMI backtrace for cpu 1 [ 336.745358][ C1] CPU: 1 UID: 0 PID: 7495 Comm: syz.0.397 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 336.745376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.745391][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x18/0x90 [ 336.745417][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 65 8b 15 28 a2 e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 [ 336.745430][ C1] RSP: 0018:ffffc90003c2f800 EFLAGS: 00000293 [ 336.745444][ C1] RAX: ffffffff822c7533 RBX: dffffc0000000000 RCX: ffff8880266d9e00 [ 336.745456][ C1] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 336.745465][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.745474][ C1] R10: 000000000000000c R11: ffffffff81ac3870 R12: 0000000000062ba6 [ 336.745484][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88801d8da390 [ 336.745494][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 336.745506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.745517][ C1] CR2: 00007fff8100bf2c CR3: 000000000df36000 CR4: 00000000003526f0 [ 336.745530][ C1] Call Trace: [ 336.745536][ C1] [ 336.745542][ C1] __update_page_owner_free_handle+0x183/0x470 [ 336.745563][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 336.745583][ C1] __reset_page_owner+0x85/0x1f0 [ 336.745601][ C1] __free_frozen_pages+0xbc4/0xd30 [ 336.745623][ C1] vfree+0x25a/0x400 [ 336.745641][ C1] ? __pfx_kcov_close+0x10/0x10 [ 336.745659][ C1] kcov_close+0x28/0x50 [ 336.745675][ C1] __fput+0x449/0xa70 [ 336.745694][ C1] task_work_run+0x1d4/0x260 [ 336.745714][ C1] ? __pfx_task_work_run+0x10/0x10 [ 336.745733][ C1] ? kmem_cache_free+0x18f/0x400 [ 336.745753][ C1] do_exit+0x6b5/0x2300 [ 336.745772][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.745789][ C1] ? do_raw_spin_lock+0x121/0x290 [ 336.745806][ C1] ? __pfx_do_exit+0x10/0x10 [ 336.745826][ C1] ? rcu_is_watching+0x15/0xb0 [ 336.745841][ C1] do_group_exit+0x21c/0x2d0 [ 336.745860][ C1] get_signal+0x1286/0x1340 [ 336.745881][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 336.745906][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 336.745926][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 336.745950][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 336.745971][ C1] ? rcu_is_watching+0x15/0xb0 [ 336.745986][ C1] exit_to_user_mode_loop+0x75/0x110 [ 336.746005][ C1] do_syscall_64+0x2bd/0x3b0 [ 336.746025][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.746040][ C1] ? clear_bhb_loop+0x60/0xb0 [ 336.746055][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.746069][ C1] RIP: 0033:0x7f46595c14a5 [ 336.746081][ C1] Code: Unable to access opcode bytes at 0x7f46595c147b. [ 336.746089][ C1] RSP: 002b:00007f465a493f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 336.746104][ C1] RAX: fffffffffffffdfc RBX: 00007f46597b5fa0 RCX: 00007f46595c14a5 [ 336.746115][ C1] RDX: 00007f465a493fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.746124][ C1] RBP: 00007f4659611e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.746133][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 336.746142][ C1] R13: 00007f46597b6038 R14: 00007f46597b5fa0 R15: 00007f46598dfa28 [ 336.746158][ C1] [ 337.187873][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 337.194774][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 337.206677][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.216763][ T31] Call Trace: [ 337.220061][ T31] [ 337.222998][ T31] dump_stack_lvl+0x99/0x250 [ 337.227606][ T31] ? __asan_memcpy+0x40/0x70 [ 337.232212][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.237426][ T31] ? __pfx__printk+0x10/0x10 [ 337.242036][ T31] vpanic+0x281/0x750 [ 337.246033][ T31] ? __pfx_vpanic+0x10/0x10 [ 337.250552][ T31] ? preempt_schedule+0xae/0xc0 [ 337.255418][ T31] ? preempt_schedule_common+0x83/0xd0 [ 337.260914][ T31] panic+0xb9/0xc0 [ 337.264655][ T31] ? __pfx_panic+0x10/0x10 [ 337.269076][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 337.274455][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 337.280597][ T31] watchdog+0xfd2/0xfe0 [ 337.284742][ T31] ? watchdog+0x1de/0xfe0 [ 337.289060][ T31] kthread+0x70e/0x8a0 [ 337.293120][ T31] ? __pfx_watchdog+0x10/0x10 [ 337.297780][ T31] ? __pfx_kthread+0x10/0x10 [ 337.302360][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.307562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.312744][ T31] ? __pfx_kthread+0x10/0x10 [ 337.317315][ T31] ret_from_fork+0x3f9/0x770 [ 337.321889][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 337.326984][ T31] ? __switch_to_asm+0x39/0x70 [ 337.331735][ T31] ? __switch_to_asm+0x33/0x70 [ 337.336486][ T31] ? __pfx_kthread+0x10/0x10 [ 337.341073][ T31] ret_from_fork_asm+0x1a/0x30 [ 337.345826][ T31] [ 337.348974][ T31] Kernel Offset: disabled [ 337.353279][ T31] Rebooting in 86400 seconds..