last executing test programs: 2m29.941881882s ago: executing program 2 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x4) (async) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x4) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x354) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) (async) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r7, &(0x7f0000000140)) 2m29.561745629s ago: executing program 2 (id=34): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x368a7a2, 0x3, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) getegid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa8, 0x8, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4, 0x0) 2m26.047489064s ago: executing program 2 (id=46): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0x0, 0x101, 0x0, 0x4, 0x4a, 0x9}, 0x1c) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = semget(0x3, 0x4, 0x3a3) semop(r4, &(0x7f0000000000)=[{0x2, 0x7, 0x1800}, {0x1, 0x6}, {0x0, 0x2, 0x1c00}, {0x2, 0xf54e, 0x400}, {0x2, 0x0, 0x800}, {0x1, 0x9, 0x1000}], 0x6) 2m22.042849563s ago: executing program 2 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2m21.884687359s ago: executing program 2 (id=58): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x8010, r3, 0x7a4fd000) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockname$inet6(r6, 0x0, &(0x7f0000001080)) socket(0x2c, 0x8000b, 0xe32a) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x7b0, 0x5f8, 0x0, 0x1d0, 0x1d0, 0x3e8, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x218, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x810) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m20.318061629s ago: executing program 2 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m5.159335916s ago: executing program 32 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000022c0)=0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd6, &(0x7f0000000240), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13.891095305s ago: executing program 4 (id=524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000002100)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'xfrm0\x00'}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e", 0x1b}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x44, 0x6, 0x5c8, 0x1d0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6_vti0\x00', {}, 'ip6gre0\x00', {}, 0x0, 0x13}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@TOS={0x28}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1\x00', 'team0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d2f, 0x1000, 0x0, 0x4000000}) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x24}}, 0x0) timer_create(0x3, &(0x7f00000027c0)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002800)=0x0) timer_settime(r7, 0x0, &(0x7f0000002880)={{}, {0x77359400}}, 0x0) timer_settime(r7, 0x0, &(0x7f0000002980)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000029c0)) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4, @loopback}, 0x10) sendmsg$kcm(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="b543acb9cca626461739bacd43f51ee77887790ea10a28ac2ce0dbc002ed387b9ec3", 0x22}, {&(0x7f0000000100)="a16c1bfa66e9cd914851e71543fb31", 0xf}, {&(0x7f0000000140)="29e6fa71c342155fa12601c81860ba56f985cfff7cf322b4e4052c8120bf2167d82f07d42c775aace0a00c56152f1f402a628f2b912262997985bc35c0a7af2e4eaea5d2577a85cb4129624a614b40f6609038bc3028044ce7950cfe61", 0x5d}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000001240)="8c0b5f4ba507c16e12089689441278c9c8c32f3176c012442bff68a215e26450d4d893414d129f2d9e651b7bd1cd8050c6cedbc058cda697005bba1ad8a458957f7198ee64eb8934f34a59f8d1fb83d11b309d9b97e33bc73e44032813ac47f1d40d961d93c0c19455a3e0dc975eca6916c6f2b5f541a4e992ffde2b21b09dda1312743186839299dbb51de3ca8e06ab", 0x90}, {&(0x7f0000001300)="0a7f55ac793cf268ec280e141702a0773def77eb75ee4261f254cf759aa51893b486d5e3788ee449a6a7b99e03fd463123ca63cefc626003d492921e3e22fed31492386647e56232615518019a69de6fa44e70cd2a85d3f39e4a128537a02f667c872220708a977e1d4e1f27fdacca776747825e30264101209a7a412c9dd36618872a8bcb9de8f8dbacb7d9cf5c5eeff78e601a581d13a08d94b65acbb191b79d691edfd28d03c49a5b551cfb4cdeddf31520924675eff4b0b0ea95ba1fd8a23e43", 0xc2}, {&(0x7f00000001c0)="34153d66f52e23926a1263cdb59e1eec188a2799470f5749d0d38f146f41cbf090ab0d99bcce5f974cbeb479d957c4120780cf1f411f88e59f84c3a4df257678754621b9f6d26abeca3781a3ba8b9196259872f8d492ec4d01dac4e05de15d0bb59eb3bcb8958e34", 0x68}, {&(0x7f0000001400)="244a7e103f93402d0e0299ba2daa93bd9e4dc1f1d786b9fec0ca24ff48a0a347e4bf3e96c973", 0x26}, {&(0x7f0000001440)="a605794e4ad3092483cdb323efc3e25b2492b839926a54bf80d21026db82de975e1867b73a59dd92349b3cc029f12b22c224219799e0606b8127e6832f6c80266daa01be6988573d74d7a956e066d9cc1560fd5969c7980ecd1abf", 0x5b}], 0x9, &(0x7f0000001580)=[{0xa0, 0x109, 0x4, "fd4ffcfdab051afe1d817b22c57e23474505c3ea71cb9e81796df8ec559a43da8dc7e349eb802c3d7cab5f2c226414dd270e6e6955ab26df663d1e2565277e0d4680efc46dc19ba8c49ab408563872278f695969c2cf3ff3b57aa486ee68d31886f652d0da29c186a51b83c05b98f757a01f75b3ae957a4a1b82ffa5fbbb471b65ee68a33e716b4ebf9f"}], 0xa0}, 0x51) ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x6]}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') preadv(r8, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r9 = syz_usb_connect$hid(0x5, 0x6d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3804, 0xf, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r10, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 11.258606967s ago: executing program 0 (id=531): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0x4b, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x29, 0x0, @opaque="0f407a22df19595b7c085def99f679437dfbc330b365040b6fba070b83d06caff0"}}}}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r3, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2], 0x0) 10.693543339s ago: executing program 4 (id=533): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000000)='\x00', 0x24000, 0x1) mknodat$loop(r3, &(0x7f00000010c0)='./file0\x00', 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002280)={0x8, {"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", 0x1035}}, 0x1006) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x844) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001140)=ANY=[@ANYBLOB="008ce083fcc40e34a964408a64000000000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_io_uring_setup(0x1517, &(0x7f00000011c0)={0x0, 0x707c, 0x400, 0x201, 0x232}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) memfd_create(0x0, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xb}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500280600fe8000000000000000000000000000aafe8000000800000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20000907800001e122000e0000001000493f38718000000000000"], 0x0) 10.542088541s ago: executing program 3 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 10.480462864s ago: executing program 3 (id=535): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x21}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20240001, 0x101, 0xfffffffe, 0x0, 0x0, 0x80100000}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xb8, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x2, 0x1, 0x5, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1590"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x31}, [@acm={0x4, 0x24, 0x2, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x471}, @mdlm={0x15, 0x24, 0x12, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x93}, @country_functional={0x10, 0x24, 0x7, 0x91, 0x8, [0x10, 0x1, 0x3, 0x3, 0x8]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x28, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x3, 0xf8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x80, 0xfd, 0x1, 0x0, 0x8}, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x8, 0x4, 0xffff, 0x10}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41d}}, {0x55, &(0x7f00000002c0)=@string={0x55, 0x3, "5e59c98d1593413b41e17200387a48de46325ae50ff291cde2f7f8429c9e17ba91d1e78692b97665d8df80e5943f441dbb2a7103ae48c674b400b9af504b9a5b7795cf9f3e59151f0a6b8392dae265f6eedcda"}}, {0x2c, &(0x7f0000000340)=@string={0x2c, 0x3, "fea369ad935fb5d86fb9f7fc9b7c568e386997421662e6761228256a887ba18969904960a9907719e894"}}]}) ioprio_set$pid(0x2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="29935edf53b6fe38d09b28e511f9718b1970db4de45e54f1cbbab1cf74f5e25bf96afadc00756c93f4913906a81bb9dab7b99bfc16c5297ae37c60a14a4eb8052120012344ed14c267c4aabb2f3fc58ec734fe4175fd6406fba19a7c6f4b88938aa0b7ca2f5e15ec81c43f5573fcda5592bc99444f06c20d7d01340c5d6c40b043df2e86d56ff5609583c3dca52565cfee6816e7e9ada64ca6ff343852d687"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.350238205s ago: executing program 5 (id=536): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x880) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (rerun: 32) 10.042554381s ago: executing program 5 (id=537): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000140)=0x504f, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3880, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x4, 0xc3, &(0x7f0000000400)=""/195}]}) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1, r10}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000003c0)={0x1, r7}) r11 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r12, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r12, 0xc008aec1, &(0x7f0000000180)=ANY=[]) sendmmsg$unix(r2, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8.992179543s ago: executing program 5 (id=538): r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe32b, 0x13500, 0x0, 0x1005}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x103002) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x1, 0x3, "55fbfc5c2414dfeac2710843af1ae4ecd59dee2b2588f2b4a0deb71bf3b9338c9198409d8b76a82444b4c9cfb0909815d3300907a7a1474468e5bcfb6d28dc0d0808f80da4ec976ac5cd44483e46358be4dda05d579c90d624a017c001e9ab1c64540ea7d62442214a4495fc711c68418acdac7cff9d5365c4056d2f8598a5e6272274b9b396e271c497307267222b87d5b31f756ee96bb1e3bf3e4131ff9411b24f959c35ca7332f1189bb448af87ad6f9d9b41827b2434ed5a2425761924b0b95bea10746f68602e0375798ce2"}}, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x24f3, &(0x7f0000000280)={0x0, 0xb676, 0x10100, 0x0, 0x33a}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x76, 0x4004, @fd_index=0xa, 0x80000000, 0x0, 0x0, 0x5}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r7, &(0x7f00000001c0)=0x10, 0x8) tee(r6, r5, 0x8, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000200)={0x8, 0x4, 0x2, "4a559bbe039cc6906dbce8990e8a0b0d5db1de30b84ca8519ac014bdee98180c", 0x31303553}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r9, &(0x7f0000000280)='./file0\x00', 0x400, 0x200, &(0x7f0000000080)) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x0, [0x2], [0x3ff, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0xfffffff6], [0x0, 0x0, 0x0, 0x3]}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x8, 0x34325842, 0x8, 0x2, 0x3, @discrete={0x1, 0x6}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 8.316559415s ago: executing program 3 (id=539): io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x95}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x40000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9c7f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x800) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 8.130491841s ago: executing program 0 (id=540): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) close_range(r0, r2, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x6, 0x5, 0xa, 0x2, 0x200}, @call={0x85, 0x0, 0x0, 0xc}, @ldst={0x3, 0x5, 0x2, 0x0, 0x0, 0x8dec0b38c55e0b07, 0x10}, @alu={0x7, 0x0, 0xa, 0x5, 0x3, 0xfffffffffffffff8, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) 7.962861772s ago: executing program 0 (id=541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r8, 0x1, 0x28, 0x0, &(0x7f0000000500)) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f00000000c0)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b90402", 0x11}], 0x1}, 0x1c850) fsopen(&(0x7f0000000080)='efs\x00', 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 7.422531132s ago: executing program 4 (id=543): r0 = fsopen(&(0x7f0000000140)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="002b00000000000000000000faff000000004000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f54f410382ff4c5596000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000ca80fbdd528d645480b1000000003b27f8700000000f00010073797a31"], 0x28}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6105c2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f00000003c0)}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x6, 0x7a, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5a23, &(0x7f0000000300)={0x0, 0x6b5e, 0x10100}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) 6.944730091s ago: executing program 0 (id=545): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x16, 0xf, 0x4f, 0x40, 0x100d, 0xcb01, 0x84d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0x74, 0x9a, 0xdc, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xaa940) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r3, 0x0) setitimer(0x3, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="3698bafac6affcd1", 0x8}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000040)=0x7, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x10004, 0x80, 0x340, &(0x7f0000000340)=[0x1, 0x7, 0x6, 0x2, 0xffffffff, 0x9, 0x10, 0x401, 0x7, 0x5, 0x9, 0x4, 0x3, 0x100000001, 0x4, 0x400, 0x2, 0x5, 0x7f, 0x742ff6d0, 0x5, 0x2, 0x8, 0x100000001, 0x58, 0x9, 0x2, 0xfffffffffffffdb2, 0x800, 0x3f, 0x9, 0x8, 0x1, 0x8, 0x5, 0xc0f, 0x200, 0x935, 0x6d628000000, 0x81, 0x9a, 0x80000001, 0x0, 0x0, 0x1, 0x9, 0x1, 0x4, 0x8000000000000001, 0x4, 0xd37, 0x4, 0x0, 0x0, 0x3, 0x9, 0x6, 0xffffffff, 0x8, 0x5, 0x3, 0xf0fe, 0x2, 0xeb, 0x94, 0x185, 0x8001, 0x3, 0x1, 0x4, 0x3, 0x1, 0xc, 0x200, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x6, 0xa4bd, 0x80, 0x1, 0x200, 0x6, 0x2, 0xc67, 0x9, 0x226, 0xffffffffffff0001, 0x66, 0x4, 0x8000000000000001, 0x5, 0x9, 0x4, 0x3ff, 0x7, 0x5, 0x2, 0x1, 0x3, 0x6, 0x5, 0xe, 0xffffffffffffffff, 0x0, 0x7ff, 0x8, 0xc8, 0x0, 0xc4b5, 0x7, 0x100000000, 0x1, 0x6, 0x5, 0xf, 0x8, 0x6, 0x9, 0x7, 0x8, 0xfffffffffffffff3, 0x9, 0x4, 0x8, 0x601]}) read$FUSE(r1, &(0x7f0000003e80)={0x2020}, 0x2020) 5.639181187s ago: executing program 5 (id=547): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x404440, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x40001cd, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000003, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce32", 0xfffffffffffffc3e, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000300)="84fb4000e612c1802b6b080cc2f784790d340e16916991432735b8e09d5ea33e01fe5f622cabe7d1dc9aadc4391661f7b1d2590a7f62c8b0fbc7d1f05d5a81d5c4a1b26727e1ec85291e8b8cad4c9d239f4b2ed9dd57831bc0fb063846bc63c0f5b1b6cca3ea06601e936b4f425e270506b25280b0475e9aed3a1c8f6741259163f9bd28656427e9991eb5caeb1453dc50a8948091d2c010abae70fb8a3a1a9215336e8c0df347411e2ab9fbd5f960b3d0be2553873881eb912edb6d16a32e9fc932139628afff44fdcb44e7915e1c42843528f544e55e1b2aaff9f714c4fe9e0252d8af30ce592334e0eb526cbb2d1f3c90a1561a939674", 0xf8, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x1000000005, 0x10001, 0xfffffffffffffffd, 0x7a6a, 0x4, 0xf, 0x6, 0x8, 0x9, 0x7, 0x2, 0x40000000], 0x2000, 0x8340}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00et/\x00\x00v4\x00\x00s/\x92y\x04\x00\x00\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20040600) unshare(0x24060400) fchdir(r6) unshare(0x4020400) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f00000002c0), 0x220, 0x100, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x17, &(0x7f0000000000), 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) 5.292085739s ago: executing program 1 (id=548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0xe4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r2) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) 4.998650005s ago: executing program 3 (id=549): syz_usb_connect(0x0, 0x4f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xea, 0xa1, 0xd8, 0x20, 0x50d, 0x705c, 0x4c08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x4, 0x66, 0x28, 0x1c, 0x0, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xb2, 0x4, 0x3}}, {{0x9, 0x5, 0x0, 0x2, 0x24af1e95166f8941, 0x0, 0x7f, 0xf}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x1, 0x7}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x7, 0xfff}]}}]}}]}}]}}, 0x0) 4.893864269s ago: executing program 4 (id=550): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x692, &(0x7f0000000280)={0x0, 0xb2ef, 0x80, 0x3, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r6, @ANYRES64=r5], 0x0) 4.679786236s ago: executing program 1 (id=551): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) io_uring_setup(0x5617, &(0x7f0000000200)={0x0, 0xfffffff9, 0x1f, 0x0, 0xfffffffd}) 4.198514833s ago: executing program 1 (id=552): syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f00006ce000/0x3000)=nil, 0x3000, 0x4) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) 3.714297088s ago: executing program 1 (id=554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x35d7, &(0x7f0000000480)={0x0, 0xd498, 0x100, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r3, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0x12, r5, 0x80000000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) close_range(r2, 0xffffffffffffffff, 0x0) 3.599951967s ago: executing program 0 (id=555): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) process_mrelease(0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xa00, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x801) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000a8f3d2207205200385010102030109021b0001000000000904"], 0x0) 3.046555763s ago: executing program 3 (id=556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe7) prctl$PR_SET_TSC(0x1a, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44030) sendto$inet6(r2, 0x0, 0x0, 0x4841, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x8, 0xd, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}]}, 0x20}], 0x1}, 0x24040080) 2.738932332s ago: executing program 3 (id=557): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x197302, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x299000, 0x28c000, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x7101}) r5 = socket$inet(0x2, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000300)=""/4096) 754.402879ms ago: executing program 5 (id=558): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRES32], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xfffff801, 0xfdfd}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x5) 518.387331ms ago: executing program 4 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000040)='#\x00', 0x1) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000080000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000054000380080001400000000008000240000000004000038014000100657270616e3000000000000000005054"], 0xc8}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="57eb2bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async, rerun: 32) unshare(0x20000580) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000140)={0x80}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 359.893896ms ago: executing program 1 (id=560): r0 = socket$inet6(0xa, 0x80000, 0xf7e7) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$fuse(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x20c284b, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100400000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000099000040"]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x61, 0x1, 0x8, 0x1, 0x31, 0x0, 0x5, 0x4b}}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) writev(r1, &(0x7f0000001200), 0x0) 188.423225ms ago: executing program 4 (id=561): unshare(0x22020600) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80080) readahead(r0, 0x8, 0xd87) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0001000000000904c50003ff0107000905050208000003010904"], 0x0) 6.497887ms ago: executing program 1 (id=562): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ea8000/0x3000)=nil, 0x10000, 0x0, 0x0, 0x201, 0x0, 0x2, 0x24}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sysfs$1(0x1, &(0x7f0000000300)='\\\'+$#\x00') syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet(0xa, 0x1, 0x100) listen(r4, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f010000", @ANYBLOB="f7", @ANYRESDEC], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x10000004}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=563): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=' '], 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0xdd01794b80f352c5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) gettid() kernel console output (not intermixed with test programs): ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.434559][ T5891] usb 2-1: device descriptor read/64, error -71 [ 148.477727][ T6674] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 148.502012][ T977] usb 5-1: USB disconnect, device number 15 [ 148.605110][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.731567][ T5891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 148.801762][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 148.810348][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 148.840029][ T9] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 148.861439][ T9] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 148.869987][ T9] usb 6-1: Product: syz [ 148.874538][ T5891] usb 2-1: device descriptor read/64, error -71 [ 148.894879][ T9] usb 6-1: Manufacturer: syz [ 148.915188][ T9] usb 6-1: SerialNumber: syz [ 148.935573][ T9] usb 6-1: config 0 descriptor?? [ 148.982881][ T5891] usb usb2-port1: attempt power cycle [ 149.167983][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 149.381588][ T5891] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 149.422595][ T5891] usb 2-1: device descriptor read/8, error -71 [ 149.665261][ T5891] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 149.712312][ T5891] usb 2-1: device descriptor read/8, error -71 [ 149.752122][ T6722] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 149.767059][ T6723] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 149.827557][ T5891] usb usb2-port1: unable to enumerate USB device [ 149.988336][ T5923] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 149.989043][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.046511][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.071648][ T9] gspca_sunplus: reg_w_riv err -71 [ 150.079292][ T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 150.096444][ T9] usb 6-1: USB disconnect, device number 4 [ 150.220418][ T5923] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 150.243802][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.279173][ T5923] usb 5-1: config 0 descriptor?? [ 150.379214][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 150.397644][ T6730] x_tables: duplicate underflow at hook 1 [ 150.623715][ T5923] gp8psk: usb in 128 operation failed. [ 150.948404][ T5923] gp8psk: usb in 146 operation failed. [ 150.967589][ T5923] gp8psk: failed to get FW version [ 150.991833][ T5923] gp8psk: usb in 149 operation failed. [ 151.018074][ T5923] gp8psk: failed to get FPGA version [ 151.044687][ T5923] gp8psk: usb in 138 operation failed. [ 151.050487][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 151.122594][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 151.145768][ T5923] usb 5-1: USB disconnect, device number 16 [ 151.624079][ T6745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.632869][ T5923] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 151.729669][ T6736] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 151.741650][ T6736] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 151.763996][ T6736] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 151.784322][ T6753] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.212'. [ 151.801983][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 151.823834][ T5923] usb 2-1: no configurations [ 151.828538][ T5923] usb 2-1: can't read configurations, error -22 [ 151.882831][ T6746] loop6: detected capacity change from 0 to 63 [ 151.900198][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.912558][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.942422][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.960079][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.970521][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.981589][ T5923] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 152.151545][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 152.157738][ T5923] usb 2-1: no configurations [ 152.187936][ T5923] usb 2-1: can't read configurations, error -22 [ 152.221968][ T5923] usb usb2-port1: attempt power cycle [ 152.571542][ T5923] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 152.591530][ T1211] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 152.610293][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 152.622122][ T5923] usb 2-1: no configurations [ 152.627033][ T5923] usb 2-1: can't read configurations, error -22 [ 152.761574][ T5923] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 152.774355][ T1211] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 152.784677][ T1211] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 152.784949][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 152.801992][ T1211] usb 6-1: config 0 has no interface number 0 [ 152.808178][ T1211] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.821641][ T5923] usb 2-1: no configurations [ 152.826317][ T5923] usb 2-1: can't read configurations, error -22 [ 152.836661][ T5923] usb usb2-port1: unable to enumerate USB device [ 152.846174][ T1211] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 152.909533][ T1211] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.931917][ T1211] usb 6-1: config 0 interface 52 has no altsetting 0 [ 152.950708][ T1211] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 152.965446][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 152.989298][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'. [ 153.022183][ T1211] usb 6-1: Product: syz [ 153.076111][ T1211] usb 6-1: SerialNumber: syz [ 153.088858][ T1211] usb 6-1: config 0 descriptor?? [ 153.319918][ T1211] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input10 [ 153.517322][ T5923] usb 6-1: USB disconnect, device number 5 [ 153.997514][ T6768] syz.0.216: attempt to access beyond end of device [ 153.997514][ T6768] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.825592][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 154.838221][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.013167][ T5923] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 156.214736][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.249779][ T5923] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.296616][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.354758][ T5923] usb 2-1: config 0 descriptor?? [ 156.390804][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 156.786843][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 158.021563][ T5924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 158.054321][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 158.054339][ T30] audit: type=1326 audit(1749521751.843:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x0 [ 158.203422][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 158.236930][ T5924] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 158.265202][ T5924] usb 6-1: config 0 has no interface number 0 [ 158.288860][ T5924] usb 6-1: config 0 interface 28 has no altsetting 0 [ 158.309416][ T5924] usb 6-1: New USB device found, idVendor=0789, idProduct=0164, bcdDevice=1d.b2 [ 158.324843][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.355880][ T5924] usb 6-1: Product: syz [ 158.373996][ T5924] usb 6-1: Manufacturer: syz [ 158.400984][ T5924] usb 6-1: SerialNumber: syz [ 158.440376][ T5924] usb 6-1: config 0 descriptor?? [ 158.676809][ T44] usb 6-1: USB disconnect, device number 6 [ 159.090281][ T5923] pwc: recv_control_msg error -71 req 02 val 2700 [ 159.140207][ T5923] pwc: recv_control_msg error -71 req 02 val 2c00 [ 159.168493][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 159.211354][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 159.229726][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 159.243085][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 159.272590][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 159.301622][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 159.352355][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 159.421218][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 159.429087][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 159.468442][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 159.505113][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.505278][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.522750][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.532239][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.579103][ T5923] pwc: Registered as video103. [ 159.608176][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 159.702956][ T5923] usb 2-1: USB disconnect, device number 30 [ 159.739391][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.771602][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 159.780339][ T6844] : renamed from bridge_slave_0 (while UP) [ 159.782307][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.846015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.891346][ T9] usb 4-1: config 0 descriptor?? [ 159.923157][ T44] usb 6-1: device descriptor read/64, error -71 [ 159.930829][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 160.181788][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 160.326899][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 160.359992][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 160.371656][ T44] usb 6-1: device descriptor read/64, error -71 [ 160.382437][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 160.398570][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 160.429878][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 160.447560][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 160.462418][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 160.469928][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 160.482375][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 160.489795][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 160.501518][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 160.509109][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 160.516774][ T44] usb usb6-port1: attempt power cycle [ 160.522581][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 160.523370][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 160.546080][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 160.582981][ T9] pwc: Registered as video103. [ 160.589738][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 160.780424][ T9] usb 4-1: USB disconnect, device number 16 [ 160.806664][ T6856] capability: warning: `syz.4.242' uses 32-bit capabilities (legacy support in use) [ 160.822160][ T5924] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 160.892425][ T44] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 160.935548][ T44] usb 6-1: device descriptor read/8, error -71 [ 160.979455][ T6860] loop8: detected capacity change from 0 to 8 [ 160.988651][ T6860] Dev loop8: unable to read RDB block 8 [ 160.998689][ T6860] loop8: unable to read partition table [ 161.004920][ T6860] loop8: partition table beyond EOD, truncated [ 161.006595][ T5924] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 161.011746][ T6860] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 161.021938][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.067047][ T5924] usb 2-1: Product: syz [ 161.074676][ T5924] usb 2-1: Manufacturer: syz [ 161.079332][ T5924] usb 2-1: SerialNumber: syz [ 161.090520][ T5924] usb 2-1: config 0 descriptor?? [ 161.105285][ T5924] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 161.131563][ T6859] vlan2: entered promiscuous mode [ 161.142044][ T6859] vlan2: entered allmulticast mode [ 161.149436][ T6859] hsr_slave_1: entered allmulticast mode [ 161.181340][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 161.191615][ T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 161.242761][ T44] usb 6-1: device descriptor read/8, error -71 [ 161.352174][ T44] usb usb6-port1: unable to enumerate USB device [ 161.459627][ T5924] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 161.493188][ T5924] sq905c 2-1:0.0: Get version command failed [ 161.499359][ T5924] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 161.541752][ T5924] usb 2-1: USB disconnect, device number 31 [ 161.651909][ T6870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.820957][ T6870] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.847388][ T6870] bond0: (slave lo): Error: Device type is different from other slaves [ 162.861524][ T5924] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 163.042831][ T5924] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 163.061501][ T5924] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 163.074852][ T5924] usb 6-1: config 8 has no interface number 0 [ 163.082709][ T5924] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 163.156840][ T5924] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.327249][ T5924] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 163.350279][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.372061][ T5924] usb 6-1: Product: syz [ 163.382399][ T5924] usb 6-1: Manufacturer: syz [ 163.393946][ T5924] usb 6-1: SerialNumber: syz [ 163.648881][ T5924] usb 6-1: USB disconnect, device number 11 [ 163.779184][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 163.779271][ T10] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 163.810547][ T30] audit: type=1326 audit(1749521757.583:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6901 comm="syz.1.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07f658e929 code=0x0 [ 163.833720][ T10] usb 1-1: USB disconnect, device number 3 [ 163.972661][ T5960] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 164.121511][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 164.136708][ T5960] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.136743][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.136766][ T5960] usb 4-1: Product: syz [ 164.136782][ T5960] usb 4-1: Manufacturer: syz [ 164.136798][ T5960] usb 4-1: SerialNumber: syz [ 164.156447][ T5960] usb 4-1: config 0 descriptor?? [ 164.429637][ T5960] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.638707][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'. [ 164.694227][ T6917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'. [ 164.744176][ T6917] dummy0: entered promiscuous mode [ 164.769838][ T6917] team0: entered promiscuous mode [ 164.787653][ T6917] team_slave_0: entered promiscuous mode [ 164.834503][ T6917] team_slave_1: entered promiscuous mode [ 164.860563][ T6907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.882756][ T6907] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.074497][ T6907] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.139800][ T6907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.149220][ T6907] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.172706][ T5960] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 165.399847][ T6907] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.425070][ T6907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.445381][ T6907] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.468540][ T6907] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.589281][ T6907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.596479][ T6907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 165.610897][ T6907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 165.705774][ T6907] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 165.733776][ T6907] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 165.757498][ T6907] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 166.053176][ T5923] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 166.091563][ T5960] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 166.411525][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.476006][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.488233][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.498391][ T5960] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.742714][ T5923] usb 2-1: config 0 has no interfaces? [ 166.777120][ T5960] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.786531][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.799374][ T5960] usb 6-1: config 0 descriptor?? [ 166.871506][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 166.901266][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.911759][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.919904][ T5923] usb 2-1: Product: syz [ 166.925489][ T5923] usb 2-1: Manufacturer: syz [ 166.930242][ T5923] usb 2-1: SerialNumber: syz [ 166.940276][ T5923] usb 2-1: config 0 descriptor?? [ 167.201643][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.268995][ T5960] usbhid 6-1:0.0: can't add hid device: -71 [ 167.275975][ T5923] usb 4-1: USB disconnect, device number 17 [ 167.292326][ T5960] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 167.382918][ T5960] usb 6-1: USB disconnect, device number 12 [ 167.456436][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.464406][ T30] audit: type=1400 audit(1749521761.213:31): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6923 comm="syz.1.262" [ 167.613899][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.681671][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 167.706351][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.760682][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 167.823779][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 167.857103][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.896988][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.107643][ T9] usb 5-1: Manufacturer: syz [ 168.111937][ T6110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.137369][ T9] usb 5-1: config 0 descriptor?? [ 168.498627][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.042071][ T6110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.281619][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.506204][ T6110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.521920][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.683718][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.738662][ T5924] usb 2-1: USB disconnect, device number 32 [ 169.771624][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 169.960921][ T5960] usb 5-1: USB disconnect, device number 17 [ 170.136707][ T6110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.234195][ T5924] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 170.431670][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 170.461582][ T5923] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 170.474368][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.528846][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.561629][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.591602][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.659459][ T5924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.681526][ T5923] usb 5-1: device descriptor read/64, error -71 [ 170.738864][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.745470][ T6110] bridge_slave_1: left allmulticast mode [ 170.799020][ T6110] bridge_slave_1: left promiscuous mode [ 170.800590][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.813070][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.905044][ T6110] bridge_slave_0: left allmulticast mode [ 170.911563][ T5924] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.939998][ T6110] bridge_slave_0: left promiscuous mode [ 170.951656][ T5924] usb 2-1: Manufacturer: syz [ 170.960562][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.981818][ T5923] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 170.995805][ T5924] usb 2-1: config 0 descriptor?? [ 171.151630][ T5923] usb 5-1: device descriptor read/64, error -71 [ 171.303180][ T5923] usb usb5-port1: attempt power cycle [ 171.381560][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.416051][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.491806][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.601527][ T5924] rc_core: IR keymap rc-hauppauge not found [ 171.612351][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.643194][ T5924] Registered IR keymap rc-empty [ 171.651593][ T5923] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 171.765821][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 171.768624][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.803993][ T5923] usb 5-1: device descriptor read/8, error -71 [ 171.821597][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 171.831717][ T6979] fuse: root generation should be zero [ 171.841589][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 171.884180][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 171.958829][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 172.014377][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.043211][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.086603][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 172.105789][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.111699][ T5923] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 172.122183][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.147877][ T5923] usb 5-1: device descriptor read/8, error -71 [ 172.161640][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.199125][ T10] usb 4-1: config 0 descriptor?? [ 172.231620][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.292047][ T5923] usb usb5-port1: unable to enumerate USB device [ 172.302146][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.310326][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 172.357587][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.461787][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.561914][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.611830][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.678455][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.690198][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 172.697159][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.763753][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 172.772418][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 172.786482][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 172.800998][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 172.813779][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 172.824063][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 172.832050][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 172.858837][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 172.903958][ T5924] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.069087][ T5924] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.093508][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 173.107209][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 173.136132][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.182092][ T6989] FAULT_INJECTION: forcing a failure. [ 173.182092][ T6989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.219513][ T5924] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.231572][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.251349][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 173.274618][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.1.279 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 173.274649][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.274670][ T6989] Call Trace: [ 173.274679][ T6989] [ 173.274688][ T6989] dump_stack_lvl+0x189/0x250 [ 173.274736][ T6989] ? __pfx____ratelimit+0x10/0x10 [ 173.274769][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.274802][ T6989] ? __pfx__printk+0x10/0x10 [ 173.274826][ T6989] ? __might_fault+0xb0/0x130 [ 173.274858][ T6989] should_fail_ex+0x414/0x560 [ 173.274891][ T6989] _copy_to_iter+0x1db/0x16f0 [ 173.274923][ T6989] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 173.274955][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.274990][ T6989] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.275022][ T6989] ? __pfx__copy_to_iter+0x10/0x10 [ 173.275051][ T6989] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 173.275088][ T6989] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 173.275125][ T6989] __skb_datagram_iter+0xf8/0x990 [ 173.275158][ T6989] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 173.275197][ T6989] skb_copy_datagram_iter+0xc5/0x230 [ 173.275233][ T6989] raw_recvmsg+0x1da/0x760 [ 173.275271][ T6989] ? __pfx_raw_recvmsg+0x10/0x10 [ 173.275303][ T6989] ? aa_sk_perm+0x81e/0x950 [ 173.275328][ T6989] ? sock_rps_record_flow+0x19/0x410 [ 173.275351][ T6989] ? __pfx_raw_recvmsg+0x10/0x10 [ 173.275380][ T6989] inet_recvmsg+0x247/0x250 [ 173.275404][ T6989] ? __pfx_inet_recvmsg+0x10/0x10 [ 173.275428][ T6989] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 173.275454][ T6989] ? security_socket_recvmsg+0x7e/0x2e0 [ 173.275491][ T6989] sock_recvmsg+0x1a8/0x270 [ 173.275524][ T6989] sock_read_iter+0x231/0x2f0 [ 173.275559][ T6989] ? __pfx_sock_read_iter+0x10/0x10 [ 173.275603][ T6989] ? bpf_lsm_file_permission+0x9/0x20 [ 173.275636][ T6989] ? security_file_permission+0x75/0x290 [ 173.275668][ T6989] vfs_read+0x4cd/0x980 [ 173.275710][ T6989] ? __pfx_vfs_read+0x10/0x10 [ 173.275753][ T6989] ? __fget_files+0x2a/0x420 [ 173.275787][ T6989] ksys_read+0x145/0x250 [ 173.275809][ T6989] ? __pfx_ksys_read+0x10/0x10 [ 173.275839][ T6989] ? rcu_is_watching+0x15/0xb0 [ 173.275877][ T6989] ? do_syscall_64+0xbe/0x3b0 [ 173.275902][ T6989] do_syscall_64+0xfa/0x3b0 [ 173.275920][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.275951][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.275972][ T6989] ? clear_bhb_loop+0x60/0xb0 [ 173.275998][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.276019][ T6989] RIP: 0033:0x7f07f658e929 [ 173.276044][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.276061][ T6989] RSP: 002b:00007f07f73e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.276083][ T6989] RAX: ffffffffffffffda RBX: 00007f07f67b5fa0 RCX: 00007f07f658e929 [ 173.276099][ T6989] RDX: 0000000000002020 RSI: 0000200000003e80 RDI: 0000000000000004 [ 173.276112][ T6989] RBP: 00007f07f73e2090 R08: 0000000000000000 R09: 0000000000000000 [ 173.276125][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.276136][ T6989] R13: 0000000000000000 R14: 00007f07f67b5fa0 R15: 00007f07f68dfa28 [ 173.276168][ T6989] [ 173.758936][ T10] pwc: Registered as video103. [ 173.766343][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 173.768002][ T5924] usb 2-1: USB disconnect, device number 33 [ 174.030319][ T10] usb 4-1: USB disconnect, device number 18 [ 174.335833][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 174.441670][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 174.502542][ T7002] input: syz1 as /devices/virtual/input/input15 [ 175.589132][ T6110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.616269][ T6110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.616727][ T7022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.681027][ T6110] bond0 (unregistering): Released all slaves [ 175.931511][ T5944] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 176.164824][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 176.211061][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.235352][ T5944] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 176.256176][ T5944] usb 5-1: config 244 has no interface number 0 [ 176.259336][ T7031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 176.269046][ T7031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.328199][ T5944] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 176.413887][ T7031] vhci_hcd vhci_hcd.0: Device attached [ 176.416430][ T5944] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 176.432439][ T7032] vhci_hcd: connection closed [ 176.455908][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.459161][ T37] vhci_hcd: stop threads [ 176.482213][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.492942][ T5944] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 176.512584][ T37] vhci_hcd: release socket [ 176.517319][ T37] vhci_hcd: disconnect device [ 176.534693][ T5944] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 176.563342][ T5944] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 176.589375][ T5944] usb 5-1: config 244 interface 68 has no altsetting 0 [ 176.633170][ T5944] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 176.648885][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.673821][ T5944] usb 5-1: Product: syz [ 176.682065][ T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 176.707802][ T5944] usb 5-1: Manufacturer: syz [ 176.718131][ T5944] usb 5-1: SerialNumber: syz [ 176.726655][ T7043] usb usb9: usbfs: process 7043 (syz.5.290) did not claim interface 0 before use [ 176.861512][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 176.975194][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.015649][ T10] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 177.032037][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.060618][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.123271][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.166208][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.191842][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 177.197066][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.218827][ T10] usb usb1-port1: attempt power cycle [ 177.261800][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.286284][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.339906][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.360512][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.403510][ T6110] hsr_slave_0: left promiscuous mode [ 177.440628][ T6110] hsr_slave_1: left promiscuous mode [ 177.482405][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.489955][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.523236][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.553950][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.569830][ T5944] comedi comedi0: Endpoint has wrong direction [ 177.581738][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 177.601485][ T5944] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 177.622625][ T5924] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 177.633443][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 177.641766][ T1211] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 177.660840][ T6110] veth1_macvtap: left promiscuous mode [ 177.682735][ T5944] usb 5-1: USB disconnect, device number 22 [ 177.686004][ T6110] veth0_macvtap: left promiscuous mode [ 177.720545][ T6110] veth1_vlan: left promiscuous mode [ 177.756463][ T6110] veth0_vlan: left promiscuous mode [ 177.772141][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 177.781644][ T1211] usb 4-1: device descriptor read/64, error -71 [ 177.804585][ T5924] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 177.818850][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.821852][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 177.866066][ T5924] usb 6-1: config 0 descriptor?? [ 177.866306][ T10] usb usb1-port1: unable to enumerate USB device [ 177.898736][ T5924] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 177.924267][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 177.968658][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 178.008859][ T5924] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 178.024350][ T1211] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 178.039393][ T5924] usb 6-1: media controller created [ 178.072544][ T5924] dvb-usb: bulk message failed: -22 (5/0) [ 178.110207][ T5924] dvb-usb: MAC address reading failed. [ 178.143337][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.189066][ T1211] usb 4-1: device descriptor read/64, error -71 [ 178.205477][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 178.212369][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 178.239662][ T5924] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 178.305692][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 178.317430][ T1211] usb usb4-port1: attempt power cycle [ 178.328728][ T5924] dvb-usb: schedule remote query interval to 100 msecs. [ 178.346658][ T5924] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 178.378367][ T5924] usb 6-1: USB disconnect, device number 13 [ 178.540509][ T5924] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 178.672825][ T1211] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 178.712943][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 178.732945][ T1211] usb 4-1: device descriptor read/8, error -71 [ 178.951797][ T5923] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 178.976041][ T1211] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 179.012328][ T1211] usb 4-1: device descriptor read/8, error -71 [ 179.139454][ T1211] usb usb4-port1: unable to enumerate USB device [ 179.147917][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.169370][ T5923] usb 2-1: not running at top speed; connect to a high speed hub [ 179.232639][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.250617][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.294909][ T5923] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.40 [ 179.308526][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.316916][ T5923] usb 2-1: Product: Ђ [ 179.321206][ T5923] usb 2-1: Manufacturer: 周✭൥⣧踗मᏹ㦓细䏎Ჲ눨ᇀ㎻⢯沞쵒ខ䝭鍥繊楴≿鍷⎔䏬谚磎䝜ᯎ췦狿೛挏ᐌ㤼ఉ汥홃끁뼁얍䍳搜긄ꕁㅊ鼂鐃Œ箁膝郫㦃ᰧ঍暕芴긞狙㘗ﯮ⼽䯋驄쁡쳅꾙隦≤貳퇳懩 [ 179.353402][ T5923] usb 2-1: SerialNumber: syz [ 179.380234][ T7082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.960350][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 180.054809][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 182.128155][ T5923] usbhid 2-1:1.0: can't add hid device: -71 [ 182.166321][ T5923] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 182.232373][ T5923] usb 2-1: USB disconnect, device number 34 [ 182.312530][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.322147][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.664893][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.693040][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.831723][ T7120] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 182.858157][ T7110] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.868777][ T7110] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.880021][ T7110] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.903288][ T7110] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.992194][ T7120] usb 4-1: device descriptor read/64, error -71 [ 183.044137][ T7110] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.054420][ T7110] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.064349][ T7110] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.073411][ T7110] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.251500][ T5960] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 183.261066][ T7120] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 183.442642][ T5960] usb 2-1: device descriptor read/64, error -71 [ 183.449049][ T7120] usb 4-1: device descriptor read/64, error -71 [ 183.572201][ T7120] usb usb4-port1: attempt power cycle [ 183.701735][ T5960] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 183.797906][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 183.844549][ T5960] usb 2-1: device descriptor read/64, error -71 [ 183.951566][ T7120] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 183.977867][ T5960] usb usb2-port1: attempt power cycle [ 184.024654][ T7120] usb 4-1: device descriptor read/8, error -71 [ 184.261593][ T7120] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 184.302397][ T7120] usb 4-1: device descriptor read/8, error -71 [ 184.351486][ T5960] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 184.382829][ T5960] usb 2-1: device descriptor read/8, error -71 [ 184.433836][ T7120] usb usb4-port1: unable to enumerate USB device [ 184.626066][ T5960] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 184.694414][ T5960] usb 2-1: device descriptor read/8, error -71 [ 184.805796][ T7120] hid (null): unknown global tag 0xe [ 184.815377][ T7120] hid (null): global environment stack underflow [ 184.833186][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 184.843519][ T5960] usb usb2-port1: unable to enumerate USB device [ 184.871625][ T7120] hid-generic 0038:0002:0635.0005: unknown global tag 0xe [ 184.879070][ T7120] hid-generic 0038:0002:0635.0005: item 0 2 1 14 parsing failed [ 184.888918][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 184.924187][ T7120] hid-generic 0038:0002:0635.0005: probe with driver hid-generic failed with error -22 [ 185.078817][ T7191] veth1_macvtap: left promiscuous mode [ 185.084510][ T7191] macsec0: entered allmulticast mode [ 185.113323][ T7191] veth1_macvtap: entered promiscuous mode [ 185.119265][ T7191] veth1_macvtap: entered allmulticast mode [ 185.159727][ T7191] macsec0: left allmulticast mode [ 185.184662][ T7191] veth1_macvtap: left allmulticast mode [ 185.431530][ T7120] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.610876][ T7120] usb 1-1: Using ep0 maxpacket: 8 [ 185.641308][ T7120] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.671578][ T7120] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 185.691497][ T7120] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.734511][ T7120] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 185.757181][ T7120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.794611][ T7120] usb 1-1: Product: syz [ 185.798889][ T7120] usb 1-1: Manufacturer: syz [ 185.828358][ T7120] usb 1-1: SerialNumber: syz [ 185.845443][ T7120] usb 1-1: config 0 descriptor?? [ 185.887995][ T7219] PM: Enabling pm_trace changes system date and time during resume. [ 185.887995][ T7219] PM: Correct system time has to be restored manually after resume. [ 185.888070][ T7120] imon_raw 1-1:0.0: IR endpoint missing [ 186.247492][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 186.326098][ T7120] usb 1-1: USB disconnect, device number 8 [ 186.436109][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 186.491635][ T9] usb 5-1: config 75 has an invalid interface number: 92 but max is 1 [ 186.512006][ T9] usb 5-1: config 75 has an invalid descriptor of length 0, skipping remainder of the config [ 186.533088][ T9] usb 5-1: config 75 has 1 interface, different from the descriptor's value: 2 [ 186.579808][ T9] usb 5-1: config 75 has no interface number 0 [ 186.617137][ T9] usb 5-1: config 75 interface 92 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 186.669934][ T9] usb 5-1: config 75 interface 92 altsetting 9 bulk endpoint 0xE has invalid maxpacket 8 [ 186.694455][ T9] usb 5-1: config 75 interface 92 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 186.721720][ T9] usb 5-1: config 75 interface 92 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 186.741277][ T9] usb 5-1: config 75 interface 92 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 186.760183][ T9] usb 5-1: config 75 interface 92 has no altsetting 0 [ 186.782748][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=d82b, bcdDevice=6f.aa [ 186.792902][ T7115] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 186.808567][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.847451][ T9] usb 5-1: Product: 㼧넮凗ꦜ᪏ಃ륷슦厸㑺昡ﲪ怷뇴킌좘锸릐襚虯롦쬗嶉Д簃ẝ쪴샎ﷆꏠ狎魯狳⫀좋四䜱✠⑌힑ꌓ⥞匿༰乘黏껅᪥鲟葂᳏ꥉႩ㦕旍ຸ啑뛄쯠덦Ṟ㎤ꯤ끐ﳋꎬ㞫⯩ꆙ쮄ĝ庬ꯡ룡ﶇ熿趤 [ 186.851574][ T7120] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 186.883573][ T9] usb 5-1: Manufacturer: ⌹仺㣋Ꙍᲄ섽奖ड़襬쀧矀⁰擊鄃ྌ୦䤁₉樿㨔뢐뷝㻹ċ⳼㔃캲㔥 [ 186.898494][ T9] usb 5-1: SerialNumber: ᠉ [ 187.009177][ T7224] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.044880][ T7115] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.060275][ T7115] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.080283][ T7115] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.142465][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.177517][ T7120] usb 6-1: Using ep0 maxpacket: 32 [ 187.215531][ T7115] usb 4-1: config 0 descriptor?? [ 187.220987][ T7120] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 187.226716][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.231840][ T7120] usb 6-1: can't read configurations, error -22 [ 187.258054][ T7115] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.282549][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.300027][ T7115] dvb-usb: bulk message failed: -22 (3/0) [ 187.386120][ T7115] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.424047][ T9] usb 5-1: USB disconnect, device number 23 [ 187.439263][ T7115] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.452659][ T7120] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 187.490843][ T7115] usb 4-1: media controller created [ 187.573482][ T7115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.631763][ T7120] usb 6-1: Using ep0 maxpacket: 32 [ 187.648160][ T7115] dvb-usb: bulk message failed: -22 (6/0) [ 187.664307][ T7120] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 187.691787][ T7115] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 187.700939][ T7120] usb 6-1: can't read configurations, error -22 [ 187.731300][ T7120] usb usb6-port1: attempt power cycle [ 187.740250][ T7115] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 187.813942][ T7115] dvb-usb: schedule remote query interval to 150 msecs. [ 187.845890][ T7115] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.003850][ T7115] dvb-usb: bulk message failed: -22 (1/0) [ 188.042681][ T7115] dvb-usb: error while querying for an remote control event. [ 188.087964][ T7115] usb 4-1: USB disconnect, device number 27 [ 188.102884][ T7120] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 188.155070][ T7120] usb 6-1: Using ep0 maxpacket: 32 [ 188.172718][ T7120] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 188.206657][ T7120] usb 6-1: can't read configurations, error -22 [ 188.283359][ T7115] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.381481][ T7120] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 188.453176][ T7120] usb 6-1: Using ep0 maxpacket: 32 [ 188.485557][ T7120] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 188.524883][ T7120] usb 6-1: can't read configurations, error -22 [ 188.524881][ T5944] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 188.615111][ T7120] usb usb6-port1: unable to enumerate USB device [ 188.690217][ T5944] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 188.761489][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.802272][ T5944] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 188.818084][ T5944] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 188.878670][ T5944] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 188.927336][ T5944] usb 5-1: Product: syz [ 188.947325][ T5944] usb 5-1: Manufacturer: syz [ 188.958928][ T5944] usb 5-1: SerialNumber: syz [ 188.971986][ T5944] usb 5-1: config 0 descriptor?? [ 188.985195][ T5944] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.051113][ T7293] random: crng reseeded on system resumption [ 189.107423][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 189.309208][ T5944] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 189.421689][ T5944] usb 5-1: USB disconnect, device number 24 [ 189.487408][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.019612][ T30] audit: type=1326 audit(1749521783.803:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.142846][ T7319] binder: BINDER_SET_CONTEXT_MGR already set [ 190.156116][ T7320] netlink: 52 bytes leftover after parsing attributes in process `syz.4.343'. [ 190.165192][ T7319] binder: 7317:7319 ioctl 4018620d 2000000000c0 returned -16 [ 190.172753][ T30] audit: type=1326 audit(1749521783.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 190.601625][ T30] audit: type=1326 audit(1749521783.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.646438][ T30] audit: type=1326 audit(1749521783.803:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.689601][ T30] audit: type=1326 audit(1749521783.803:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 190.832026][ T5944] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 190.890720][ T30] audit: type=1326 audit(1749521783.803:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.914412][ T30] audit: type=1326 audit(1749521783.803:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.938558][ T30] audit: type=1326 audit(1749521783.803:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 190.961842][ T30] audit: type=1326 audit(1749521783.803:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 190.984131][ T30] audit: type=1326 audit(1749521783.803:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 191.066146][ T5944] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 191.149274][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 191.183548][ T5944] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 191.228139][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.362100][ T5944] usb 6-1: config 0 descriptor?? [ 191.474753][ T7338] IPVS: length: 24 != 6292344 [ 191.607450][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.617396][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.852435][ T7120] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 192.027345][ T7120] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.043534][ T7120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.051083][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 192.057732][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 192.078030][ T7120] usb 5-1: Product: syz [ 192.142150][ T5944] usb 6-1: USB disconnect, device number 18 [ 192.169326][ T7120] usb 5-1: Manufacturer: syz [ 192.184799][ T7120] usb 5-1: SerialNumber: syz [ 192.204329][ T7120] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.227058][ T7115] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.371638][ T5916] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 192.601574][ T5916] usb 4-1: device descriptor read/64, error -71 [ 192.630354][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.671821][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.882540][ T5916] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 193.007838][ T5960] usb 5-1: USB disconnect, device number 25 [ 193.081911][ T5916] usb 4-1: device descriptor read/64, error -71 [ 193.218251][ T5916] usb usb4-port1: attempt power cycle [ 193.414722][ T7375] geneve2: entered promiscuous mode [ 193.420210][ T7375] geneve2: entered allmulticast mode [ 193.511072][ T7115] usb 5-1: Service connection timeout for: 256 [ 193.521198][ T7115] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 193.542406][ T7115] ath9k_htc: Failed to initialize the device [ 193.556803][ T5960] usb 5-1: ath9k_htc: USB layer deinitialized [ 193.571846][ T5916] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 193.627042][ T5916] usb 4-1: device descriptor read/8, error -71 [ 193.638022][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.671512][ T5923] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 193.848534][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 193.861302][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 193.884232][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.884937][ T5916] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 194.055144][ T5916] usb 4-1: device descriptor read/8, error -71 [ 194.063682][ T5923] usb 2-1: Product: syz [ 194.067906][ T5923] usb 2-1: Manufacturer: syz [ 194.077627][ T5923] usb 2-1: SerialNumber: syz [ 194.086920][ T5923] usb 2-1: config 0 descriptor?? [ 194.141679][ T5960] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 194.185510][ T5916] usb usb4-port1: unable to enumerate USB device [ 194.300552][ T5923] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.322353][ T5960] usb 5-1: no configurations [ 194.327080][ T5960] usb 5-1: can't read configurations, error -22 [ 194.364211][ T7389] netlink: 'syz.5.356': attribute type 16 has an invalid length. [ 194.482175][ T5960] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 194.724552][ T5960] usb 5-1: no configurations [ 194.729371][ T5960] usb 5-1: can't read configurations, error -22 [ 194.802973][ T5960] usb usb5-port1: attempt power cycle [ 195.183386][ T5960] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 195.224982][ T5960] usb 5-1: no configurations [ 195.230032][ T5960] usb 5-1: can't read configurations, error -22 [ 195.382273][ T5960] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 195.400444][ T7114] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 195.433305][ T5960] usb 5-1: no configurations [ 195.437980][ T5960] usb 5-1: can't read configurations, error -22 [ 195.449759][ T5960] usb usb5-port1: unable to enumerate USB device [ 195.533376][ T7404] loop6: detected capacity change from 0 to 7 [ 195.565488][ T7114] usb 1-1: config 2 has an invalid interface number: 108 but max is 0 [ 195.586681][ T7114] usb 1-1: config 2 has no interface number 0 [ 195.595396][ T7404] Dev loop6: unable to read RDB block 7 [ 195.601044][ T7404] loop6: unable to read partition table [ 195.614407][ T7114] usb 1-1: config 2 interface 108 has no altsetting 0 [ 195.655428][ T7114] usb 1-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 195.665045][ T7114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.673621][ T7404] loop6: partition table beyond EOD, truncated [ 195.681149][ T7114] usb 1-1: Product: syz [ 195.688721][ T5923] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 195.704024][ T7114] usb 1-1: Manufacturer: syz [ 195.710599][ T7404] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 195.731892][ T7114] usb 1-1: SerialNumber: syz [ 195.927456][ T5923] usb 2-1: USB disconnect, device number 39 [ 196.085649][ T7114] usb 1-1: Could not find all expected endpoints [ 196.120256][ T7114] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.147931][ T7114] usb 1-1: MIDIStreaming interface descriptor not found [ 196.165052][ T7412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.299888][ T7114] usb 1-1: USB disconnect, device number 9 [ 196.483826][ T6499] udevd[6499]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.108/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.863389][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.365'. [ 196.979251][ T7453] input: syz1 as /devices/virtual/input/input18 [ 197.061582][ T5923] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 197.221462][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 197.242680][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 197.308338][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.341530][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.349664][ T5923] usb 4-1: Product: syz [ 197.376075][ T5923] usb 4-1: Manufacturer: syz [ 197.381192][ T5923] usb 4-1: SerialNumber: syz [ 197.452925][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.499636][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 197.511778][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 197.524149][ T5923] usb 4-1: config 0 descriptor?? [ 197.531623][ T9] usb 5-1: Product: syz [ 197.552743][ T9] usb 5-1: Manufacturer: syz [ 197.623666][ T9] usb 5-1: SerialNumber: syz [ 197.746879][ T5923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.872738][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.601486][ T7114] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 198.816659][ T5923] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 198.841148][ T7114] usb 2-1: Using ep0 maxpacket: 8 [ 198.875908][ T7114] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.927081][ T5923] usb 4-1: USB disconnect, device number 32 [ 198.941539][ T7114] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 198.988805][ T7114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.020682][ T7114] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.098822][ T7114] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 199.116784][ T7114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.139397][ T7114] usb 2-1: Product: syz [ 199.150698][ T7114] usb 2-1: Manufacturer: syz [ 199.165204][ T7114] usb 2-1: SerialNumber: syz [ 199.205427][ T7114] usb 2-1: config 0 descriptor?? [ 199.616368][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.633034][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.656126][ T7114] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 199.736828][ T7496] netlink: 'syz.3.375': attribute type 29 has an invalid length. [ 199.750907][ T7496] netlink: 'syz.3.375': attribute type 29 has an invalid length. [ 199.971036][ T7498] netlink: 500 bytes leftover after parsing attributes in process `syz.3.375'. [ 199.995353][ T7498] unsupported nla_type 58 [ 200.151572][ T7114] rc_core: IR keymap rc-imon-pad not found [ 200.219521][ T7114] Registered IR keymap rc-empty [ 200.270078][ T7114] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 200.292095][ T7114] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 200.303664][ T7114] imon:send_packet: packet tx failed (-71) [ 200.321839][ T7114] imon 2-1:0.0: remote input dev register failed [ 200.339902][ T7114] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 200.429775][ T7114] imon 2-1:0.0: unable to initialize intf0, err 0 [ 200.443784][ T7114] imon:imon_probe: failed to initialize context! [ 200.572131][ T7114] imon 2-1:0.0: unable to register, err -19 [ 200.591890][ T7114] usb 2-1: USB disconnect, device number 40 [ 200.606982][ T6152] udevd[6152]: setting mode of /dev/bus/usb/002/040 to 020664 failed: No such file or directory [ 200.731132][ T6152] udevd[6152]: setting owner of /dev/bus/usb/002/040 to uid=0, gid=0 failed: No such file or directory [ 201.041906][ T7114] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 201.209182][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 201.221740][ T7114] usb 2-1: Using ep0 maxpacket: 32 [ 201.236914][ T7114] usb 2-1: too many configurations: 100, using maximum allowed: 8 [ 201.254575][ T7114] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 201.263651][ T5960] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 201.279001][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.292713][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.382'. [ 201.303202][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.306767][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 201.313790][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.336169][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 201.343883][ T7114] usb 2-1: config index 1 descriptor too short (expected 35577, got 27) [ 201.355007][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.374063][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.392189][ T5891] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 201.401705][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.422542][ T7114] usb 2-1: config index 2 descriptor too short (expected 35577, got 27) [ 201.430969][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.452905][ T5960] usb 4-1: config 0 has no interfaces? [ 201.460985][ T5960] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 201.481824][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.489946][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.515290][ T5960] usb 4-1: Product: syz [ 201.519558][ T5960] usb 4-1: Manufacturer: syz [ 201.534269][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.544388][ T5960] usb 4-1: SerialNumber: syz [ 201.558876][ T7114] usb 2-1: config index 3 descriptor too short (expected 35577, got 27) [ 201.561553][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 201.568175][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.592497][ T5960] usb 4-1: config 0 descriptor?? [ 201.601197][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.621139][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.631512][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.633585][ T7114] usb 2-1: config index 4 descriptor too short (expected 35577, got 27) [ 201.641336][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.680076][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.688797][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.701741][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.730125][ T5891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.735177][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.767640][ T7114] usb 2-1: config index 5 descriptor too short (expected 35577, got 27) [ 201.768296][ T5891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.777539][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.796716][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.849623][ T5960] usb 4-1: USB disconnect, device number 33 [ 201.855178][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.874257][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.917225][ T7114] usb 2-1: config index 6 descriptor too short (expected 35577, got 27) [ 201.926783][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.951354][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.972419][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 201.995799][ T7114] usb 2-1: config index 7 descriptor too short (expected 35577, got 27) [ 202.004947][ T7114] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.023109][ T7114] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.041705][ T7114] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 202.054386][ T7544] syz.5.384 (7544): drop_caches: 0 [ 202.109949][ T7114] usb 2-1: New USB device found, idVendor=0e41, idProduct=3f0f, bcdDevice=d7.d2 [ 202.124388][ T7114] usb 2-1: New USB device strings: Mfr=215, Product=104, SerialNumber=252 [ 202.132063][ T5891] usb 1-1: GET_CAPABILITIES returned 0 [ 202.137251][ T7114] usb 2-1: Product: syz [ 202.144276][ T5891] usbtmc 1-1:16.0: can't read capabilities [ 202.147343][ T7114] usb 2-1: Manufacturer: syz [ 202.158888][ T7114] usb 2-1: SerialNumber: syz [ 202.335054][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.344100][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.725931][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.740896][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.953647][ T7114] usb 2-1: USB disconnect, device number 41 [ 203.617230][ T7114] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 203.794362][ T7579] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 203.812666][ T7114] usb 4-1: Using ep0 maxpacket: 32 [ 203.820049][ T7114] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 203.837933][ T7114] usb 4-1: config 0 has no interface number 0 [ 203.852778][ T7114] usb 4-1: config 0 interface 12 has no altsetting 0 [ 203.863165][ T7114] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 203.872587][ T7114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.880652][ T7114] usb 4-1: Product: syz [ 203.885469][ T7114] usb 4-1: Manufacturer: syz [ 203.890120][ T7114] usb 4-1: SerialNumber: syz [ 203.898108][ T7114] usb 4-1: config 0 descriptor?? [ 204.007930][ T9] usb 1-1: USB disconnect, device number 10 [ 204.147379][ T7579] bond1: entered promiscuous mode [ 204.147518][ T7584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.159950][ T7579] bond1: entered allmulticast mode [ 204.263836][ T7580] geneve2: entered allmulticast mode [ 204.296219][ T7580] bond1: (slave geneve2): making interface the new active one [ 204.303925][ T7580] geneve2: entered promiscuous mode [ 204.316937][ T7580] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 204.511540][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.752713][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.772271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.793015][ T5916] usb 5-1: USB disconnect, device number 30 [ 204.802525][ T5916] usblp0: removed [ 204.809612][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.879995][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.942369][ T9] usb 1-1: config 0 descriptor?? [ 205.441666][ T5944] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 205.601565][ T5944] usb 6-1: device descriptor read/64, error -71 [ 205.623325][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 205.694232][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input21 [ 205.721790][ T7605] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 205.749491][ T7605] veth1_vlan: entered allmulticast mode [ 205.780204][ T7605] veth1_vlan: left promiscuous mode [ 205.820762][ T7605] team0: Device veth1_vlan failed to register rx_handler [ 205.911489][ T5944] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 206.002005][ T7114] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 206.044627][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 206.099849][ T7114] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 206.114567][ T5944] usb 6-1: device descriptor read/64, error -71 [ 206.213051][ T7114] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 206.262096][ T5944] usb usb6-port1: attempt power cycle [ 206.269841][ T7114] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 206.455187][ T5887] usb 1-1: USB disconnect, device number 11 [ 206.513676][ T5916] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 206.562138][ T7114] usb 4-1: USB disconnect, device number 34 [ 206.641678][ T5944] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 206.740657][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.804249][ T5944] usb 6-1: device descriptor read/8, error -71 [ 206.913101][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.951471][ T5916] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 206.971107][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.040886][ T5916] usb 5-1: config 0 descriptor?? [ 207.181576][ T5944] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 207.238052][ T5944] usb 6-1: device descriptor read/8, error -71 [ 207.279192][ T7625] sit0: entered promiscuous mode [ 207.305161][ T7625] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 207.361980][ T7625] netlink: 1 bytes leftover after parsing attributes in process `syz.1.404'. [ 207.382123][ T5944] usb usb6-port1: unable to enumerate USB device [ 207.725068][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.736664][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.857087][ T5916] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 207.908459][ T5916] usb 5-1: USB disconnect, device number 31 [ 207.974349][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 208.091953][ T7115] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 208.324364][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.349800][ T7115] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.431588][ T5916] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 208.450056][ T5887] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 208.454946][ T7115] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 208.551709][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.625624][ T7115] usb 4-1: config 0 descriptor?? [ 208.644005][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 208.659261][ T5916] usb 2-1: config index 0 descriptor too short (expected 25454, got 77) [ 208.678787][ T5887] usb 6-1: config 6 has an invalid interface number: 152 but max is 3 [ 208.691444][ T5916] usb 2-1: config 115 has too many interfaces: 47, using maximum allowed: 32 [ 208.782401][ T5887] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 208.806393][ T5916] usb 2-1: config 115 has an invalid descriptor of length 121, skipping remainder of the config [ 208.829160][ T5887] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 208.839875][ T5916] usb 2-1: config 115 has 0 interfaces, different from the descriptor's value: 47 [ 208.849477][ T5887] usb 6-1: config 6 has no interface number 0 [ 208.858923][ T5887] usb 6-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 208.870976][ T5916] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.880794][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.899656][ T5887] usb 6-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 208.923611][ T5916] usb 2-1: Product: syz [ 208.925142][ T7657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.927974][ T5916] usb 2-1: Manufacturer: syz [ 208.959715][ T5887] usb 6-1: config 6 interface 152 has no altsetting 0 [ 208.967059][ T5916] usb 2-1: SerialNumber: syz [ 208.985014][ T5887] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 208.999666][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.017819][ T5887] usb 6-1: Product: syz [ 209.022877][ T5887] usb 6-1: Manufacturer: syz [ 209.027678][ T5887] usb 6-1: SerialNumber: syz [ 209.199380][ T7634] netlink: 'syz.1.406': attribute type 7 has an invalid length. [ 209.236621][ T7634] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 209.323837][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.332317][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.363926][ T5887] ushc 6-1:6.152: probe with driver ushc failed with error -71 [ 209.413019][ T7115] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 209.432736][ T5887] usb 6-1: USB disconnect, device number 23 [ 209.524491][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.531955][ T7634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.540556][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.547875][ T7634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.654216][ T7634] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 209.921578][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 210.091623][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 210.126654][ T9] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.182692][ T9] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.239478][ T9] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.293055][ T7672] netlink: 120 bytes leftover after parsing attributes in process `syz.0.413'. [ 210.329441][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 210.356238][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 210.432577][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.490125][ T9] usb 5-1: Product: syz [ 210.524387][ T9] usb 5-1: Manufacturer: syz [ 210.553148][ T9] usb 5-1: SerialNumber: syz [ 210.850845][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 211.126445][ T5916] usb 2-1: USB disconnect, device number 42 [ 211.351834][ T9] usb 5-1: USB disconnect, device number 32 [ 211.445859][ T9] usblp0: removed [ 212.003066][ T7115] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 212.068979][ T7115] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 212.141285][ T7115] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 212.153628][ T30] kauditd_printk_skb: 460 callbacks suppressed [ 212.153648][ T30] audit: type=1326 audit(1749521805.943:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 212.262470][ T7115] usb 4-1: USB disconnect, device number 35 [ 212.327036][ T30] audit: type=1326 audit(1749521805.983:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 212.457784][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 212.732703][ T30] audit: type=1326 audit(1749521805.983:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 212.829645][ T30] audit: type=1326 audit(1749521805.983:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 212.907576][ T30] audit: type=1326 audit(1749521805.983:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.076612][ T30] audit: type=1326 audit(1749521805.983:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.244417][ T30] audit: type=1326 audit(1749521805.983:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.365452][ T30] audit: type=1326 audit(1749521805.983:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.561657][ T30] audit: type=1326 audit(1749521805.983:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.656376][ T30] audit: type=1326 audit(1749521805.983:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9c8f2ab19 code=0x7ffc0000 [ 213.933879][ T7732] netlink: 108 bytes leftover after parsing attributes in process `syz.0.423'. [ 214.337132][ T7737] netlink: zone id is out of range [ 214.801641][ T5944] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 215.041694][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 215.078252][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.215702][ T5944] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.239382][ T5944] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.258787][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.285318][ T5944] usb 4-1: config 0 descriptor?? [ 216.071537][ T7115] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 216.191645][ T5960] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 216.217783][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 216.257254][ T7115] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.280199][ T7115] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 216.314440][ T7115] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.341526][ T7115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.379665][ T7771] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 216.387626][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 216.410192][ T5960] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.429513][ T7115] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.440373][ T5960] usb 1-1: config 7 has an invalid interface number: 111 but max is 0 [ 216.451049][ T5960] usb 1-1: config 7 has no interface number 0 [ 216.471295][ T5960] usb 1-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 216.488783][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.511338][ T5960] usb 1-1: Product: syz [ 216.520536][ T5960] usb 1-1: Manufacturer: syz [ 216.559266][ T5960] usb 1-1: SerialNumber: syz [ 216.804411][ T5960] usb 1-1: bad CDC descriptors [ 216.858919][ T5960] usb 1-1: USB disconnect, device number 12 [ 217.329262][ T7803] trusted_key: encrypted_key: insufficient parameters specified [ 217.406805][ T7803] netlink: 'syz.1.435': attribute type 21 has an invalid length. [ 217.414816][ T7803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.435'. [ 217.425467][ T7803] netlink: 'syz.1.435': attribute type 4 has an invalid length. [ 217.433330][ T7803] netlink: 3 bytes leftover after parsing attributes in process `syz.1.435'. [ 217.521652][ T5960] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 217.651891][ T5960] usb 6-1: device descriptor read/64, error -71 [ 217.820107][ T7115] usb 4-1: USB disconnect, device number 36 [ 217.892061][ T5960] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 218.041562][ T5960] usb 6-1: device descriptor read/64, error -71 [ 218.175463][ T5960] usb usb6-port1: attempt power cycle [ 219.081942][ T5944] usb 5-1: USB disconnect, device number 33 [ 219.094975][ T5960] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 219.144948][ T5960] usb 6-1: device descriptor read/8, error -71 [ 219.431161][ T5960] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 219.472321][ T5960] usb 6-1: device descriptor read/8, error -71 [ 219.604363][ T5960] usb usb6-port1: unable to enumerate USB device [ 219.831794][ T5944] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 219.993349][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.021708][ T5916] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 220.049878][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 220.090704][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.112004][ T5944] usb 5-1: config 0 descriptor?? [ 220.229145][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.284351][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 220.336767][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.390407][ T5916] usb 2-1: Product: syz [ 220.410679][ T5916] usb 2-1: Manufacturer: syz [ 220.441250][ T5916] usb 2-1: SerialNumber: syz [ 220.494769][ T5916] usb 2-1: config 0 descriptor?? [ 220.504632][ T5944] usbhid 5-1:0.0: can't add hid device: -71 [ 220.530619][ T5944] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 220.540248][ T5916] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.551712][ T5960] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 220.586992][ T5944] usb 5-1: USB disconnect, device number 34 [ 220.594977][ T5916] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.624524][ T5916] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.801655][ T5916] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.818079][ T5960] usb 6-1: config 0 has no interfaces? [ 220.837100][ T5916] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.840219][ T5960] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 220.872287][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.890981][ T5960] usb 6-1: Product: syz [ 220.911073][ T5960] usb 6-1: Manufacturer: syz [ 220.921214][ T5960] usb 6-1: SerialNumber: syz [ 220.935650][ T5916] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 220.953294][ T5960] usb 6-1: config 0 descriptor?? [ 221.011272][ T5916] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 221.049137][ T5916] usb 2-1: USB disconnect, device number 43 [ 221.125473][ T5944] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 221.162260][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 221.164689][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.445'. [ 221.301457][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 221.333763][ T5944] usb 5-1: config index 0 descriptor too short (expected 213, got 92) [ 221.357651][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.372644][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 221.401503][ T5944] usb 5-1: config 0 has no interfaces? [ 221.412818][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.464914][ T9] usb 4-1: config 0 descriptor?? [ 221.524348][ T7876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.670020][ T7882] trusted_key: encrypted_key: insufficient parameters specified [ 223.019432][ T7900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.048928][ T7900] sch_fq: defrate 0 ignored. [ 223.290570][ T5891] usb 6-1: USB disconnect, device number 28 [ 223.732038][ T5944] usb 5-1: string descriptor 0 read error: -71 [ 223.738520][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.762254][ T9] pegasus 4-1:0.0: setup Pegasus II specific registers [ 223.799351][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.860776][ T5944] usb 5-1: config 0 descriptor?? [ 223.909843][ T5944] usb 5-1: can't set config #0, error -71 [ 223.941869][ T5944] usb 5-1: USB disconnect, device number 35 [ 224.084258][ T9] pegasus 4-1:0.0: can't locate MII phy, using default [ 224.197244][ T9] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 53:5b:c3:d2:24:c2 [ 224.237658][ T9] usb 4-1: USB disconnect, device number 37 [ 224.444365][ T7929] program syz.1.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.522431][ T7930] ipt_rpfilter: unknown options [ 224.795331][ T7942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.805438][ T7942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.371477][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 225.566800][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 225.582617][ T9] usb 1-1: config 8 has an invalid interface number: 230 but max is 3 [ 225.612162][ T9] usb 1-1: config 8 has an invalid interface number: 104 but max is 3 [ 225.620425][ T9] usb 1-1: config 8 has an invalid interface number: 232 but max is 3 [ 225.659501][ T9] usb 1-1: config 8 has an invalid interface descriptor of length 5, skipping [ 225.679358][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 225.707822][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 225.724304][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 225.750845][ T9] usb 1-1: config 8 has no interface number 0 [ 225.766707][ T9] usb 1-1: config 8 has no interface number 1 [ 225.773375][ T9] usb 1-1: config 8 has no interface number 2 [ 225.821464][ T5960] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 225.881492][ T9] usb 1-1: config 8 interface 230 altsetting 0 endpoint 0x5 has invalid maxpacket 36250, setting to 64 [ 225.911418][ T9] usb 1-1: config 8 interface 230 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 225.931498][ T9] usb 1-1: config 8 interface 230 altsetting 0 endpoint 0x2 has an invalid bInterval 189, changing to 4 [ 225.932411][ T7114] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 225.950989][ T9] usb 1-1: config 8 interface 230 altsetting 0 endpoint 0x2 has invalid maxpacket 10806, setting to 1023 [ 225.981496][ T9] usb 1-1: config 8 interface 230 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 226.003489][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 226.011576][ T9] usb 1-1: config 8 interface 230 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 226.012425][ T7115] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 226.028021][ T9] usb 1-1: config 8 interface 230 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.052414][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.068080][ T9] usb 1-1: config 8 interface 104 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 226.071666][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.099915][ T9] usb 1-1: config 8 interface 104 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 226.116320][ T9] usb 1-1: config 8 interface 104 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 226.123979][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.137141][ T7114] usb 6-1: Using ep0 maxpacket: 8 [ 226.147786][ T9] usb 1-1: config 8 interface 104 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 226.160691][ T5960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.173260][ T7114] usb 6-1: unable to get BOS descriptor or descriptor too short [ 226.177502][ T9] usb 1-1: config 8 interface 104 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 226.182767][ T7114] usb 6-1: config index 0 descriptor too short (expected 37302, got 36) [ 226.211734][ T7114] usb 6-1: config 4 has too many interfaces: 73, using maximum allowed: 32 [ 226.220469][ T7114] usb 6-1: config 4 has an invalid descriptor of length 89, skipping remainder of the config [ 226.221575][ T9] usb 1-1: config 8 interface 104 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 226.233966][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.265074][ T7114] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 73 [ 226.281467][ T7115] usb 4-1: Using ep0 maxpacket: 16 [ 226.295790][ T7115] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 226.301925][ T9] usb 1-1: config 8 interface 232 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 226.311566][ T5960] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.338192][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.347317][ T9] usb 1-1: too many endpoints for config 8 interface 3 altsetting 1: 204, using maximum allowed: 30 [ 226.348470][ T7114] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 226.378801][ T9] usb 1-1: config 8 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 204 [ 226.378810][ T5960] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.378840][ T9] usb 1-1: config 8 interface 104 has no altsetting 0 [ 226.392626][ T7115] usb 4-1: Product: syz [ 226.419948][ T9] usb 1-1: config 8 interface 232 has no altsetting 0 [ 226.421558][ T7114] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.435168][ T5960] usb 5-1: Manufacturer: syz [ 226.449031][ T7115] usb 4-1: Manufacturer: syz [ 226.454294][ T9] usb 1-1: config 8 interface 3 has no altsetting 0 [ 226.455585][ T7114] usb 6-1: Product: syz [ 226.473127][ T5960] usb 5-1: config 0 descriptor?? [ 226.476765][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=8400, bcdDevice=bc.ba [ 226.478302][ T7115] usb 4-1: SerialNumber: syz [ 226.500812][ T7114] usb 6-1: Manufacturer: syz [ 226.501920][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.509722][ T7114] usb 6-1: SerialNumber: syz [ 226.540705][ T7115] usb 4-1: config 0 descriptor?? [ 226.550306][ T9] usb 1-1: Product: syz [ 226.565967][ T7114] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 226.571928][ T9] usb 1-1: Manufacturer: 铃擀∍ᾡ鿙Ǎ觲 [ 226.587535][ T9] usb 1-1: SerialNumber: syz [ 226.593273][ T7115] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 226.605772][ T7954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.611232][ T7114] usb 6-1: no configuration chosen from 1 choice [ 226.629796][ T7115] usb 4-1: Detected FT232H [ 226.789509][ T7115] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 226.921014][ T7115] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 226.962650][ T7115] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 226.991968][ T7115] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 227.046981][ T7115] usb 4-1: USB disconnect, device number 38 [ 227.075692][ T9] hso 1-1:8.230: Not our interface [ 227.092161][ T7115] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 227.125272][ T9] hso 1-1:8.104: Not our interface [ 227.125346][ T7115] ftdi_sio 4-1:0.0: device disconnected [ 227.168637][ T9] hso 1-1:8.232: Not our interface [ 227.218436][ T9] hso 1-1:8.3: Not our interface [ 227.250177][ T9] usb 1-1: USB disconnect, device number 13 [ 228.071628][ T7114] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.251758][ T7114] usb 1-1: Using ep0 maxpacket: 32 [ 228.268896][ T7114] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 228.288634][ T7114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.313589][ T7114] usb 1-1: Product: syz [ 228.331712][ T7114] usb 1-1: Manufacturer: syz [ 228.345530][ T7114] usb 1-1: SerialNumber: syz [ 228.358281][ T7114] usb 1-1: config 0 descriptor?? [ 228.378851][ T7114] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 228.531643][ T9] usb 6-1: USB disconnect, device number 29 [ 228.641394][ T7114] gspca_topro: reg_w err -71 [ 228.691513][ T7114] gspca_topro: Sensor soi763a [ 228.751855][ T7114] usb 1-1: USB disconnect, device number 14 [ 229.024781][ T5960] rc_core: IR keymap rc-hauppauge not found [ 229.024805][ T5960] Registered IR keymap rc-empty [ 229.024949][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.041799][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.062940][ T5960] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 229.072123][ T5960] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 229.081617][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.227266][ T8050] fuse: Bad value for 'user_id' [ 229.227291][ T8050] fuse: Bad value for 'user_id' [ 229.271558][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.292482][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.321589][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.351588][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.376461][ T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 229.381555][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.401701][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.431581][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.470704][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.491609][ T5960] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 229.513792][ T5960] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 229.513822][ T5960] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 229.531782][ T9] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 229.531813][ T9] usb 2-1: config 0 has no interface number 0 [ 229.531856][ T9] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 229.534150][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 229.534175][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.534190][ T9] usb 2-1: Product: syz [ 229.534202][ T9] usb 2-1: Manufacturer: syz [ 229.534213][ T9] usb 2-1: SerialNumber: syz [ 229.541545][ T5960] usb 5-1: USB disconnect, device number 36 [ 229.545656][ T9] usb 2-1: config 0 descriptor?? [ 229.548291][ T8047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.550021][ T9] usb-storage 2-1:0.20: USB Mass Storage device detected [ 229.598845][ T8035] netlink: 778 bytes leftover after parsing attributes in process `syz.5.480'. [ 229.600694][ T9] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 229.849435][ T8047] fuse: Bad value for 'group_id' [ 229.849453][ T8047] fuse: Bad value for 'group_id' [ 229.962397][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.965625][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.008383][ T9] scsi host1: usb-storage 2-1:0.20 [ 231.383181][ T8061] usb 2-1: reset full-speed USB device number 44 using dummy_hcd [ 232.169913][ T30] kauditd_printk_skb: 623 callbacks suppressed [ 232.169935][ T30] audit: type=1326 audit(1749521825.953:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8097 comm="syz.4.488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f76a698e929 code=0x0 [ 232.773086][ T30] audit: type=1326 audit(1749521826.563:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 232.897270][ T30] audit: type=1326 audit(1749521826.563:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 232.927147][ T8061] usb 2-1: device descriptor read/64, error -71 [ 232.996061][ T8114] input: syz1 as /devices/virtual/input/input23 [ 233.012108][ T30] audit: type=1326 audit(1749521826.563:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 233.098800][ T8123] netlink: 'syz.4.494': attribute type 4 has an invalid length. [ 233.111553][ T30] audit: type=1326 audit(1749521826.563:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 233.150981][ T8123] netlink: 'syz.4.494': attribute type 4 has an invalid length. [ 233.167460][ T8124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.185466][ T30] audit: type=1326 audit(1749521826.583:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 233.233925][ T8061] usb 2-1: reset full-speed USB device number 44 using dummy_hcd [ 233.246156][ T30] audit: type=1326 audit(1749521826.583:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 233.269115][ T8061] usb 2-1: device reset changed ep0 maxpacket size! [ 233.347284][ T30] audit: type=1326 audit(1749521826.583:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 233.369562][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.408014][ T5916] usb 2-1: USB disconnect, device number 44 [ 233.515717][ T30] audit: type=1326 audit(1749521826.583:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05298e929 code=0x7ffc0000 [ 233.561490][ T30] audit: type=1326 audit(1749521826.583:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc05292ab19 code=0x7ffc0000 [ 233.583731][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.031767][ T5960] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 234.041460][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 234.181616][ T9] usb 5-1: device descriptor read/64, error -71 [ 234.201684][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 234.218672][ T5960] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 234.231204][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.231526][ T5916] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 234.242105][ T5960] usb 6-1: Product: syz [ 234.257423][ T5960] usb 6-1: Manufacturer: syz [ 234.262950][ T5960] usb 6-1: SerialNumber: syz [ 234.280491][ T5960] r8152-cfgselector 6-1: Unknown version 0x0000 [ 234.289940][ T5960] r8152-cfgselector 6-1: config 0 descriptor?? [ 234.321728][ T5891] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 234.413699][ T5916] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 234.431614][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 234.439999][ T5916] usb 2-1: config 0 has no interface number 0 [ 234.455615][ T5916] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.465214][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.481770][ T5916] usb 2-1: Product: syz [ 234.491620][ T5916] usb 2-1: Manufacturer: syz [ 234.496422][ T5916] usb 2-1: SerialNumber: syz [ 234.512132][ T5891] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 234.520478][ T5891] usb 4-1: config 0 has no interface number 0 [ 234.535421][ T5916] usb 2-1: config 0 descriptor?? [ 234.546752][ T5891] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 234.569740][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.578218][ T5891] usb 4-1: Product: syz [ 234.588051][ T5891] usb 4-1: Manufacturer: syz [ 234.592995][ T9] usb 5-1: device descriptor read/64, error -71 [ 234.600061][ T5891] usb 4-1: SerialNumber: syz [ 234.610135][ T5891] usb 4-1: config 0 descriptor?? [ 234.702000][ T9] usb usb5-port1: attempt power cycle [ 234.723660][ T5960] r8152-cfgselector 6-1: USB disconnect, device number 30 [ 234.825852][ T5891] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 234.840460][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 234.857702][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 234.868867][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 234.895612][ T5891] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 234.949452][ T5916] usb 2-1: Firmware: major: 217, minor: 65, hardware type: UNKNOWN (194) [ 234.983059][ T5916] usb 2-1: Firmware: build A. [ 235.062283][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 235.097728][ T9] usb 5-1: device descriptor read/8, error -71 [ 235.204930][ T5916] usb 2-1: failed to fetch extended address, random address set [ 235.213283][ T5916] usb 2-1: atusb_probe: initialization failed, error = -524 [ 235.232067][ T5916] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 235.248766][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.294332][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.351826][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 235.355498][ T5960] usb 4-1: USB disconnect, device number 39 [ 235.382357][ T9] usb 5-1: device descriptor read/8, error -71 [ 235.399572][ T5960] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 235.424153][ T5960] keyspan 4-1:0.133: device disconnected [ 235.495771][ T9] usb usb5-port1: unable to enumerate USB device [ 235.781619][ T5960] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 235.941593][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 235.951982][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.962690][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.977180][ T5960] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.986671][ T5960] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.995670][ T5960] usb 4-1: Manufacturer: syz [ 236.003110][ T5960] usb 4-1: config 0 descriptor?? [ 236.234272][ T5960] usb 4-1: USB disconnect, device number 40 [ 236.238956][ T9] usb 2-1: USB disconnect, device number 45 [ 237.241570][ T5960] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 237.406169][ T5960] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.417870][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.435861][ T5960] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.445579][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.455053][ T5960] usb 4-1: SerialNumber: syz [ 237.528496][ T8195] No such timeout policy "syz0" [ 237.690228][ T5960] usb 4-1: 0:2 : does not exist [ 237.729428][ T5960] usb 4-1: USB disconnect, device number 41 [ 237.827606][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.551478][ T5960] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 238.717876][ T5960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.730525][ T5960] usb 4-1: not running at top speed; connect to a high speed hub [ 238.746951][ T5960] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 238.759403][ T5960] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.773928][ T5960] usb 4-1: config 1 interface 0 has no altsetting 0 [ 238.794087][ T5960] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.810150][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.830804][ T5960] usb 4-1: Product: syz [ 238.839896][ T5960] usb 4-1: Manufacturer: syz [ 238.995391][ T5960] usb 4-1: SerialNumber: syz [ 239.012631][ T8214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.226807][ T5960] usb 4-1: bad CDC descriptors [ 239.283466][ T5960] usb 4-1: USB disconnect, device number 42 [ 239.463794][ T8221] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.629676][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.5.525'. [ 239.661528][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.525'. [ 239.841965][ T5960] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 240.001619][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 240.013388][ T5960] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 240.024664][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 240.038255][ T5960] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 240.047433][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.051516][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 240.059294][ T5960] usb 5-1: config 0 descriptor?? [ 240.221942][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 240.234417][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.245854][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 240.255099][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.267091][ T9] usb 4-1: config 0 descriptor?? [ 240.476756][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 240.487793][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.503706][ T9] usb 4-1: USB disconnect, device number 43 [ 240.977424][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 240.977444][ T30] audit: type=1326 audit(1749521834.763:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f658e929 code=0x7ffc0000 [ 241.035531][ T30] audit: type=1326 audit(1749521834.793:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07f652ab19 code=0x7ffc0000 [ 241.060033][ T30] audit: type=1326 audit(1749521834.793:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f658e929 code=0x7ffc0000 [ 241.082385][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.112847][ T30] audit: type=1326 audit(1749521834.793:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f658e929 code=0x7ffc0000 [ 241.135168][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.192550][ T30] audit: type=1326 audit(1749521834.793:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07f652ab19 code=0x7ffc0000 [ 241.214998][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.271582][ T30] audit: type=1326 audit(1749521834.793:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f658e929 code=0x7ffc0000 [ 241.295502][ T30] audit: type=1326 audit(1749521834.793:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07f652ab19 code=0x7ffc0000 [ 241.317718][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.342178][ T30] audit: type=1326 audit(1749521834.793:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07f652ab19 code=0x7ffc0000 [ 241.366132][ T30] audit: type=1326 audit(1749521834.793:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07f652ab19 code=0x7ffc0000 [ 241.440343][ T30] audit: type=1326 audit(1749521834.793:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f658e929 code=0x7ffc0000 [ 241.901948][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 242.091996][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 242.101759][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.116667][ T9] usb 4-1: Product: syz [ 242.125530][ T9] usb 4-1: Manufacturer: syz [ 242.130389][ T9] usb 4-1: SerialNumber: syz [ 242.143338][ T9] usb 4-1: config 0 descriptor?? [ 242.162972][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 242.363208][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.382545][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.391012][ T5960] usbhid 5-1:0.0: can't add hid device: -71 [ 242.420204][ T5960] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.470862][ T5960] usb 5-1: USB disconnect, device number 41 [ 242.483421][ T9] gspca_sunplus: reg_r err -71 [ 242.518878][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 242.531677][ T7115] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 242.581163][ T9] usb 4-1: USB disconnect, device number 44 [ 242.761520][ T7115] usb 2-1: Using ep0 maxpacket: 16 [ 242.770393][ T7115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 242.840406][ T7115] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 242.878074][ T7115] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 242.919837][ T7115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.930019][ T7115] usb 2-1: Product: syz [ 242.939192][ T7115] usb 2-1: Manufacturer: syz [ 242.946964][ T7115] usb 2-1: SerialNumber: syz [ 242.975812][ T7115] usb 2-1: config 0 descriptor?? [ 243.035836][ T8254] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 243.067497][ T7115] hub 2-1:0.0: bad descriptor, ignoring hub [ 243.091488][ T5916] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 243.099682][ T7115] hub 2-1:0.0: probe with driver hub failed with error -5 [ 243.145270][ T7115] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 243.163256][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 243.172835][ T5960] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 243.204712][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 243.273218][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 243.347101][ T5916] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 243.361702][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 243.381022][ T5960] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.405371][ T5960] usb 4-1: config 0 has no interface number 0 [ 243.412552][ T5916] usb 5-1: config 179 has no interface number 0 [ 243.419272][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 243.436851][ T5960] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 199, changing to 11 [ 243.448501][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 243.467163][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.482006][ T5960] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 24873, setting to 1024 [ 243.498036][ T5960] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 243.507758][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.517452][ T5916] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 243.556316][ T5916] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 243.571755][ T5960] usb 4-1: config 0 descriptor?? [ 243.577322][ T5916] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 243.587442][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.649585][ T8265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.674498][ T5916] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 243.873202][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.888775][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.230506][ T5960] usbhid 4-1:0.1: can't add hid device: -71 [ 244.239984][ T5960] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 244.269530][ T5960] usb 4-1: USB disconnect, device number 45 [ 244.391680][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 244.544511][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.555686][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.566494][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.575904][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.588118][ T9] usb 6-1: config 0 descriptor?? [ 245.221338][ T9] usb 6-1: string descriptor 0 read error: -22 [ 245.312029][ T5916] usb 2-1: USB disconnect, device number 46 [ 245.567678][ T5916] usb 5-1: USB disconnect, device number 42 [ 247.445131][ T9] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 247.465552][ T9] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 247.481022][ T9] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 247.489856][ T9] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 247.499689][ T9] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 247.531101][ T9] usb 6-1: USB disconnect, device number 31 [ 248.027800][ T8328] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 248.126111][ T8330] bond2: entered promiscuous mode [ 248.131214][ T8330] bond2: entered allmulticast mode [ 248.157150][ T8330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.288161][ T8328] ip6gretap1: entered promiscuous mode [ 248.302168][ T8328] ip6gretap1: entered allmulticast mode [ 248.323480][ T8328] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 248.359308][ T8091] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 248.391718][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 248.570553][ T6112] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 248.624106][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 248.640393][ T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 248.659088][ T9] usb 4-1: config 0 has no interface number 0 [ 248.685867][ T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 248.796475][ T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.865110][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=705c, bcdDevice=4c.08 [ 248.884143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.915991][ T9] usb 4-1: Product: syz [ 248.953698][ T9] usb 4-1: Manufacturer: syz [ 248.971471][ T9] usb 4-1: SerialNumber: syz [ 249.001689][ T9] usb 4-1: config 0 descriptor?? [ 249.032992][ T8333] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.061552][ T5923] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 249.263469][ T8350] Cannot find del_set index 2 as target [ 249.296370][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.307565][ T5960] usb 4-1: USB disconnect, device number 46 [ 249.339497][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.384607][ T5923] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.426638][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.462222][ T5923] usb 5-1: SerialNumber: syz [ 250.136704][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 250.218940][ T8379] netlink: 'syz.3.556': attribute type 3 has an invalid length. [ 250.311490][ T9] usb 6-1: device descriptor read/64, error -71 [ 250.792057][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 251.076671][ T9] usb 6-1: device descriptor read/64, error -71 [ 251.303858][ T9] usb usb6-port1: attempt power cycle [ 251.701497][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 251.771681][ T9] usb 6-1: device descriptor read/8, error -71 [ 252.021450][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 252.142410][ T9] usb 6-1: device descriptor read/8, error -71 [ 252.266618][ T9] usb usb6-port1: unable to enumerate USB device [ 252.495015][ T5923] usb 5-1: 0:2 : does not exist [ 252.627567][ T5923] usb 5-1: USB disconnect, device number 43 [ 252.711733][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 252.759251][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.877062][ T8384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.928082][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 252.998228][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 253.021471][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 253.068376][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 253.128860][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 253.161794][ T9] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 253.211065][ T9] usb 6-1: Manufacturer: syz [ 253.249954][ T9] usb 6-1: config 0 descriptor?? [ 253.272122][ T8395] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.284360][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 253.303932][ T9] smsusb:siano_media_device_register: media controller created [ 253.336874][ T9] ------------[ cut here ]------------ [ 253.342919][ T9] usb 6-1: BOGUS urb xfer, pipe 3 != type 1 [ 253.380496][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 253.389988][ T9] Modules linked in: [ 253.394804][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 253.404970][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.415262][ T9] Workqueue: usb_hub_wq hub_event [ 253.420364][ T9] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 253.426066][ T9] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 a0 1c 34 8c 4c 89 f6 4c 89 fa e8 bf 6e 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 90 2b de 8e e8 15 [ 253.446083][ T9] RSP: 0018:ffffc900000e6ad0 EFLAGS: 00010246 [ 253.452311][ T9] RAX: 7a06d094e559ff00 RBX: ffff88807882f400 RCX: 0000000000100000 [ 253.456331][ T5923] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 253.460312][ T9] RDX: ffffc9001a545000 RSI: 0000000000027641 RDI: 0000000000027642 [ 253.460334][ T9] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 253.460350][ T9] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffffff8c341a8c [ 253.460368][ T9] R13: dffffc0000000000 R14: ffffffff8c348580 R15: ffff888030deb3e0 [ 253.500264][ T9] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 253.509351][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.516056][ T9] CR2: 00007fb0128aa6b0 CR3: 000000003458a000 CR4: 00000000003526f0 [ 253.524678][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.532794][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.540835][ T9] Call Trace: [ 253.544308][ T9] [ 253.547321][ T9] smsusb_start_streaming+0x22/0x340 [ 253.552743][ T9] smsusb_probe+0x18f6/0x2060 [ 253.557511][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 253.562656][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 253.568265][ T9] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.574295][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 253.580699][ T9] ? __pm_runtime_set_status+0x785/0xa50 [ 253.586434][ T9] usb_probe_interface+0x641/0xbc0 [ 253.591631][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 253.597310][ T9] really_probe+0x26a/0x9a0 [ 253.602094][ T9] __driver_probe_device+0x18c/0x2f0 [ 253.607434][ T9] driver_probe_device+0x4f/0x430 [ 253.612567][ T9] __device_attach_driver+0x2ce/0x530 [ 253.618018][ T9] bus_for_each_drv+0x251/0x2e0 [ 253.623059][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 253.628991][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 253.634510][ T9] __device_attach+0x2b8/0x400 [ 253.639339][ T9] ? __pfx___device_attach+0x10/0x10 [ 253.644735][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 253.647339][ T5923] usb 2-1: config 0 has no interfaces? [ 253.649981][ T9] bus_probe_device+0x185/0x260 [ 253.660601][ T9] device_add+0x7b6/0xb50 [ 253.665102][ T9] usb_set_configuration+0x1a87/0x20e0 [ 253.670699][ T9] usb_generic_driver_probe+0x8d/0x150 [ 253.674967][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.676257][ T9] usb_probe_device+0x1c1/0x390 [ 253.690269][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 253.695999][ T9] really_probe+0x26a/0x9a0 [ 253.700578][ T9] __driver_probe_device+0x18c/0x2f0 [ 253.705996][ T9] driver_probe_device+0x4f/0x430 [ 253.711089][ T9] __device_attach_driver+0x2ce/0x530 [ 253.716576][ T9] bus_for_each_drv+0x251/0x2e0 [ 253.721551][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 253.727514][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 253.727588][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.732988][ T9] __device_attach+0x2b8/0x400 [ 253.733029][ T9] ? __pfx___device_attach+0x10/0x10 [ 253.733062][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 253.756567][ T9] bus_probe_device+0x185/0x260 [ 253.761655][ T9] device_add+0x7b6/0xb50 [ 253.766047][ T9] usb_new_device+0xa39/0x16c0 [ 253.770887][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 253.776196][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.780585][ T5923] usb 2-1: Product: syz [ 253.781471][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.781524][ T9] hub_event+0x2941/0x4a00 [ 253.781608][ T9] ? __pfx_hub_event+0x10/0x10 [ 253.781632][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 253.806225][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.807368][ T5923] usb 2-1: Manufacturer: syz [ 253.811520][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 253.811563][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 253.811600][ T9] process_scheduled_works+0xae1/0x17b0 [ 253.811671][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.811725][ T9] worker_thread+0x8a0/0xda0 [ 253.844458][ T9] kthread+0x70e/0x8a0 [ 253.845482][ T5923] usb 2-1: SerialNumber: syz [ 253.848592][ T9] ? __pfx_worker_thread+0x10/0x10 [ 253.848636][ T9] ? __pfx_kthread+0x10/0x10 [ 253.848667][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.868404][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.873733][ T9] ? __pfx_kthread+0x10/0x10 [ 253.878398][ T9] ret_from_fork+0x3fc/0x770 [ 253.883127][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 253.888316][ T9] ? __switch_to_asm+0x39/0x70 [ 253.893210][ T9] ? __switch_to_asm+0x33/0x70 [ 253.898037][ T9] ? __pfx_kthread+0x10/0x10 [ 253.902739][ T9] ret_from_fork_asm+0x1a/0x30 [ 253.907593][ T9] [ 253.910663][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 253.917994][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 253.928109][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.938220][ T9] Workqueue: usb_hub_wq hub_event [ 253.943314][ T9] Call Trace: [ 253.946671][ T9] [ 253.949658][ T9] dump_stack_lvl+0x99/0x250 [ 253.954331][ T9] ? __asan_memcpy+0x40/0x70 [ 253.959090][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.964364][ T9] ? __pfx__printk+0x10/0x10 [ 253.969039][ T9] panic+0x2db/0x790 [ 253.973019][ T9] ? __pfx_panic+0x10/0x10 [ 253.977533][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 253.982557][ T9] __warn+0x31b/0x4b0 [ 253.986609][ T9] ? usb_submit_urb+0xc82/0x1890 [ 253.991617][ T9] ? usb_submit_urb+0xc82/0x1890 [ 253.996622][ T9] report_bug+0x2be/0x4f0 [ 254.001027][ T9] ? usb_submit_urb+0xc82/0x1890 [ 254.006042][ T9] ? usb_submit_urb+0xc82/0x1890 [ 254.011036][ T9] ? usb_submit_urb+0xc84/0x1890 [ 254.016007][ T9] handle_bug+0x84/0x160 [ 254.020280][ T9] exc_invalid_op+0x1a/0x50 [ 254.024839][ T9] asm_exc_invalid_op+0x1a/0x20 [ 254.029714][ T9] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 254.035290][ T9] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 a0 1c 34 8c 4c 89 f6 4c 89 fa e8 bf 6e 63 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 90 2b de 8e e8 15 [ 254.054928][ T9] RSP: 0018:ffffc900000e6ad0 EFLAGS: 00010246 [ 254.061109][ T9] RAX: 7a06d094e559ff00 RBX: ffff88807882f400 RCX: 0000000000100000 [ 254.069102][ T9] RDX: ffffc9001a545000 RSI: 0000000000027641 RDI: 0000000000027642 [ 254.077188][ T9] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 254.085190][ T9] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffffffff8c341a8c [ 254.093218][ T9] R13: dffffc0000000000 R14: ffffffff8c348580 R15: ffff888030deb3e0 [ 254.101248][ T9] smsusb_start_streaming+0x22/0x340 [ 254.106579][ T9] smsusb_probe+0x18f6/0x2060 [ 254.111299][ T9] ? __pfx_smsusb_probe+0x10/0x10 [ 254.116360][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 254.121968][ T9] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 254.127908][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.134364][ T9] ? __pm_runtime_set_status+0x785/0xa50 [ 254.140033][ T9] usb_probe_interface+0x641/0xbc0 [ 254.145183][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 254.150847][ T9] really_probe+0x26a/0x9a0 [ 254.155384][ T9] __driver_probe_device+0x18c/0x2f0 [ 254.160701][ T9] driver_probe_device+0x4f/0x430 [ 254.165766][ T9] __device_attach_driver+0x2ce/0x530 [ 254.171171][ T9] bus_for_each_drv+0x251/0x2e0 [ 254.176063][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 254.181987][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 254.187491][ T9] __device_attach+0x2b8/0x400 [ 254.192295][ T9] ? __pfx___device_attach+0x10/0x10 [ 254.197610][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 254.202849][ T9] bus_probe_device+0x185/0x260 [ 254.207744][ T9] device_add+0x7b6/0xb50 [ 254.212115][ T9] usb_set_configuration+0x1a87/0x20e0 [ 254.217633][ T9] usb_generic_driver_probe+0x8d/0x150 [ 254.223158][ T9] usb_probe_device+0x1c1/0x390 [ 254.228048][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 254.233445][ T9] really_probe+0x26a/0x9a0 [ 254.237993][ T9] __driver_probe_device+0x18c/0x2f0 [ 254.243409][ T9] driver_probe_device+0x4f/0x430 [ 254.248471][ T9] __device_attach_driver+0x2ce/0x530 [ 254.253876][ T9] bus_for_each_drv+0x251/0x2e0 [ 254.258767][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 254.264687][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 254.270098][ T9] __device_attach+0x2b8/0x400 [ 254.274890][ T9] ? __pfx___device_attach+0x10/0x10 [ 254.280232][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 254.285460][ T9] bus_probe_device+0x185/0x260 [ 254.290347][ T9] device_add+0x7b6/0xb50 [ 254.294726][ T9] usb_new_device+0xa39/0x16c0 [ 254.299537][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 254.304775][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.310003][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.315269][ T9] hub_event+0x2941/0x4a00 [ 254.319791][ T9] ? __pfx_hub_event+0x10/0x10 [ 254.324601][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 254.330360][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.335588][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 254.341344][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 254.347157][ T9] process_scheduled_works+0xae1/0x17b0 [ 254.352765][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.358792][ T9] worker_thread+0x8a0/0xda0 [ 254.363436][ T9] kthread+0x70e/0x8a0 [ 254.367536][ T9] ? __pfx_worker_thread+0x10/0x10 [ 254.372682][ T9] ? __pfx_kthread+0x10/0x10 [ 254.377844][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.383099][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.388333][ T9] ? __pfx_kthread+0x10/0x10 [ 254.392952][ T9] ret_from_fork+0x3fc/0x770 [ 254.397575][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 254.402726][ T9] ? __switch_to_asm+0x39/0x70 [ 254.407519][ T9] ? __switch_to_asm+0x33/0x70 [ 254.412310][ T9] ? __pfx_kthread+0x10/0x10 [ 254.416960][ T9] ret_from_fork_asm+0x1a/0x30 [ 254.421768][ T9] [ 254.425139][ T9] Kernel Offset: disabled [ 254.429487][ T9] Rebooting in 86400 seconds..