last executing test programs: 10.084230051s ago: executing program 3 (id=6001): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, 0x0, 0x0, 0x40800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x3, 0x3, 0x0, {0xa, 0x4e21, 0x101, @remote, 0x7}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000200)="3f2fcaed68e399ee13df6804e57eef3eb28ac3bb093005270d2e2d31f9df6e05", 0x20}, {&(0x7f0000000240)="09af6be94f362ad086ed9a4dfaa82456ecbef25fc5b9801fbb705b7a342370e08d6b77f65b8524e5b12dbbd374d15841309b605e7800c0343e3d558860c3a5a502a802c9a3d60c25fff186649344f9615e54b21e0be879791d2ac974e87441120baa30d1c13f0538a4606f9ba76442f4fdb677fe851ef06dbb5718f15e9cdb07979f529b024d38b965def85995a26317add3165f3a628e857e40821e5dccf0010ab9d92b6b4290d76113bfa665657da258c6c3e401cea97be6d674da52a3886e5f506c9528bf71b3bff1ec146bdda1b4287c668cd0412f7bbdb2", 0xda}], 0x4, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7.504626504s ago: executing program 0 (id=6005): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 7.214230365s ago: executing program 2 (id=6006): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r5, &(0x7f0000000000), 0x8) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f0000000040), 0x44) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) cachestat(r7, &(0x7f0000000040), 0x0, 0x0) 6.994782413s ago: executing program 0 (id=6007): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x1, {0x2, 0x6, 0x0, '\x00', {0x7ff, 0x6, 0xadd, 0x806, r9, 0x0, 0xc000, '\x00', 0x0, 0x8, 0x4, 0x5, {0x8, 0x4}, {0x4000000000006, 0x8}, {0x1, 0xd}, {0x100001000000003, 0x2}, 0x2, 0xa, 0x3ff, 0x6}}}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/42, 0x2a}, 0x4}], 0x1, 0x45833af92e4b39fc, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x28040, 0x0) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0400000d06050000000000000a0500000000008000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x480c0) 6.767832815s ago: executing program 1 (id=6008): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000001100)) 6.635753099s ago: executing program 3 (id=6009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x51b5, &(0x7f00000000c0)={0x0, 0x7415, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2a, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = inotify_init() openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000b00)={0x15, 0xe2, &(0x7f0000000a00)="5085e2f85fffb521f1ba3e5ad17d84797d872618cd22942d60e203fe85e89138c028b05af283f35f3ac1cbad695427d2dc6e0a3617c0bb09bd7b8e0f7a18e65808b3b6b283c3cbc770a916cac6fd73a55e18110581344523a2464888b5cd61b43c7ebed0fa2b0509af796335a21f3e044526bcb85541105d66b7b18856585bdf53103605fe8dbd095c8f854530df608bc5a7d38c45048ce5a49a38cefc6cbb62be410db36bf3959788a85c2f5cdb3c212f0fbe9f4e3be606d273fa041a945c1ad2d73790bb182d7bddb488aef5a1f9307b6d860489dffd4ee18e42f5252e49b51cba"}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df03", @ANYRES64=r3], 0x0) 6.224786495s ago: executing program 1 (id=6010): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000010c0)) read$dsp(r4, &(0x7f0000003100)=""/81, 0x51) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) gettid() ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 6.164142958s ago: executing program 4 (id=6011): r0 = socket(0x2b, 0x80801, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRES16=r0], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.130837465s ago: executing program 2 (id=6012): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) 5.881262074s ago: executing program 2 (id=6013): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 5.550457664s ago: executing program 2 (id=6014): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) pread64(r0, &(0x7f0000001240)=""/102387, 0x18ff3, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xba) 4.862804759s ago: executing program 2 (id=6015): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c529a0000010902440001000000000904000000ef040105002406000105240000000d240f01000000000600"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000002060500000000aba3eebac288d7197ac090954b5469c5000000000000000007000000140007800800060000000007080013400000000505000500020000000900020073797a30000000001600030068617368"], 0x64}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.053134014s ago: executing program 0 (id=6016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe0000b0000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500"/15], 0x3c}, 0x1, 0x11}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01ff03bd7000fbdbdf25490000000800010011000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2c8e, 0x54}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x0, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xfffffffffffffff0, 0x0, 0x4, 0x68ab, 0xfffffffffffffffe}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x8, 0xc, 0x1, 0xff}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 4.046560429s ago: executing program 1 (id=6017): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4ff}]}, 0x3c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="4024e3000000e304f9fe0a6f9c11d658009d58693298c856a2a07500007dd9c50ccfaa7c4c9ff2cca6bacee5a2cee3cc6b262bb59ed357d22fc11e47436ac46848c693f4899d00a9b360a33f4ff7234a8193e402be96f5768ad6efd7a5521132f27e74aa48ca16c2d02de6f60d203f45ad580374b3c14e1759f7c2e1ca2fea8d7f95442ccaf73cf07a57f35d34fe46fbea4fb370eb518868ec4db8df926f022e5385ca2f294b2dbd2eb9e5bf65053ba9b66ff51968948a835293265d4976a0941dce411d0714f0bc909a17b7d6292121263c4031fcdbc797407153585f137c04732694b45081683b57dea72087a94ad06b6c552eb0c0"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@global=@item_012={0x2, 0x1, 0xb, "6da0"}, @main=@item_4={0x3, 0x0, 0x9, "4fd2f0e2"}, @local=@item_012={0x1, 0x2, 0x5, '&'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x6cc}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x59, "eb82c9b255963e5c1ff64bac1576bf3a9e1ec9e7f31b20d58ff66adc6feb6cac73a10ba8b2d974331f2f7f46aadaedf5be7b5e172733adfc2ef83c3d4b689109e3e13de70ce5acb730a8a222eb64f97949970e3505a3f23736"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x43, "d2d51596763f73c3a8b0d04ee34ffe7eeb913e4b73c86c6802acb452921e4f94dc348943b9c11280a91a26475ae22a7bc94f1102b376d0e7dd47258e4e7d7850a4d99f"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) 3.927966001s ago: executing program 4 (id=6018): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty=0xffffff7f}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x488c4) 3.766301219s ago: executing program 0 (id=6019): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x75, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0xff, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x6, 0x8, 0x40, 0x5}, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00810a1003000200020d0100"], 0x9, [{0x9e, &(0x7f0000000540)=@string={0x9e, 0x3, "1c1e68ece43164c80a8233be4cf088990ae30d3ab2963cbe9414032be326760172672fe7731493b644216bfc7b0eb5b126a30b17c34f95e78e2c3e290394f2f81dd0f36c18e4d5febe8782d30b0660f1d75234ffe3da59f1f57d81806583590b7d4eaf2a96e3f5840be71899fc47433918ed917931c7753ba7e6988fb7e6176f174713a24c90a5780a12aed609e72e54a14a4fe4b240944a4f12ea20"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xcecb7cecbf63f782}}, {0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000375f6956487a02d1c914ee013632519122e8ee64839bcb4b1172306faab9436c3b630d60eb7c01a8ff2ef8b18935337a16a34018061fad4e907483dfbc375cfa3da4716e15458811198ecc80266a0d0fa1db12a4bf8deca4d96518260026e4f6a66219fb085a460c2153039"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x459}}, {0x23, &(0x7f00000001c0)=@string={0x23, 0x3, "a0c0b6c3b344607572ab754707c6aee166d1fa9582b01b78a8b74cb4664555df8e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}, {0x2d, &(0x7f00000002c0)=@string={0x2d, 0x3, "3242998bc674f312cfa1edaac47fad32e6c8a574b8cccd1011b3664936a3fc366470cd09b8ff0447c28e1e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42a}}, {0xdf, &(0x7f0000000300)=ANY=[@ANYBLOB="df03b92d2ea54b82c1e66b851a391f514f079e17443b456c09fe6ad62cd4a4d23a7ae210380bc144969a9c551a43e660605663102a9d84c83c2e6bb0717d86a3748c4c005d216eb765f5d9a960b072e3a2e6e20512f6ebc404796a98698944d2ab32efe8a2aaaf8f47db04faa2e5e5e1fb4e170f0f6fe1c4faba3ea11c0ec48afc1276fd17722d60c4a7b26740b26b0a034825eab78924b6eebe2f86cbee1e7614591487a65a708f0aa8668f4f8b3d187d4c0af318f4b0013001593f4ab11779915336e636e9bfc4611eeb825805037b66e4e1bfafc0a5c71cd93d7e219bee"]}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xe, &(0x7f0000001000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x6}, 0x94) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc400) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000640)={0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={r7, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, r9, 0xcccccccc}) 3.634517135s ago: executing program 4 (id=6020): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000001100)) 3.384683107s ago: executing program 4 (id=6021): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffffffffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) umount2(&(0x7f0000000480)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x3e4b, {0x1fffe, 0x5, 0x0, {0x40000000009, 0xc, 0x48b, 0xa, 0x40000000000000c, 0xd, 0xfff7fffc, 0x4, 0xa, 0x1000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.25776303s ago: executing program 3 (id=6022): r0 = socket(0x2b, 0x80801, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x12, 0xffffffffffffffff, 0x2604a000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRES16=r0], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.106806552s ago: executing program 4 (id=6023): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4ff}]}, 0x3c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, "3283"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="4024e3000000e304f9fe0a6f9c11d658009d58693298c856a2a07500007dd9c50ccfaa7c4c9ff2cca6bacee5a2cee3cc6b262bb59ed357d22fc11e47436ac46848c693f4899d00a9b360a33f4ff7234a8193e402be96f5768ad6efd7a5521132f27e74aa48ca16c2d02de6f60d203f45ad580374b3c14e1759f7c2e1ca2fea8d7f95442ccaf73cf07a57f35d34fe46fbea4fb370eb518868ec4db8df926f022e5385ca2f294b2dbd2eb9e5bf65053ba9b66ff51968948a835293265d4976a0941dce411d0714f0bc909a17b7d6292121263c4031fcdbc797407153585f137c04732694b45081683b57dea72087a94ad06b6c552eb0c0"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000000280)={0x0, 0x22, 0xa, {[@global=@item_012={0x2, 0x1, 0xb, "6da0"}, @main=@item_4={0x3, 0x0, 0x9, "4fd2f0e2"}, @local=@item_012={0x1, 0x2, 0x5, '&'}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x6cc}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x59, "eb82c9b255963e5c1ff64bac1576bf3a9e1ec9e7f31b20d58ff66adc6feb6cac73a10ba8b2d974331f2f7f46aadaedf5be7b5e172733adfc2ef83c3d4b689109e3e13de70ce5acb730a8a222eb64f97949970e3505a3f23736"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x43, "d2d51596763f73c3a8b0d04ee34ffe7eeb913e4b73c86c6802acb452921e4f94dc348943b9c11280a91a26475ae22a7bc94f1102b376d0e7dd47258e4e7d7850a4d99f"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x2}}) 1.266282832s ago: executing program 3 (id=6024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400006c386ef80005000100070000000900020073797a30000000000c00078008001240ffffff006bbaa8229d31db03212b0682fd81fe050004000100000010000300686173683a69702c6d616300050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r1 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) io_setup(0x2, &(0x7f0000000040)=0x0) r5 = eventfd2(0x3, 0x80000) r6 = eventfd2(0x1, 0x801) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xa5b, r1, &(0x7f0000000480)="408b02a26ccd6c3bcf526f0b59d772dd72744490c88b1c2a7719b01d1e277a9ac967b62d2ca8ba8a99f96cdd4099fae41c76d495bc313e6683633218427f1a9326f56943f814b28fee5be9a383085ebca6b829abde05b6eefea8db660b8ba57b88ece4e9ab90b87bb14fbd6f55693067a8f0431bc5cf78fd2aa1e52a594697a2214a631dde15690360668a95e296f9202c8f9f991a3ed5bc7545a29dd9147c72847e378441ff0f422da6d4ea6e2b95b82af77a26f22e32f80e31b5ef04c245f34d301e108749eb6d73311ddd4e03f0268f7c6c2c7e3a217fc481c0c3443935e9674a51c1", 0xe4, 0x7, 0x0, 0x2, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000640)="5d03911bae24ce9a91fd24f07c77b5e9349970f5bda1a37c39d5c83f1192b8a50face2adaec7939bfb88a9a8b06fbdb8c92c0f55e07e9f965d28c598317bea882653ef417e5c1dabced1bbdc0dfb83a49de372970ac2bab0cbb0a9eb76de0a49181da6cfa4fea357bdd287882f82db7d87bfb652a844f1b7c67ea8f54cd376a8b1194b619449df8610f5a651e77bbff2", 0x90, 0x920, 0x0, 0x0, r6}]) io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x7fff, @empty, 0x3ff}, {0xa, 0x4e22, 0x2, @mcast2, 0xfffffff8}, 0xffffffffffffffff, {[0x2, 0x2, 0x7, 0x1, 0x7fffffff, 0x7ff, 0x8001, 0x4]}}, 0x5c) 962.435953ms ago: executing program 3 (id=6025): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x2) read$dsp(0xffffffffffffffff, &(0x7f0000003100)=""/81, 0x51) 914.876981ms ago: executing program 1 (id=6026): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002200)=@newtaction={0x118, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x104, 0x1, [@m_ctinfo={0x100, 0x1f, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xcb, 0xffffffffffffffff, 0x6, 0x101}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xa969}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x7, 0x6, 0x5, 0x6}}]}, {0x61, 0x6, "d1cdf0fa7afd3b9eb03255994145025077872ec0e72eef405f13c82aad96a6f7c005d3def8b0058e8123809039ce5cc8337f897f630c64eb41664639acc0a517a5625dc113f87f8ee650a6922686f03e5e5c3fe2030eb5d7a9bb4e60db"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x44008001}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 784.522212ms ago: executing program 3 (id=6027): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@set_irq_handler={0xc8, 0x20, {0x68, 0x3}}, @uexit={0x0, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x2, 0x3}}, @wr_crn={0x67, 0x20, {0x8, 0x566}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0xfffffffd, 0x5}}, @nested_load_code={0x12e, 0x52, {0x2, "f30fc7b745c30000f30f1ef2c4a1f828df660f388178c7d9f636420f01590e66bad10466b8000066ef470f01c48f680096cd0047dda300200000"}}, @wr_drn={0x68, 0x20, {0x7, 0x10}}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x78c0}}, @out_dx={0x6a, 0x28, {0x0, 0x0, 0x2}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x9, 0x5}}, @nested_vmresume={0x130, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x2306, 0x2}}, @cpuid={0x64, 0x18, {0x7ff, 0x9}}, @wr_crn={0x67, 0x20, {0x8, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x200}}, @nested_create_vm={0x12d, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x63, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0x7}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x525c}}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0xae, 0x10000}}, @nested_load_code={0x12e, 0x55, {0x1, "66b800010f00d82636640f00db8f4978817b2b644e98400f0866b864000f00d8b9c70b00000f3266b869000f00d8f3430f16898b000000c4614967420c"}}], 0x3bf}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8, 0x80000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000006c0)={0x8}) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000400)={0x38, 0x4, 0x0, 0x8, 0x5, 0x9, 0x3, 0x2, 0x4, 0xfffffffb}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0xfc, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) read(0xffffffffffffffff, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$kcm(r8, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472"}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x24040001) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000440)={0x8000000, 0x1000}) 571.899555ms ago: executing program 1 (id=6028): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x810, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 536.801824ms ago: executing program 0 (id=6029): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4a140, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x98, 0x7f, {{0x11, 0x4, 0x2, 0xc, 0x44, 0x67, 0x0, 0xad, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x6a, [@broadcast, @multicast1, @private=0xa010100]}, @generic={0x83, 0x5, "9114fe"}, @end, @timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0x9, [{@local, 0x80000000}, {@rand_addr=0x3, 0x718}]}, @noop]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2200002}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1084, 0x12, 0x2, 0x70bd2b, 0x25dfdbff, {0x8, 0xe, 0x80, 0x9, {0x4e21, 0x4e23, [0x400, 0xfffffffa, 0xb1, 0x9], [0xd1f6, 0x66, 0x4, 0x4], r2, [0x2, 0x3ea]}, 0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "84a26bb0a5e4449686cfe1a85b0e76b090f8e7bed5c639e7880e92d066a6533dc9eb04b0b160b91f64601f314b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1084}, 0x1, 0x0, 0x0, 0x24008045}, 0x8080) 434.476925ms ago: executing program 2 (id=6030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="02"], 0x0) 326.635511ms ago: executing program 0 (id=6031): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0xc0, 0x80, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x3, 0x78, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x40, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xa9, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9d, 0x2, 0x4, 0x40}, 0x15, &(0x7f0000000240)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x10001, 0xf00f, 0x4, [0x0]}]}, 0x4, [{0x62, &(0x7f0000000300)=@string={0x62, 0x3, "5cc3e3b269d6ce01f5776afb960406b730bcf06372a8b17b0ab1d3b6d3a53ea222eb8ecdc3806033b6c026738280b324c4c7f7477f94dc1bd558671c1d013b9ef24cc4e151318bce07900db9f104f06a9a2bab9989e9ee2e85492adc4499c4c9"}}, {0x99, &(0x7f0000000380)=@string={0x99, 0x3, "4da2fbfcd426051f911314277589dc3be11b4dc493489451f35154fc2df9e9e8ab8a41ff4b4688572a8ea44c88c5fbe33e06bbf2c4c8e01ae8e08aaeb881afc5951ae12d8c42144baf2b6a6cfb42024dfa5d3896ecf7343ec4b6a8711688ce07b8c7585df255a335afe0e2df103b95df0800367c4a3642500bf4bbd8d426a15e8f7b186b3ba694383f326670b096713783041836bb0153"}}, {0xc2, &(0x7f0000000440)=@string={0xc2, 0x3, "b3d91a217f3dfa38e1172b70a017505ca33343021c677c158399e47fe5afab440206e68dbc1daf8216c2ad4c7e7255b1493cce64144583a82374978bcd14c0386dd39e0eb31480ecd79dc7bf616f0299c68a26a8cab600623555432c1fe19dd8ee31f649f2666b8a8594554af5f2d5a3376fa671dd04727371438622f4056882cb74f4c53c28fa100d6f78ee20b406b3107abd7f66866bd24f765714f1c2ee11890012f9330112ed7c545847e83e1ecd4713459384d128aadd8ca363355b95d6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) unshare(0x28040680) unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'permprofile ', ':!\xd0\x1a\v\x97\x8d//&-*\x83\xd1\x00\xae\xd9\xf5\x04\\\xb3\xdf\xccQ\t\xda}\x16\x91P\xc0&KF\xd5\x06?t\xff\\\xd8\xce#\xfc:P>\x8dH\xd5\x00y8\xb4`\x1c\xc8\xf1/w\xe5U\x83\x1b y\x98T:A\xc1\x92s\x01\xb7\xa6\xe0\x8c\xbd\"\xbc\x9fb\x9a\x01Z\x82\xdc}\xac\x85\xf0Y\xd1\x00\x89=k\x1f\x11\x91\x12\x03_ti\xd9\x93>\xff\x9a\xdc\xb2\xaf\xce\xa7\xcb7\x0f\xc4\xcb\x94\xc1\xc0*\x84k\raZ\x8f\x88N\x7fMP\x9e\xbaq\xec\x99\xe1=\x8b\x8a\xee\x956O\xb2\xb8o\x96\xe88\x95\x15\xaa\xfb\x86g)N\x8b\xe66}\xca0\xf7{-\xef\xed\xc4\x17\xaf\xc5I6qt\x19\xf7\xce\x8d\xd5&\xfa\x90\xc7\x7f\xf5\xbc]\xe9!\xb1\xc1\xc9\x94\x9afu\x1cV\v\xd7r\xbb\x9c\xc7)lH \xb4}B~-\x00\xce'}, 0xeb) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 306.459647ms ago: executing program 1 (id=6032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x51b5, &(0x7f00000000c0)={0x0, 0x7415, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2a, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = inotify_init() r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, &(0x7f00000002c0), 0x6, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000b00)={0x15, 0xe2, &(0x7f0000000a00)="5085e2f85fffb521f1ba3e5ad17d84797d872618cd22942d60e203fe85e89138c028b05af283f35f3ac1cbad695427d2dc6e0a3617c0bb09bd7b8e0f7a18e65808b3b6b283c3cbc770a916cac6fd73a55e18110581344523a2464888b5cd61b43c7ebed0fa2b0509af796335a21f3e044526bcb85541105d66b7b18856585bdf53103605fe8dbd095c8f854530df608bc5a7d38c45048ce5a49a38cefc6cbb62be410db36bf3959788a85c2f5cdb3c212f0fbe9f4e3be606d273fa041a945c1ad2d73790bb182d7bddb488aef5a1f9307b6d860489dffd4ee18e42f5252e49b51cba"}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df03", @ANYRES64=r3], 0x0) 0s ago: executing program 4 (id=6033): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x88, 0x1, 0xfa}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x3, 0x4, 0x6], 0x4, 0x5}, {0x2, [0x7, 0x4, 0x0, 0x4, 0x5, 0x2], 0x0, 0x4}}}}, {{@ip={@remote, @rand_addr=0x64010100, 0x0, 0xff, 'dummy0\x00', 'rose0\x00', {0xff}, {}, 0x21, 0x3, 0x65}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x4}, {0x3, 0x1, 0x4}, 0x1, 0x6}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff, 0xffffff00, 'sit0\x00', 'lo\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x2}, {0x0, 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xcd, 0x35, 0xfc, 0x40, 0x6cd, 0x10c, 0xf303, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x2, 0x1, 0x7e, 0x49, 0x61, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000004700), 0xa0000, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b5ffabec44e38f218d52e570", 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff213, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43d7, 0x0, 0x0, 0xcbdf, 0xfffffffd]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000014400028006000340000000002c00018014000300"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24008040) socket(0x1, 0x800, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x8, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ecc1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x9, 0xed35, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x12}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x37, 0xf5, 0x56, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x81, 0xf8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0xff}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x8, 0x24, 0x3, 0xff, 0xfb}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x0, 0x0}]}) kernel console output (not intermixed with test programs): [ 2155.758609][T28978] ? __pfx_ksys_read+0x10/0x10 [ 2155.758636][T28978] ? do_syscall_64+0xbe/0xfa0 [ 2155.758666][T28978] do_syscall_64+0xfa/0xfa0 [ 2155.758688][T28978] ? lockdep_hardirqs_on+0x9c/0x150 [ 2155.758712][T28978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.758731][T28978] ? clear_bhb_loop+0x60/0xb0 [ 2155.758753][T28978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.758769][T28978] RIP: 0033:0x7f624ed8e15c [ 2155.758786][T28978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2155.758803][T28978] RSP: 002b:00007f624fcc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2155.758823][T28978] RAX: ffffffffffffffda RBX: 00007f624efe6090 RCX: 00007f624ed8e15c [ 2155.758836][T28978] RDX: 000000000000000f RSI: 00007f624fcc90a0 RDI: 0000000000000004 [ 2155.758847][T28978] RBP: 00007f624fcc9090 R08: 0000000000000000 R09: 0000000000000000 [ 2155.758859][T28978] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 2155.758870][T28978] R13: 00007f624efe6128 R14: 00007f624efe6090 R15: 00007f624f10fa28 [ 2155.758902][T28978] [ 2156.140363][T23668] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2156.398788][T23668] usb 1-1: device descriptor read/64, error -71 [ 2156.474760][T28964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.514907][T23668] usb usb1-port1: attempt power cycle [ 2156.530745][T28964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.595524][T28964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.604810][T28964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.730249][T28987] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2156.929338][T28989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5726'. [ 2156.938867][T23668] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2156.999933][ T5920] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2157.022352][T23668] usb 1-1: device descriptor read/8, error -71 [ 2157.299961][ T5917] usb 5-1: failed to send control message: -110 [ 2157.307724][ T5917] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2157.356548][T23668] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2157.366989][ T5920] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2157.381194][T23668] usb 1-1: device descriptor read/8, error -71 [ 2157.499094][T23668] usb usb1-port1: unable to enumerate USB device [ 2157.517556][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.675607][ T5920] usb 2-1: Product: syz [ 2157.822290][ T5920] usb 2-1: Manufacturer: syz [ 2157.866912][ T5920] usb 2-1: SerialNumber: syz [ 2157.949534][ T5920] usb 2-1: config 0 descriptor?? [ 2158.006083][ T5920] ch341 2-1:0.0: ch341-uart converter detected [ 2158.201753][ T5920] usb 2-1: failed to receive control message: -32 [ 2158.222659][ T5920] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 2158.233091][T28991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5727'. [ 2158.571080][T28987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.581944][T28987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.819686][ T5920] usb 5-1: USB disconnect, device number 106 [ 2158.892366][ T5920] ch341 5-1:0.0: device disconnected [ 2159.629032][ T5920] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2159.779411][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2160.018811][ T5920] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2160.140799][T19764] usb 2-1: USB disconnect, device number 65 [ 2160.147667][T19764] ch341 2-1:0.0: device disconnected [ 2160.168933][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2160.279272][ T5920] usb usb5-port1: attempt power cycle [ 2160.590189][T29022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2160.698919][ T5920] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2160.731994][T29022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 2160.747421][T29022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5737'. [ 2160.757017][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2160.865390][T29028] geneve2: entered promiscuous mode [ 2161.029916][T23668] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2161.051876][ T5920] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2161.063274][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.069708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.160061][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2161.270180][ T5920] usb usb5-port1: unable to enumerate USB device [ 2161.288787][T19764] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2161.288867][T23668] usb 1-1: device descriptor read/64, error -71 [ 2161.507101][T19764] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2161.519224][T19764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.527280][T19764] usb 4-1: Product: syz [ 2161.538870][T23668] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2161.587885][T29035] FAULT_INJECTION: forcing a failure. [ 2161.587885][T29035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2161.588641][T19764] usb 4-1: Manufacturer: syz [ 2161.614017][T19764] usb 4-1: SerialNumber: syz [ 2161.614118][T29035] CPU: 0 UID: 0 PID: 29035 Comm: syz.2.5741 Not tainted syzkaller #0 PREEMPT(full) [ 2161.614141][T29035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2161.614154][T29035] Call Trace: [ 2161.614162][T29035] [ 2161.614171][T29035] dump_stack_lvl+0x189/0x250 [ 2161.614203][T29035] ? __pfx____ratelimit+0x10/0x10 [ 2161.614230][T29035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.614255][T29035] ? __pfx__printk+0x10/0x10 [ 2161.614275][T29035] ? __might_fault+0xb0/0x130 [ 2161.614313][T29035] should_fail_ex+0x414/0x560 [ 2161.614347][T29035] _copy_from_iter+0x1de/0x1790 [ 2161.614369][T29035] ? aa_file_perm+0x13a/0x1550 [ 2161.614388][T29035] ? aa_file_perm+0x44d/0x1550 [ 2161.614407][T29035] ? _parse_integer_limit+0x1ae/0x1f0 [ 2161.614534][T29035] ? __pfx__copy_from_iter+0x10/0x10 [ 2161.614554][T29035] ? __lock_acquire+0xab9/0xd20 [ 2161.614575][T29035] ? __pfx_aa_file_perm+0x10/0x10 [ 2161.614604][T29035] vhost_chr_write_iter+0xc3/0xad0 [ 2161.614687][T29035] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 2161.614709][T29035] ? common_file_perm+0x1b5/0x230 [ 2161.614742][T29035] ? security_file_permission+0x75/0x290 [ 2161.614780][T29035] vfs_write+0x5c9/0xb30 [ 2161.614812][T29035] ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10 [ 2161.614903][T29035] ? __pfx_vfs_write+0x10/0x10 [ 2161.614938][T29035] ? __fget_files+0x2a/0x420 [ 2161.614965][T29035] ksys_write+0x145/0x250 [ 2161.614995][T29035] ? __pfx_ksys_write+0x10/0x10 [ 2161.615024][T29035] ? do_syscall_64+0xbe/0xfa0 [ 2161.615056][T29035] do_syscall_64+0xfa/0xfa0 [ 2161.615082][T29035] ? lockdep_hardirqs_on+0x9c/0x150 [ 2161.615109][T29035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.615129][T29035] ? clear_bhb_loop+0x60/0xb0 [ 2161.615152][T29035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.615171][T29035] RIP: 0033:0x7f839158f749 [ 2161.615189][T29035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.615207][T29035] RSP: 002b:00007f83924c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2161.615227][T29035] RAX: ffffffffffffffda RBX: 00007f83917e5fa0 RCX: 00007f839158f749 [ 2161.615241][T29035] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 2161.615254][T29035] RBP: 00007f83924c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.615267][T29035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.615278][T29035] R13: 00007f83917e6038 R14: 00007f83917e5fa0 R15: 00007f839190fa28 [ 2161.615310][T29035] [ 2161.678940][ T5917] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2161.706881][T19764] usb 4-1: config 0 descriptor?? [ 2161.898900][T23668] usb 1-1: device descriptor read/64, error -71 [ 2161.972748][T19764] ch341 4-1:0.0: ch341-uart converter detected [ 2162.019319][T23668] usb usb1-port1: attempt power cycle [ 2162.057485][T29039] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 2162.108079][ T5917] usb 2-1: config 220 has an invalid descriptor of length 231, skipping remainder of the config [ 2162.124785][ T5917] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2162.142338][ T5917] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2162.248067][ T5917] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2162.268084][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.288097][ T5917] usb 2-1: Product: syz [ 2162.299272][ T5917] usb 2-1: Manufacturer: syz [ 2162.308584][ T5917] usb 2-1: SerialNumber: syz [ 2162.388920][T23668] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2162.418653][T23668] usb 1-1: device descriptor read/8, error -71 [ 2162.641249][ T5917] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2162.649523][ T5917] uvcvideo 2-1:220.0: No valid video chain found. [ 2162.678860][T23668] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2162.705727][ T5917] usb 2-1: USB disconnect, device number 66 [ 2162.734927][T23668] usb 1-1: device descriptor read/8, error -71 [ 2162.861946][T23668] usb usb1-port1: unable to enumerate USB device [ 2163.184744][T19764] usb 4-1: failed to send control message: -71 [ 2163.206736][T19764] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2163.256868][T19764] usb 4-1: USB disconnect, device number 64 [ 2163.272247][T19764] ch341 4-1:0.0: device disconnected [ 2163.585021][ T5917] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2163.763866][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2163.786977][ T5917] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2163.804851][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.817145][ T5917] usb 2-1: config 0 descriptor?? [ 2163.858818][T23668] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2164.013419][T23668] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2164.022808][T23668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.039238][T23668] usb 1-1: Product: syz [ 2164.039322][T27216] usb 2-1: USB disconnect, device number 67 [ 2164.043452][T23668] usb 1-1: Manufacturer: syz [ 2164.043472][T23668] usb 1-1: SerialNumber: syz [ 2164.066215][T23668] usb 1-1: config 0 descriptor?? [ 2164.103165][T23668] ch341 1-1:0.0: ch341-uart converter detected [ 2164.283595][T29077] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5752'. [ 2164.358831][T19314] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2164.522256][T19314] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2164.588633][T19314] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2164.653115][T19314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2164.704502][T19314] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2164.726290][T19314] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2164.737367][T19314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.749734][T19314] usb 3-1: Product: syz [ 2164.754147][T19314] usb 3-1: Manufacturer: syz [ 2164.759807][T19314] usb 3-1: SerialNumber: syz [ 2164.786367][T19314] usb 3-1: config 0 descriptor?? [ 2164.828312][T19314] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 2165.071315][ T8656] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2165.127022][T23668] usb 1-1: failed to send control message: -71 [ 2165.143358][T23668] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2165.188887][T23668] usb 1-1: USB disconnect, device number 110 [ 2165.212513][T27216] usb 3-1: USB disconnect, device number 88 [ 2165.212684][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 2165.269746][T23668] ch341 1-1:0.0: device disconnected [ 2165.322629][ T8656] usb 5-1: no configurations [ 2165.327279][ T8656] usb 5-1: can't read configurations, error -22 [ 2165.499752][ T8656] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2165.650213][ T8656] usb 5-1: no configurations [ 2165.703639][ T8656] usb 5-1: can't read configurations, error -22 [ 2165.749578][ T8656] usb usb5-port1: attempt power cycle [ 2166.250735][ T8656] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2166.428922][ T8656] usb 5-1: no configurations [ 2166.433573][ T8656] usb 5-1: can't read configurations, error -22 [ 2166.548101][T29104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2166.558635][T29104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5759'. [ 2166.567830][T29104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5759'. [ 2166.576988][ T8656] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2166.682519][ T8656] usb 5-1: no configurations [ 2166.689001][ T8656] usb 5-1: can't read configurations, error -22 [ 2166.708003][ T8656] usb usb5-port1: unable to enumerate USB device [ 2166.918844][T27216] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2167.114604][T27216] usb 1-1: device descriptor read/64, error -71 [ 2167.369196][T27216] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2167.539686][T27216] usb 1-1: device descriptor read/64, error -71 [ 2167.553716][T29117] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5762'. [ 2167.649159][T27216] usb usb1-port1: attempt power cycle [ 2167.839706][T29124] netlink: 'syz.4.5764': attribute type 4 has an invalid length. [ 2167.941156][T29120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2168.037001][T27216] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2168.187010][T27216] usb 1-1: device descriptor read/8, error -71 [ 2168.209129][T19764] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2168.576293][T27216] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2168.611514][T19764] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2168.658405][T19764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2168.731140][T27216] usb 1-1: device descriptor read/8, error -71 [ 2168.780233][T19764] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2168.835750][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.870320][T27216] usb usb1-port1: unable to enumerate USB device [ 2169.100819][T19764] usb 2-1: Product: syz [ 2169.258807][T19764] usb 2-1: Manufacturer: syz [ 2169.367680][T19764] usb 2-1: SerialNumber: syz [ 2169.459955][T19764] usb 2-1: config 0 descriptor?? [ 2169.691918][T29120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.701093][T29120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.729105][T29135] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2170.735140][T29135] syzkaller0: owner set to 0 [ 2171.458187][T19764] powermate: Expected payload of 3--6 bytes, found 7 bytes! [ 2171.503977][T19764] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input92 [ 2171.563580][ C1] powermate: config urb returned -71 [ 2171.569212][ C1] powermate: config urb returned -71 [ 2171.574600][ C1] powermate: config urb returned -71 [ 2171.580428][ C1] powermate: config urb returned -71 [ 2171.610182][T19764] usb 2-1: USB disconnect, device number 68 [ 2171.616211][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2171.689483][ T939] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2171.982259][ T939] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2172.018416][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.044986][ T939] usb 1-1: Product: syz [ 2172.061005][ T939] usb 1-1: Manufacturer: syz [ 2172.065641][ T939] usb 1-1: SerialNumber: syz [ 2172.125804][ T939] usb 1-1: config 0 descriptor?? [ 2172.153774][ T939] ch341 1-1:0.0: ch341-uart converter detected [ 2172.822770][T29162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2172.850578][T29162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2172.859723][T29162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2173.130080][T19764] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2173.216131][ T939] usb 1-1: failed to send control message: -71 [ 2173.222558][ T939] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2173.288790][T19764] usb 2-1: device descriptor read/64, error -71 [ 2173.300003][ T939] usb 1-1: USB disconnect, device number 115 [ 2173.360547][ T939] ch341 1-1:0.0: device disconnected [ 2173.389852][T29170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2173.400844][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 2173.409964][T29170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5778'. [ 2173.578814][T19764] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2173.673794][T29171] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5777'. [ 2173.779437][T19764] usb 2-1: device descriptor read/64, error -71 [ 2173.918911][ T5920] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2173.927517][T19764] usb usb2-port1: attempt power cycle [ 2174.264271][ T5920] usb 4-1: device descriptor read/64, error -71 [ 2174.299103][T19764] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2174.371929][T19764] usb 2-1: device descriptor read/8, error -71 [ 2174.538806][ T5920] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2174.588816][ T5917] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2174.618798][T19764] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2174.675578][T19764] usb 2-1: device descriptor read/8, error -71 [ 2174.702669][ T5920] usb 4-1: device descriptor read/64, error -71 [ 2174.741126][ T5917] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 2174.771753][ T5917] usb 1-1: config 4 has no interface number 0 [ 2174.789060][T19764] usb usb2-port1: unable to enumerate USB device [ 2174.808840][ T5917] usb 1-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2174.826215][ T5920] usb usb4-port1: attempt power cycle [ 2174.864811][ T5917] usb 1-1: config 4 interface 196 has no altsetting 0 [ 2174.887647][ T5917] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 2174.907880][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.005835][ T5917] usb 1-1: Product: syz [ 2175.053918][ T5917] usb 1-1: Manufacturer: syz [ 2175.074317][ T5917] usb 1-1: SerialNumber: syz [ 2175.153221][T29176] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2175.178932][ T5920] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2175.193401][ T5917] keyspan 1-1:4.196: Keyspan 1 port adapter converter detected [ 2175.202810][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 84 [ 2175.215264][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 81 [ 2175.231636][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 1 [ 2175.247533][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 2 [ 2175.265862][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 83 [ 2175.278806][ T5917] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 3 [ 2175.292669][ T5917] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2175.339374][ T5920] usb 4-1: device descriptor read/8, error -71 [ 2175.410184][T29176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5780'. [ 2175.420825][T29176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5780'. [ 2175.504898][T27216] usb 1-1: USB disconnect, device number 116 [ 2175.521486][T27216] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2175.567180][T27216] keyspan 1-1:4.196: device disconnected [ 2175.698973][ T5920] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2175.720400][ T5920] usb 4-1: device descriptor read/8, error -71 [ 2175.828479][T29180] team0: Device is already in use. [ 2175.839083][ T5920] usb usb4-port1: unable to enumerate USB device [ 2176.616955][T29191] misc userio: No port type given on /dev/userio [ 2176.624558][T29191] misc userio: The device must be registered before sending interrupts [ 2177.986749][T29125] Set syz1 is full, maxelem 65536 reached [ 2178.088843][ T5917] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2178.120644][T29201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2178.295603][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 2178.320793][ T5917] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2178.330271][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.338338][ T5917] usb 3-1: Product: syz [ 2178.376202][ T5917] usb 3-1: Manufacturer: syz [ 2178.406788][ T5917] usb 3-1: SerialNumber: syz [ 2178.456218][ T5917] usb 3-1: config 0 descriptor?? [ 2178.486791][ T5917] as10x_usb: device has been detected [ 2178.505407][ T5917] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2178.538896][T19314] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2178.566898][ T5917] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2178.682068][T29197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.690738][T19314] usb 1-1: Using ep0 maxpacket: 8 [ 2178.691174][T29197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.711981][T19314] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.728661][ T5917] as10x_usb: error during firmware upload part1 [ 2178.736048][ T5917] Registered device Sky IT Digital Key (green led) [ 2178.784838][T19314] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2178.868875][T19314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.876910][T19314] usb 1-1: Product: syz [ 2178.894131][T19314] usb 1-1: Manufacturer: syz [ 2178.904142][T19314] usb 1-1: SerialNumber: syz [ 2178.965894][T19314] usb 1-1: config 0 descriptor?? [ 2178.994565][T19314] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2179.444663][T27216] usb 3-1: USB disconnect, device number 89 [ 2179.467887][T27216] Unregistered device Sky IT Digital Key (green led) [ 2179.482788][T27216] as10x_usb: device has been disconnected [ 2179.788641][T29221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5793'. [ 2181.127471][T29233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2181.568852][ T5917] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2181.718871][ T5917] usb 5-1: device descriptor read/64, error -71 [ 2181.958984][ T5917] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2182.108852][ T5917] usb 5-1: device descriptor read/64, error -71 [ 2182.219295][ T5917] usb usb5-port1: attempt power cycle [ 2182.564427][ T5917] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2182.600654][ T5917] usb 5-1: device descriptor read/8, error -71 [ 2182.714362][T29223] veth1_to_bond: entered allmulticast mode [ 2182.797916][ T5920] usb 1-1: USB disconnect, device number 117 [ 2182.812896][T29226] veth1_to_bond: left allmulticast mode [ 2182.850490][ T5917] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2182.902226][T29239] FAULT_INJECTION: forcing a failure. [ 2182.902226][T29239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2182.923875][ T5917] usb 5-1: device descriptor read/8, error -71 [ 2182.936329][T29239] CPU: 0 UID: 0 PID: 29239 Comm: syz.2.5797 Not tainted syzkaller #0 PREEMPT(full) [ 2182.936362][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2182.936376][T29239] Call Trace: [ 2182.936385][T29239] [ 2182.936394][T29239] dump_stack_lvl+0x189/0x250 [ 2182.936427][T29239] ? __pfx____ratelimit+0x10/0x10 [ 2182.936455][T29239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2182.936481][T29239] ? __pfx__printk+0x10/0x10 [ 2182.936512][T29239] should_fail_ex+0x414/0x560 [ 2182.936543][T29239] _copy_to_user+0x31/0xb0 [ 2182.936571][T29239] simple_read_from_buffer+0xe1/0x170 [ 2182.936607][T29239] proc_fail_nth_read+0x1b3/0x220 [ 2182.936633][T29239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2182.936660][T29239] ? rw_verify_area+0x2a6/0x4d0 [ 2182.936692][T29239] ? __lock_acquire+0xab9/0xd20 [ 2182.936710][T29239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2182.936736][T29239] vfs_read+0x200/0xa30 [ 2182.936763][T29239] ? fdget_pos+0x247/0x320 [ 2182.936785][T29239] ? __pfx___mutex_lock+0x10/0x10 [ 2182.936815][T29239] ? __pfx_vfs_read+0x10/0x10 [ 2182.936841][T29239] ? __fget_files+0x2a/0x420 [ 2182.936864][T29239] ? __fget_files+0x3a0/0x420 [ 2182.936882][T29239] ? __fget_files+0x2a/0x420 [ 2182.936909][T29239] ksys_read+0x145/0x250 [ 2182.936938][T29239] ? __pfx_ksys_read+0x10/0x10 [ 2182.936965][T29239] ? do_syscall_64+0xbe/0xfa0 [ 2182.936997][T29239] do_syscall_64+0xfa/0xfa0 [ 2182.937021][T29239] ? lockdep_hardirqs_on+0x9c/0x150 [ 2182.937049][T29239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.937069][T29239] ? clear_bhb_loop+0x60/0xb0 [ 2182.937092][T29239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.937109][T29239] RIP: 0033:0x7f839158e15c [ 2182.937127][T29239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2182.937143][T29239] RSP: 002b:00007f83924c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2182.937161][T29239] RAX: ffffffffffffffda RBX: 00007f83917e5fa0 RCX: 00007f839158e15c [ 2182.937175][T29239] RDX: 000000000000000f RSI: 00007f83924c30a0 RDI: 0000000000000004 [ 2182.937188][T29239] RBP: 00007f83924c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.937201][T29239] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 2182.937214][T29239] R13: 00007f83917e6038 R14: 00007f83917e5fa0 R15: 00007f839190fa28 [ 2182.937246][T29239] [ 2183.273262][ T5917] usb usb5-port1: unable to enumerate USB device [ 2183.298890][T19764] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2183.462769][T19764] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2183.479269][T19764] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2183.504843][T19764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2183.522795][T19764] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2183.557548][T19764] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2183.573450][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.586048][T19764] usb 2-1: Product: syz [ 2183.590539][T19764] usb 2-1: Manufacturer: syz [ 2183.602279][T19764] usb 2-1: SerialNumber: syz [ 2183.620576][T19764] usb 2-1: config 0 descriptor?? [ 2183.647990][T19764] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93 [ 2183.785949][T29259] SET target dimension over the limit! [ 2184.218534][T29268] FAULT_INJECTION: forcing a failure. [ 2184.218534][T29268] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.363977][T29268] CPU: 0 UID: 0 PID: 29268 Comm: syz.4.5806 Not tainted syzkaller #0 PREEMPT(full) [ 2184.364006][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2184.364019][T29268] Call Trace: [ 2184.364027][T29268] [ 2184.364037][T29268] dump_stack_lvl+0x189/0x250 [ 2184.364070][T29268] ? __pfx____ratelimit+0x10/0x10 [ 2184.364099][T29268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2184.364126][T29268] ? __pfx__printk+0x10/0x10 [ 2184.364149][T29268] ? __pfx___might_resched+0x10/0x10 [ 2184.364172][T29268] ? fs_reclaim_acquire+0x7d/0x100 [ 2184.364209][T29268] should_fail_ex+0x414/0x560 [ 2184.364245][T29268] should_failslab+0xa8/0x100 [ 2184.364268][T29268] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2184.364297][T29268] ? __raw_spin_lock_init+0x45/0x100 [ 2184.364322][T29268] ? pfkey_add+0x1b18/0x2e00 [ 2184.364356][T29268] pfkey_add+0x1b18/0x2e00 [ 2184.364403][T29268] ? __pfx_pfkey_add+0x10/0x10 [ 2184.364443][T29268] pfkey_sendmsg+0xbfe/0x1090 [ 2184.364485][T29268] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2184.364546][T29268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2184.364577][T29268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2184.364598][T29268] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2184.364625][T29268] __sock_sendmsg+0x21c/0x270 [ 2184.364658][T29268] ____sys_sendmsg+0x505/0x830 [ 2184.364686][T29268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2184.364718][T29268] ? import_iovec+0x74/0xa0 [ 2184.364748][T29268] ___sys_sendmsg+0x21f/0x2a0 [ 2184.364772][T29268] ? __pfx____sys_sendmsg+0x10/0x10 [ 2184.364836][T29268] ? __fget_files+0x2a/0x420 [ 2184.364855][T29268] ? __fget_files+0x3a0/0x420 [ 2184.364886][T29268] __x64_sys_sendmsg+0x19b/0x260 [ 2184.364911][T29268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2184.364944][T29268] ? __pfx_ksys_write+0x10/0x10 [ 2184.364977][T29268] ? do_syscall_64+0xbe/0xfa0 [ 2184.365010][T29268] do_syscall_64+0xfa/0xfa0 [ 2184.365036][T29268] ? lockdep_hardirqs_on+0x9c/0x150 [ 2184.365066][T29268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.365085][T29268] ? clear_bhb_loop+0x60/0xb0 [ 2184.365110][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.365130][T29268] RIP: 0033:0x7f364138f749 [ 2184.365148][T29268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2184.365166][T29268] RSP: 002b:00007f363f5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2184.365188][T29268] RAX: ffffffffffffffda RBX: 00007f36415e5fa0 RCX: 00007f364138f749 [ 2184.365204][T29268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2184.365217][T29268] RBP: 00007f363f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2184.365230][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2184.365243][T29268] R13: 00007f36415e6038 R14: 00007f36415e5fa0 R15: 00007f364170fa28 [ 2184.365277][T29268] [ 2185.010703][T19764] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2185.277608][ T5917] usb 2-1: USB disconnect, device number 73 [ 2185.426677][T19764] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2185.583917][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.593041][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.602097][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.611410][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.671933][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.681292][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.690387][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.699501][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.708538][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.727497][T19764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.754805][T19764] usb 4-1: config 0 has no interfaces? [ 2185.765099][T19764] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2185.888290][T29282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2185.927983][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 2185.946645][T19764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.977762][T19764] usb 4-1: config 0 descriptor?? [ 2186.281288][T29285] program syz.1.5809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2186.408937][T19764] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2186.465245][T29278] syz.2.5804 (29278): drop_caches: 2 [ 2186.618875][T19764] usb 1-1: Using ep0 maxpacket: 8 [ 2186.924705][T19764] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2187.188094][T19764] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2187.197583][T19764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.212663][T19764] usb 1-1: Product: syz [ 2187.231635][T19764] usb 1-1: Manufacturer: syz [ 2187.243415][T19764] usb 1-1: SerialNumber: syz [ 2187.256289][T19764] usb 1-1: config 0 descriptor?? [ 2187.272448][T19764] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2187.787958][T29296] netlink: 'syz.4.5812': attribute type 4 has an invalid length. [ 2187.854134][T29296] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2188.300306][T29307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2188.522234][T19314] usb 4-1: USB disconnect, device number 69 [ 2188.638818][T19764] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2188.757650][T29311] FAULT_INJECTION: forcing a failure. [ 2188.757650][T29311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2188.798157][T29311] CPU: 1 UID: 0 PID: 29311 Comm: syz.3.5818 Not tainted syzkaller #0 PREEMPT(full) [ 2188.798186][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2188.798200][T29311] Call Trace: [ 2188.798208][T29311] [ 2188.798218][T29311] dump_stack_lvl+0x189/0x250 [ 2188.798251][T29311] ? __pfx____ratelimit+0x10/0x10 [ 2188.798279][T29311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2188.798306][T29311] ? __pfx__printk+0x10/0x10 [ 2188.798339][T29311] should_fail_ex+0x414/0x560 [ 2188.798375][T29311] _copy_to_user+0x31/0xb0 [ 2188.798402][T29311] simple_read_from_buffer+0xe1/0x170 [ 2188.798437][T29311] proc_fail_nth_read+0x1b3/0x220 [ 2188.798466][T29311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2188.798495][T29311] ? rw_verify_area+0x2a6/0x4d0 [ 2188.798521][T29311] ? __lock_acquire+0xab9/0xd20 [ 2188.798539][T29311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2188.798567][T29311] vfs_read+0x200/0xa30 [ 2188.798593][T29311] ? fdget_pos+0x247/0x320 [ 2188.798616][T29311] ? __pfx___mutex_lock+0x10/0x10 [ 2188.798648][T29311] ? __pfx_vfs_read+0x10/0x10 [ 2188.798680][T29311] ? __fget_files+0x2a/0x420 [ 2188.798700][T29311] ? __fget_files+0x3a0/0x420 [ 2188.798715][T29311] ? __fget_files+0x2a/0x420 [ 2188.798740][T29311] ksys_read+0x145/0x250 [ 2188.798767][T29311] ? __pfx_ksys_read+0x10/0x10 [ 2188.798795][T29311] ? do_syscall_64+0xbe/0xfa0 [ 2188.798825][T29311] do_syscall_64+0xfa/0xfa0 [ 2188.798851][T29311] ? lockdep_hardirqs_on+0x9c/0x150 [ 2188.798879][T29311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.798900][T29311] ? clear_bhb_loop+0x60/0xb0 [ 2188.798924][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.798944][T29311] RIP: 0033:0x7f594998e15c [ 2188.798963][T29311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2188.798980][T29311] RSP: 002b:00007f594a880030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2188.799001][T29311] RAX: ffffffffffffffda RBX: 00007f5949be5fa0 RCX: 00007f594998e15c [ 2188.799017][T29311] RDX: 000000000000000f RSI: 00007f594a8800a0 RDI: 0000000000000003 [ 2188.799030][T29311] RBP: 00007f594a880090 R08: 0000000000000000 R09: 0000000000000000 [ 2188.799043][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.799056][T29311] R13: 00007f5949be6038 R14: 00007f5949be5fa0 R15: 00007f5949d0fa28 [ 2188.799090][T29311] [ 2189.199662][T27216] usb 1-1: USB disconnect, device number 118 [ 2189.239394][T19764] usb 2-1: Using ep0 maxpacket: 8 [ 2189.273960][T19764] usb 2-1: config 0 has no interfaces? [ 2189.286620][T19764] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2189.295798][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.304370][T19764] usb 2-1: Product: syz [ 2189.308560][T19764] usb 2-1: Manufacturer: syz [ 2189.313706][T19764] usb 2-1: SerialNumber: syz [ 2189.321914][T19764] usb 2-1: config 0 descriptor?? [ 2189.358822][T19314] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2189.646499][T19314] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2189.674722][T29316] loop6: detected capacity change from 0 to 524288000 [ 2189.736844][T19314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.768496][T19314] usb 5-1: Product: syz [ 2189.783949][T19314] usb 5-1: Manufacturer: syz [ 2189.803043][T19314] usb 5-1: SerialNumber: syz [ 2189.841967][T19314] usb 5-1: config 0 descriptor?? [ 2189.864741][T19314] ch341 5-1:0.0: ch341-uart converter detected [ 2190.773684][T29332] __nla_validate_parse: 41 callbacks suppressed [ 2190.773699][T29332] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5822'. [ 2190.863534][T19314] usb 5-1: failed to send control message: -71 [ 2190.878983][T19314] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2190.928963][T19314] usb 5-1: USB disconnect, device number 119 [ 2190.962135][T19314] ch341 5-1:0.0: device disconnected [ 2191.507125][T19764] usb 2-1: USB disconnect, device number 74 [ 2191.591380][T27216] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2191.642826][ T30] audit: type=1326 audit(1763647624.857:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29337 comm="syz.3.5826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f594998f749 code=0x0 [ 2191.908895][T27216] usb 3-1: Using ep0 maxpacket: 32 [ 2191.915683][T27216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.927933][T27216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2191.968622][T29351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.986812][T27216] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2192.008915][T27216] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2192.018289][T27216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.033668][T29346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2192.169464][T27216] usb 3-1: config 0 descriptor?? [ 2192.239113][T19764] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2192.308811][ T5920] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2192.520464][T29360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2192.592638][ T5920] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2192.604127][T19764] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2192.615654][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.625606][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.639141][ T8656] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2192.646940][T19764] usb 2-1: Product: syz [ 2192.654433][ T5920] usb 5-1: Product: syz [ 2192.658672][T19764] usb 2-1: Manufacturer: syz [ 2192.664365][T19764] usb 2-1: SerialNumber: syz [ 2192.680908][ T5920] usb 5-1: Manufacturer: syz [ 2192.685527][ T5920] usb 5-1: SerialNumber: syz [ 2192.695064][T27216] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0027/input/input94 [ 2192.806089][ T939] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2192.815257][T19764] usb 2-1: config 0 descriptor?? [ 2192.845578][T29335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2192.863429][ T5920] usb 5-1: config 0 descriptor?? [ 2192.904671][ T8656] usb 1-1: Using ep0 maxpacket: 16 [ 2192.913997][ T8656] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2192.925702][ T8656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.944412][ T8656] usb 1-1: Product: syz [ 2192.949985][T29335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.950983][T19764] ch341 2-1:0.0: ch341-uart converter detected [ 2192.968763][ T8656] usb 1-1: Manufacturer: syz [ 2192.976771][ T5920] ch341 5-1:0.0: ch341-uart converter detected [ 2192.988866][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 2193.045148][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2193.066216][ T8656] usb 1-1: SerialNumber: syz [ 2193.081563][T19764] usb 2-1: failed to receive control message: -32 [ 2193.091072][T19764] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 2193.117560][ T8656] usb 1-1: config 0 descriptor?? [ 2193.132147][ T939] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2193.144210][T27216] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0027/input/input95 [ 2193.160209][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.209334][ T939] usb 4-1: Product: syz [ 2193.217290][ T8656] as10x_usb: device has been detected [ 2193.227312][ T939] usb 4-1: Manufacturer: syz [ 2193.239925][T27216] kye 0003:0458:5011.0027: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 2193.255042][ T939] usb 4-1: SerialNumber: syz [ 2193.292489][ T8656] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2193.395736][ T939] usb 4-1: config 0 descriptor?? [ 2193.434502][T29358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.462507][ T939] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2193.478372][T29358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.568570][ T8656] usb 1-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2193.631000][ T8656] as10x_usb: error during firmware upload part1 [ 2193.648111][ T8656] Registered device Sky IT Digital Key (green led) [ 2193.805877][T29346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.822454][T29346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.837002][T29346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.846653][T29346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.129532][ T939] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 2194.268884][ T939] usb 3-1: device descriptor read/64, error -32 [ 2194.382791][T19314] usb 1-1: USB disconnect, device number 119 [ 2194.461741][T19314] Unregistered device Sky IT Digital Key (green led) [ 2194.479828][T19314] as10x_usb: device has been disconnected [ 2194.659554][ T5920] usb 5-1: failed to send control message: -110 [ 2194.666327][ T5920] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 2194.861643][ T8656] usb 2-1: USB disconnect, device number 75 [ 2194.873574][ T8656] ch341 2-1:0.0: device disconnected [ 2195.263396][T27216] usb 3-1: USB disconnect, device number 90 [ 2195.925959][T29379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2196.154363][T19314] usb 5-1: USB disconnect, device number 120 [ 2196.161530][T19314] ch341 5-1:0.0: device disconnected [ 2196.278909][ T8656] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2196.452272][T19314] usb 4-1: USB disconnect, device number 70 [ 2196.511183][ T8656] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2196.525622][ T8656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.528851][T27216] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2196.573512][ T8656] usb 1-1: Product: syz [ 2196.975541][T29389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2197.001699][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5837'. [ 2197.046857][T29389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5837'. [ 2197.079283][T27216] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2197.088608][T27216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.096783][T27216] usb 3-1: Product: syz [ 2197.101854][T27216] usb 3-1: Manufacturer: syz [ 2197.102789][ T8656] usb 1-1: Manufacturer: syz [ 2197.106468][T27216] usb 3-1: SerialNumber: syz [ 2197.146996][ T8656] usb 1-1: SerialNumber: syz [ 2197.162770][T27216] usb 3-1: config 0 descriptor?? [ 2197.181535][ T8656] usb 1-1: config 0 descriptor?? [ 2197.198582][T27216] ch341 3-1:0.0: ch341-uart converter detected [ 2197.213973][ T8656] ch341 1-1:0.0: ch341-uart converter detected [ 2197.573273][T27216] usb 3-1: failed to receive control message: -32 [ 2197.588588][T27216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 2197.629200][ T939] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2197.790278][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 2197.798195][ T939] usb 4-1: config 0 has no interfaces? [ 2197.823353][ T939] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2197.833225][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.848884][ T939] usb 4-1: Product: syz [ 2197.853285][ T939] usb 4-1: Manufacturer: syz [ 2197.863461][ T939] usb 4-1: SerialNumber: syz [ 2197.889979][ T939] usb 4-1: config 0 descriptor?? [ 2198.287407][ T8656] usb 1-1: failed to send control message: -71 [ 2198.294355][ T8656] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 2198.313457][ T8656] usb 1-1: USB disconnect, device number 120 [ 2198.372609][ T8656] ch341 1-1:0.0: device disconnected [ 2198.841982][ T939] usb 3-1: USB disconnect, device number 91 [ 2198.859935][ T939] ch341 3-1:0.0: device disconnected [ 2198.996975][T29408] fuse: Bad value for 'fd' [ 2199.428147][T29411] SET target dimension over the limit! [ 2199.915869][ T8656] usb 4-1: USB disconnect, device number 71 [ 2200.021418][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.030989][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.040279][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.110334][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.412143][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.429615][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.449136][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.460523][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2200.504582][T29433] syz.1.5842 (29433): drop_caches: 2 [ 2200.908827][ T939] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2201.059200][ T939] usb 3-1: Using ep0 maxpacket: 8 [ 2201.258861][T27216] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2201.430199][T27216] usb 1-1: Using ep0 maxpacket: 16 [ 2201.439049][T27216] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2201.463142][T27216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.486447][ T939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2201.514713][ T939] usb 3-1: no configurations [ 2201.519800][T27216] usb 1-1: Product: syz [ 2201.523955][T27216] usb 1-1: Manufacturer: syz [ 2201.528624][ T939] usb 3-1: can't read configurations, error -22 [ 2201.564935][T27216] usb 1-1: SerialNumber: syz [ 2201.569842][ T5920] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2201.621273][T27216] usb 1-1: config 0 descriptor?? [ 2201.659774][T27216] as10x_usb: device has been detected [ 2201.666016][T27216] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2201.696846][T27216] usb 1-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2201.725274][T27216] as10x_usb: error during firmware upload part1 [ 2201.732455][T27216] Registered device Sky IT Digital Key (green led) [ 2201.739126][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2201.842121][T29437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.850996][T29437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.948888][T19764] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2201.988916][ T8656] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2202.008899][ T5920] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2202.115080][T19764] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2202.124475][T19764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.133225][T19764] usb 4-1: Product: syz [ 2202.138056][T19764] usb 4-1: Manufacturer: syz [ 2202.143105][T19764] usb 4-1: SerialNumber: syz [ 2202.144401][ T8656] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 2202.159306][ T5920] usb 5-1: device descriptor read/64, error -71 [ 2202.167501][T19764] usb 4-1: config 0 descriptor?? [ 2202.167501][ T8656] usb 2-1: config 4 has no interface number 0 [ 2202.167546][ T8656] usb 2-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2202.200747][T19764] ch341 4-1:0.0: ch341-uart converter detected [ 2202.218788][ T8656] usb 2-1: config 4 interface 196 has no altsetting 0 [ 2202.230106][ T8656] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 2202.247569][ T8656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.258106][ T8656] usb 2-1: Product: syz [ 2202.262838][ T8656] usb 2-1: Manufacturer: syz [ 2202.267452][ T8656] usb 2-1: SerialNumber: syz [ 2202.278465][T29448] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2202.279661][ T5920] usb usb5-port1: attempt power cycle [ 2202.289789][ T8656] keyspan 2-1:4.196: Keyspan 1 port adapter converter detected [ 2202.300352][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 84 [ 2202.311451][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 81 [ 2202.319620][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 1 [ 2202.327486][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 2 [ 2202.335630][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 83 [ 2202.343670][ T8656] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 3 [ 2202.358873][ T8656] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 2202.370987][T19314] usb 1-1: USB disconnect, device number 121 [ 2202.507605][T19314] Unregistered device Sky IT Digital Key (green led) [ 2202.512655][T19314] as10x_usb: device has been disconnected [ 2202.529122][T29448] __nla_validate_parse: 37 callbacks suppressed [ 2202.529140][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5852'. [ 2202.558329][T29448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5852'. [ 2202.619525][ T939] usb 2-1: USB disconnect, device number 76 [ 2202.638320][ T939] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 2202.652565][ T939] keyspan 2-1:4.196: device disconnected [ 2202.660384][ T5920] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2202.699853][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2202.938853][ T5920] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2202.959482][ T5920] usb 5-1: device descriptor read/8, error -71 [ 2203.069158][ T5920] usb usb5-port1: unable to enumerate USB device [ 2203.306437][T19764] usb 4-1: failed to send control message: -71 [ 2203.325857][T19764] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2203.354087][T19764] usb 4-1: USB disconnect, device number 72 [ 2203.390509][T19764] ch341 4-1:0.0: device disconnected [ 2203.446951][T29464] FAULT_INJECTION: forcing a failure. [ 2203.446951][T29464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.466443][T29464] CPU: 1 UID: 0 PID: 29464 Comm: syz.2.5858 Not tainted syzkaller #0 PREEMPT(full) [ 2203.466469][T29464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2203.466482][T29464] Call Trace: [ 2203.466490][T29464] [ 2203.466500][T29464] dump_stack_lvl+0x189/0x250 [ 2203.466530][T29464] ? __pfx____ratelimit+0x10/0x10 [ 2203.466556][T29464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2203.466582][T29464] ? __pfx__printk+0x10/0x10 [ 2203.466601][T29464] ? __might_fault+0xb0/0x130 [ 2203.466638][T29464] should_fail_ex+0x414/0x560 [ 2203.466672][T29464] _copy_from_user+0x2d/0xb0 [ 2203.466698][T29464] ___sys_sendmsg+0x158/0x2a0 [ 2203.466724][T29464] ? __pfx____sys_sendmsg+0x10/0x10 [ 2203.466780][T29464] ? __fget_files+0x2a/0x420 [ 2203.466798][T29464] ? __fget_files+0x3a0/0x420 [ 2203.466827][T29464] __x64_sys_sendmsg+0x19b/0x260 [ 2203.466851][T29464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2203.466882][T29464] ? __pfx_ksys_write+0x10/0x10 [ 2203.466909][T29464] ? do_syscall_64+0xbe/0xfa0 [ 2203.466941][T29464] do_syscall_64+0xfa/0xfa0 [ 2203.466967][T29464] ? lockdep_hardirqs_on+0x9c/0x150 [ 2203.466996][T29464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.467016][T29464] ? clear_bhb_loop+0x60/0xb0 [ 2203.467038][T29464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.467055][T29464] RIP: 0033:0x7f839158f749 [ 2203.467073][T29464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2203.467091][T29464] RSP: 002b:00007f83924c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2203.467112][T29464] RAX: ffffffffffffffda RBX: 00007f83917e5fa0 RCX: 00007f839158f749 [ 2203.467127][T29464] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 2203.467139][T29464] RBP: 00007f83924c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2203.467161][T29464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.467173][T29464] R13: 00007f83917e6038 R14: 00007f83917e5fa0 R15: 00007f839190fa28 [ 2203.467203][T29464] [ 2203.668980][T19314] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2203.829093][T19314] usb 2-1: Using ep0 maxpacket: 8 [ 2204.142462][T19314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2204.156605][T19314] usb 2-1: no configurations [ 2204.161578][T19314] usb 2-1: can't read configurations, error -22 [ 2204.289110][T19764] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2204.727337][T19764] usb 3-1: config 0 has no interfaces? [ 2204.888867][ T8656] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2204.907201][T19764] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2204.930762][T19764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.988962][T19764] usb 3-1: Product: syz [ 2205.006337][T19764] usb 3-1: Manufacturer: syz [ 2205.011338][T19764] usb 3-1: SerialNumber: syz [ 2205.027184][T19764] usb 3-1: config 0 descriptor?? [ 2205.101983][ T8656] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2205.142609][ T8656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.202658][ T8656] usb 4-1: config 0 has no interfaces? [ 2205.208270][ T8656] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2205.229197][ T5917] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2205.271233][T29471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.285072][T29471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.300240][T29471] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5859'. [ 2205.318079][ T8656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.389226][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 2205.399427][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.418483][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2205.486729][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2205.507047][ T8656] usb 4-1: config 0 descriptor?? [ 2205.563613][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2205.608245][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2205.796975][T29492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5864'. [ 2205.809314][ T5917] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2205.819374][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2205.846157][ T5917] usb 5-1: Product: syz [ 2205.928779][T19314] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 2205.971890][ T5917] usb 5-1: Manufacturer: syz [ 2205.977222][ T5917] usb 5-1: SerialNumber: syz [ 2205.991640][ T5917] usb 5-1: config 0 descriptor?? [ 2206.191469][T19314] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2206.212592][ T5917] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2206.229168][ T5917] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2206.273211][T19314] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2206.439099][T19314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2206.451896][ T5917] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 2206.470125][ T5917] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2206.482620][T19314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2206.506982][ T5917] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2206.581078][T19314] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2206.635132][T19314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.656077][ T5917] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 2206.715774][T19314] usb 1-1: Product: syz [ 2206.737341][T19314] usb 1-1: Manufacturer: syz [ 2206.769397][T19314] usb 1-1: SerialNumber: syz [ 2206.931095][T19314] usb 1-1: config 0 descriptor?? [ 2206.969812][T19314] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input96 [ 2207.241365][T19314] usb 1-1: USB disconnect, device number 122 [ 2207.247443][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 2207.471661][T19764] usb 3-1: USB disconnect, device number 94 [ 2207.554148][T19314] usb 4-1: USB disconnect, device number 73 [ 2207.592327][T29484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.622947][T29484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.785442][T29501] SET target dimension over the limit! [ 2207.850365][ T5917] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2207.899410][ T5917] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 2207.918210][ T8656] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 2207.960200][T29505] binder: 29500:29505 ioctl 4b37 0 returned -22 [ 2207.960906][ T8656] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2209.083327][ T8656] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 2209.300147][ T8656] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2209.311297][ T8656] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2209.328206][ T8656] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2209.329165][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.420923][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.430277][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.442249][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.451490][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.476997][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.486160][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.495193][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.504302][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.513558][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 2209.564009][ T8656] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2209.586130][ T8656] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2209.603108][ T8656] usb 2-1: Product: syz [ 2209.616233][ T8656] usb 2-1: Manufacturer: syz [ 2209.630067][ T8656] usb 2-1: SerialNumber: syz [ 2209.645676][ T8656] usb 2-1: config 0 descriptor?? [ 2209.841615][ T8656] usb 2-1: selecting invalid altsetting 0 [ 2209.875120][T19764] usb 5-1: USB disconnect, device number 125 [ 2210.081478][T29513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.090586][T29513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.103048][ T8656] usb 2-1: USB disconnect, device number 79 [ 2211.319051][ T5917] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2211.538411][ T5917] usb 2-1: config 0 has no interfaces? [ 2211.577626][ T5917] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2211.587227][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.598013][ T5917] usb 2-1: Product: syz [ 2211.620969][ T5917] usb 2-1: Manufacturer: syz [ 2211.648851][ T5917] usb 2-1: SerialNumber: syz [ 2211.672435][ T5917] usb 2-1: config 0 descriptor?? [ 2211.900215][T29534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.913479][T29534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.809013][ T5917] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2213.038350][ T5917] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2213.050974][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.137846][ T5917] usb 1-1: config 0 has no interfaces? [ 2213.148026][ T5917] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2213.173537][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.251195][ T5917] usb 1-1: config 0 descriptor?? [ 2213.854535][T29560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2214.081240][ T8656] usb 2-1: USB disconnect, device number 80 [ 2214.149911][ T5917] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2214.331760][ T5917] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2214.373298][T29565] veth1_to_bond: entered allmulticast mode [ 2214.551295][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.601782][ T5917] usb 5-1: Product: syz [ 2214.620767][ T5917] usb 5-1: Manufacturer: syz [ 2214.625417][ T5917] usb 5-1: SerialNumber: syz [ 2214.634714][ T5917] usb 5-1: config 0 descriptor?? [ 2214.649068][ T5917] ch341 5-1:0.0: ch341-uart converter detected [ 2214.709014][T19764] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2214.859489][T19764] usb 3-1: Using ep0 maxpacket: 8 [ 2214.871700][T29560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.883077][T29560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.176205][T29562] veth1_to_bond: left allmulticast mode [ 2215.633495][T19764] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2215.641399][T19764] usb 3-1: no configurations [ 2215.677017][ T8656] usb 1-1: USB disconnect, device number 123 [ 2215.700714][ T5917] usb 5-1: failed to receive control message: -110 [ 2215.731075][ T5917] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2215.739983][T19764] usb 3-1: can't read configurations, error -22 [ 2216.188873][ T8656] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2216.339207][ T5917] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2216.353541][ T8656] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2216.367679][ T8656] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2216.377467][ T8656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.385826][ T8656] usb 1-1: Product: syz [ 2216.390567][ T8656] usb 1-1: Manufacturer: syz [ 2216.397479][ T8656] usb 1-1: SerialNumber: syz [ 2216.581004][ T5917] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2216.605399][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.635928][ T5917] usb 2-1: Product: syz [ 2216.681605][ T5917] usb 2-1: Manufacturer: syz [ 2216.689339][ T5917] usb 2-1: SerialNumber: syz [ 2216.705688][ T5917] usb 2-1: config 0 descriptor?? [ 2216.721640][ T5917] ch341 2-1:0.0: ch341-uart converter detected [ 2216.771577][T19314] usb 5-1: USB disconnect, device number 126 [ 2216.778658][T19314] ch341 5-1:0.0: device disconnected [ 2216.814382][T29577] loop6: detected capacity change from 0 to 524288000 [ 2216.829429][T29576] __nla_validate_parse: 40 callbacks suppressed [ 2216.829445][T29576] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5886'. [ 2217.052219][T29570] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 2217.080969][T29570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5883'. [ 2217.093317][T29570] netlink: 'syz.0.5883': attribute type 10 has an invalid length. [ 2217.102258][T29570] bond0: (slave wlan1): Opening slave failed [ 2217.519073][T19314] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2217.531012][ T8656] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2217.633247][ T8656] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2217.709347][T19314] usb 3-1: Using ep0 maxpacket: 16 [ 2217.721420][T19314] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2217.730782][ T5917] usb 2-1: failed to send control message: -71 [ 2217.737064][ T5917] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 2217.753079][T19314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.768023][ T5920] usb 1-1: USB disconnect, device number 124 [ 2217.769436][ T5917] usb 2-1: USB disconnect, device number 81 [ 2217.777105][ T5920] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 2217.788428][T19314] usb 3-1: Product: syz [ 2217.798187][T19314] usb 3-1: Manufacturer: syz [ 2217.818135][T19314] usb 3-1: SerialNumber: syz [ 2217.830655][ T5917] ch341 2-1:0.0: device disconnected [ 2217.830719][T19764] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 2217.857243][T19314] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2217.874595][T19314] r8152-cfgselector 3-1: config 0 descriptor?? [ 2218.000686][T19764] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2218.023884][T19764] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2218.079390][T19764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2218.219426][T19764] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2218.331101][T19764] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2218.345457][T19764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.367728][T19764] usb 5-1: Product: syz [ 2218.376824][T19764] usb 5-1: Manufacturer: syz [ 2218.385853][T19764] usb 5-1: SerialNumber: syz [ 2218.416875][T19764] usb 5-1: config 0 descriptor?? [ 2218.437781][T19764] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input97 [ 2218.478952][T19314] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2218.640466][T19764] usb 5-1: USB disconnect, device number 127 [ 2218.641691][T19314] usb 4-1: config 0 has no interfaces? [ 2218.662235][T19314] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2218.671869][ T5917] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2218.680389][T19314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.689750][T19314] usb 4-1: Product: syz [ 2218.695540][T19314] usb 4-1: Manufacturer: syz [ 2218.700532][T19314] usb 4-1: SerialNumber: syz [ 2219.111378][ T5917] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 2219.121532][ T5917] usb 2-1: config 4 has no interface number 0 [ 2219.128971][T19314] usb 4-1: config 0 descriptor?? [ 2219.145684][ T5917] usb 2-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2219.229831][ T5917] usb 2-1: config 4 interface 196 has no altsetting 0 [ 2219.249832][ T5917] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 2219.259113][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.272961][ T5917] usb 2-1: Product: syz [ 2219.281436][ T5917] usb 2-1: Manufacturer: syz [ 2219.292563][ T5917] usb 2-1: SerialNumber: syz [ 2219.321604][T29602] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2219.349179][ T8656] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2219.429508][T29597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.447358][T29597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.467799][T29597] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5891'. [ 2219.522148][ T8656] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2219.545698][T29602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.554817][T29602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.562974][ T8656] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.574692][ T8656] usb 1-1: config 0 has no interfaces? [ 2219.586510][ T8656] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2219.616057][ T8656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.659423][ T8656] usb 1-1: config 0 descriptor?? [ 2219.837080][ T5917] keyspan 2-1:4.196: Keyspan 1 port adapter converter detected [ 2219.845889][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 84 [ 2219.919376][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 81 [ 2220.152062][T19764] r8152-cfgselector 3-1: USB disconnect, device number 97 [ 2220.259839][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 1 [ 2220.289498][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 2 [ 2220.324930][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 83 [ 2220.378962][ T5917] keyspan 2-1:4.196: found no endpoint descriptor for endpoint 3 [ 2220.412054][ T5917] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2220.438092][ T5917] usb 2-1: USB disconnect, device number 82 [ 2220.457855][ T5917] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2220.575084][ T5917] keyspan 2-1:4.196: device disconnected [ 2220.652207][ T8656] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 2220.835079][ T8656] usb 3-1: config 7 has an invalid interface number: 156 but max is 3 [ 2220.850399][ T8656] usb 3-1: config 7 has an invalid interface number: 248 but max is 3 [ 2220.895345][ T8656] usb 3-1: config 7 has an invalid interface number: 87 but max is 3 [ 2220.946941][ T8656] usb 3-1: config 7 has an invalid interface number: 91 but max is 3 [ 2220.975391][ T8656] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2220.991051][ T8656] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.136968][T29635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2221.147996][T29635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5898'. [ 2221.157045][T29635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'. [ 2221.197858][ T8656] usb 3-1: config 7 has no interface number 0 [ 2221.217774][ T8656] usb 3-1: config 7 has no interface number 1 [ 2221.269705][ T8656] usb 3-1: config 7 has no interface number 2 [ 2221.307976][ T8656] usb 3-1: config 7 has no interface number 3 [ 2221.326782][ T8656] usb 3-1: config 7 interface 156 altsetting 0 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 2221.371110][ T8656] usb 3-1: config 7 interface 156 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 2221.386814][ T5920] usb 4-1: USB disconnect, device number 74 [ 2221.403804][ T8656] usb 3-1: config 7 interface 156 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2221.429030][T19764] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2221.474574][ T8656] usb 3-1: config 7 interface 156 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 2221.534079][ T8656] usb 3-1: config 7 interface 156 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 2221.614161][ T5917] usb 1-1: USB disconnect, device number 125 [ 2221.671105][ T8656] usb 3-1: config 7 interface 248 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 2221.702925][ T8656] usb 3-1: config 7 interface 248 altsetting 236 endpoint 0xF has invalid maxpacket 16, setting to 8 [ 2221.724704][ T8656] usb 3-1: config 7 interface 248 altsetting 236 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 2221.742777][ T8656] usb 3-1: config 7 interface 248 altsetting 236 has a duplicate endpoint with address 0xD, skipping [ 2221.949317][T19764] usb 5-1: Using ep0 maxpacket: 8 [ 2221.971465][T19764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.014610][T19764] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2222.030991][T19764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.039188][T19764] usb 5-1: Product: syz [ 2222.048859][T19764] usb 5-1: Manufacturer: syz [ 2222.062388][ T8656] usb 3-1: config 7 interface 87 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 2222.077524][ T8656] usb 3-1: config 7 interface 87 altsetting 2 has an endpoint descriptor with address 0x5D, changing to 0xD [ 2222.091547][T19764] usb 5-1: SerialNumber: syz [ 2222.140699][T29655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2222.152768][T19764] usb 5-1: config 0 descriptor?? [ 2222.260359][T19764] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2222.322816][ T8656] usb 3-1: config 7 interface 87 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 2222.544048][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.550882][T23668] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2222.558633][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.627207][ T8656] usb 3-1: config 7 interface 87 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 2222.639169][ T8656] usb 3-1: config 7 interface 87 altsetting 2 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 2222.651054][ T8656] usb 3-1: config 7 interface 87 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 2222.678843][ T8656] usb 3-1: config 7 interface 87 altsetting 2 endpoint 0xC has invalid maxpacket 53806, setting to 8 [ 2223.087928][T23668] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2223.101596][ T8656] usb 3-1: config 7 interface 87 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2223.115326][T23668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.130026][T23668] usb 2-1: Product: syz [ 2223.144046][T23668] usb 2-1: Manufacturer: syz [ 2223.353295][ T8656] usb 3-1: config 7 interface 91 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 2223.401592][T23668] usb 2-1: SerialNumber: syz [ 2223.435374][T23668] usb 2-1: config 0 descriptor?? [ 2223.451608][ T8656] usb 3-1: config 7 interface 91 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 2223.481973][T23668] ch341 2-1:0.0: ch341-uart converter detected [ 2223.501651][ T8656] usb 3-1: config 7 interface 91 altsetting 12 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2223.645074][ T8656] usb 3-1: config 7 interface 91 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 2223.730931][ T8656] usb 3-1: config 7 interface 248 has no altsetting 0 [ 2223.784398][ T8656] usb 3-1: config 7 interface 87 has no altsetting 0 [ 2223.818974][T19764] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2223.835596][ T8656] usb 3-1: config 7 interface 91 has no altsetting 0 [ 2223.871193][T29672] loop6: detected capacity change from 0 to 524288000 [ 2223.902226][ T8656] usb 3-1: string descriptor 0 read error: -71 [ 2223.954876][ T939] usb 5-1: USB disconnect, device number 2 [ 2223.968789][T19764] usb 4-1: device descriptor read/64, error -71 [ 2223.986544][ T8656] usb 3-1: New USB device found, idVendor=04e8, idProduct=6611, bcdDevice=2a.c9 [ 2224.039113][ T8656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.064899][ T8656] usb 3-1: can't set config #7, error -71 [ 2224.084321][ T8656] usb 3-1: USB disconnect, device number 98 [ 2224.248806][T19764] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2224.348877][ T939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2224.388818][T19764] usb 4-1: device descriptor read/64, error -71 [ 2224.397215][T29655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.406447][T29655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.414657][ T8656] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2224.428466][T29655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.439931][T29655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.499871][T19764] usb usb4-port1: attempt power cycle [ 2224.505333][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 2224.515435][ T939] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2224.525107][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.533284][ T939] usb 5-1: Product: syz [ 2224.539351][ T939] usb 5-1: Manufacturer: syz [ 2224.544092][ T939] usb 5-1: SerialNumber: syz [ 2224.586442][ T939] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2224.601435][ T939] r8152-cfgselector 5-1: config 0 descriptor?? [ 2224.620240][ T8656] usb 3-1: Using ep0 maxpacket: 8 [ 2224.859266][T19764] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2224.979516][T19764] usb 4-1: device descriptor read/8, error -71 [ 2224.991156][ T8656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2224.999746][ T8656] usb 3-1: no configurations [ 2225.004402][ T8656] usb 3-1: can't read configurations, error -22 [ 2225.066627][ T939] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 2225.208840][ T5917] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 2225.218997][T19764] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2225.219324][T23668] usb 2-1: failed to send control message: -110 [ 2225.233194][T23668] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2225.253271][T19764] usb 4-1: device descriptor read/8, error -71 [ 2225.361774][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2225.373317][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2225.379143][T19764] usb usb4-port1: unable to enumerate USB device [ 2225.385801][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2225.402958][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2225.417896][ T5917] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2225.427197][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.435271][ T5917] usb 1-1: Product: syz [ 2225.439588][ T5917] usb 1-1: Manufacturer: syz [ 2225.444220][ T5917] usb 1-1: SerialNumber: syz [ 2225.450957][ T5917] usb 1-1: config 0 descriptor?? [ 2225.460822][ T5917] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input98 [ 2225.731005][T29682] binder: 29681:29682 ioctl 8933 200000000180 returned -22 [ 2225.742178][ T5917] usb 1-1: USB disconnect, device number 126 [ 2225.896764][T29685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5907'. [ 2226.005751][T19314] usb 2-1: USB disconnect, device number 83 [ 2226.017144][T19314] ch341 2-1:0.0: device disconnected [ 2226.212413][ T8656] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2226.382120][ T8656] usb 3-1: Using ep0 maxpacket: 8 [ 2226.521769][T19314] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2226.691611][T19314] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2226.699028][T29697] xt_CT: No such helper "snmp_trap" [ 2226.715507][T19314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.735821][T19314] usb 2-1: config 0 has no interfaces? [ 2226.752777][T19314] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2226.899181][T19314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.957488][T19314] usb 2-1: config 0 descriptor?? [ 2227.203881][ T8656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2227.261817][ T8656] usb 3-1: no configurations [ 2227.284781][ T8656] usb 3-1: can't read configurations, error -22 [ 2227.518807][T19764] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2227.878594][T29710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2227.891322][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2227.900543][T29710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2228.002314][T29712] sock: sock_set_timeout: `syz.4.5916' (pid 29712) tries to set negative timeout [ 2228.019009][T19764] usb 1-1: Using ep0 maxpacket: 8 [ 2228.027342][T29712] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 2228.041518][T19764] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2228.060671][T29712] bond5: entered promiscuous mode [ 2228.067513][T29712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2228.068803][T19764] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2228.093238][T29712] dvmrp8: entered allmulticast mode [ 2228.117743][T19764] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2228.118226][T29712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2228.136988][T29712] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 2228.147641][T29712] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2228.163642][T29712] bond5: (slave gre1): making interface the new active one [ 2228.172804][T29712] gre1: entered promiscuous mode [ 2228.180918][T29712] bond5: (slave gre1): Enslaving as an active interface with an up link [ 2228.193502][T19764] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.219000][ T939] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2228.268786][T19764] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.301569][T19764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.378845][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 2228.394596][ T939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2228.422903][ T939] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2228.433267][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.441711][ T939] usb 4-1: Product: syz [ 2228.453534][ T939] usb 4-1: Manufacturer: syz [ 2228.464951][ T939] usb 4-1: SerialNumber: syz [ 2228.476784][ T939] usb 4-1: config 0 descriptor?? [ 2228.491323][ T939] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2228.556036][T19764] usb 1-1: GET_CAPABILITIES returned 0 [ 2228.564392][T19764] usbtmc 1-1:16.0: can't read capabilities [ 2228.598899][T19314] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2228.608794][T27216] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2228.749209][T19314] usb 5-1: Using ep0 maxpacket: 8 [ 2228.763927][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.773387][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.787758][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.792976][T27216] usb 3-1: Using ep0 maxpacket: 16 [ 2228.806135][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.815267][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.824358][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.836918][T27216] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2228.837498][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.855454][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.858765][T27216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.864572][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.881998][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.882848][T27216] usb 3-1: Product: syz [ 2228.895229][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.904451][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.919641][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.928784][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.933390][T27216] usb 3-1: Manufacturer: syz [ 2228.938825][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.951323][T27216] usb 3-1: SerialNumber: syz [ 2228.953277][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2228.969616][ T8656] usb 1-1: USB disconnect, device number 127 [ 2229.004848][T27216] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2229.016322][T27216] r8152-cfgselector 3-1: config 0 descriptor?? [ 2229.084560][T19314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2229.094981][T19314] usb 5-1: no configurations [ 2229.099992][T19314] usb 5-1: can't read configurations, error -22 [ 2229.467030][T27216] r8152-cfgselector 3-1: USB disconnect, device number 103 [ 2229.846530][T27216] usb 2-1: USB disconnect, device number 84 [ 2229.945499][T29736] netlink: 'syz.1.5925': attribute type 2 has an invalid length. [ 2230.087087][T29740] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5926'. [ 2230.129149][ T8656] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2230.139174][T19314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2230.289290][T19314] usb 5-1: device descriptor read/64, error -71 [ 2230.303211][ T8656] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2230.312609][ T8656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.321356][ T8656] usb 1-1: Product: syz [ 2230.325782][ T8656] usb 1-1: Manufacturer: syz [ 2230.331096][ T8656] usb 1-1: SerialNumber: syz [ 2230.341081][ T8656] usb 1-1: config 0 descriptor?? [ 2230.349337][T23668] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 2230.366208][ T8656] ch341 1-1:0.0: ch341-uart converter detected [ 2230.401044][T19314] usb usb5-port1: attempt power cycle [ 2230.449839][T27216] usb 4-1: USB disconnect, device number 79 [ 2230.632561][T23668] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2230.642623][T23668] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2230.657022][T23668] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2230.668281][T23668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.902060][T23668] usb 2-1: usb_control_msg returned -32 [ 2230.912485][T19314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2230.967898][T23668] usbtmc 2-1:16.0: can't read capabilities [ 2231.004455][T23668] usb 2-1: USB disconnect, device number 85 [ 2231.015040][T19314] usb 5-1: device descriptor read/8, error -71 [ 2231.161213][T29752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2231.174881][ T8656] usb 1-1: failed to send control message: -71 [ 2231.202776][ T8656] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2231.239042][ T8656] usb 1-1: USB disconnect, device number 2 [ 2231.268810][T19314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2231.364673][ T8656] ch341 1-1:0.0: device disconnected [ 2231.381463][T19314] usb 5-1: device descriptor read/8, error -71 [ 2231.409215][T27216] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2231.519091][T19314] usb usb5-port1: unable to enumerate USB device [ 2231.567262][T29757] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5932'. [ 2231.697558][T27216] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2231.707423][T27216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.718407][T27216] usb 4-1: Product: syz [ 2231.728382][T27216] usb 4-1: Manufacturer: syz [ 2231.738019][T27216] usb 4-1: SerialNumber: syz [ 2231.751052][T27216] usb 4-1: config 0 descriptor?? [ 2231.786885][T27216] ch341 4-1:0.0: ch341-uart converter detected [ 2231.818862][T19764] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2231.841627][T29764] netlink: 'syz.0.5933': attribute type 4 has an invalid length. [ 2231.970715][T19764] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2232.066218][T19764] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2232.097241][T19764] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2232.135260][T19764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.503874][T19764] usb 2-1: usb_control_msg returned -32 [ 2232.514676][T19764] usbtmc 2-1:16.0: can't read capabilities [ 2232.889862][T29752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.905665][T29752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.921155][T29752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.930353][T29752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.269009][T19314] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2233.432692][T29783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'. [ 2233.457777][T19314] usb 3-1: Using ep0 maxpacket: 16 [ 2233.501318][T19314] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2233.518860][T19314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.549030][T27216] usb 4-1: failed to send control message: -110 [ 2233.555969][T27216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2233.564689][T19314] usb 3-1: Product: syz [ 2233.570344][T19314] usb 3-1: Manufacturer: syz [ 2233.575005][T19314] usb 3-1: SerialNumber: syz [ 2233.636089][T19314] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2233.688296][T19314] r8152-cfgselector 3-1: config 0 descriptor?? [ 2234.225346][T19314] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 2234.478848][T27216] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2234.513492][T19764] usb 2-1: USB disconnect, device number 86 [ 2234.650826][T27216] usb 5-1: Using ep0 maxpacket: 8 [ 2234.657946][T27216] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 2234.670841][T27216] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2234.685801][T27216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.694169][T27216] usb 5-1: Product: syz [ 2234.698379][T27216] usb 5-1: Manufacturer: syz [ 2234.703114][T27216] usb 5-1: SerialNumber: syz [ 2234.712040][T27216] usb 5-1: config 0 descriptor?? [ 2234.722760][T27216] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2234.726106][T29799] netlink: 'syz.0.5944': attribute type 4 has an invalid length. [ 2234.731005][T27216] usb 5-1: setting power ON [ 2234.731031][T27216] dvb-usb: bulk message failed: -22 (2/0) [ 2234.771521][T27216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2234.783119][T27216] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2234.806229][T27216] usb 5-1: media controller created [ 2234.878577][T27216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2234.911551][T19764] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2234.956029][ T939] usb 4-1: USB disconnect, device number 80 [ 2234.963854][ T939] ch341 4-1:0.0: device disconnected [ 2235.010026][T27216] usb 5-1: selecting invalid altsetting 6 [ 2235.032926][T27216] usb 5-1: digital interface selection failed (-22) [ 2235.041481][T27216] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2235.050808][T27216] usb 5-1: setting power OFF [ 2235.055419][T27216] dvb-usb: bulk message failed: -22 (2/0) [ 2235.061659][T27216] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2235.071764][T27216] (NULL device *): no alternate interface [ 2235.093186][T27216] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2235.128844][T19764] usb 2-1: Using ep0 maxpacket: 16 [ 2235.136214][T19764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2235.148488][T19764] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2235.158111][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.166485][T19764] usb 2-1: Product: syz [ 2235.170776][T19764] usb 2-1: Manufacturer: syz [ 2235.175380][T19764] usb 2-1: SerialNumber: syz [ 2235.182311][T19764] usb 2-1: config 0 descriptor?? [ 2235.190146][T19764] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2235.199456][T19764] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2235.258855][T19314] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2235.268831][ T8656] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2235.410779][T19314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 2235.422033][ T8656] usb 1-1: Using ep0 maxpacket: 16 [ 2235.427381][T19314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 2235.439711][T19314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2235.456770][T19314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2235.467166][T19314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.476210][ T8656] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2235.485653][ T8656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.497410][T19314] usb 3-1: config 0 descriptor?? [ 2235.498132][ T939] usb 5-1: USB disconnect, device number 8 [ 2235.505848][ T8656] usb 1-1: Product: syz [ 2235.525179][ T8656] usb 1-1: Manufacturer: syz [ 2235.530710][ T8656] usb 1-1: SerialNumber: syz [ 2235.556689][ T8656] usb 1-1: config 0 descriptor?? [ 2235.573756][ T8656] as10x_usb: device has been detected [ 2235.583247][ T8656] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2235.608113][ T8656] usb 1-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2235.623519][ T8656] as10x_usb: error during firmware upload part1 [ 2235.631114][ T8656] Registered device Sky IT Digital Key (green led) [ 2235.675973][T29811] veth1_to_bond: entered allmulticast mode [ 2235.731280][T19314] usbhid 3-1:0.0: can't add hid device: -71 [ 2235.744058][T19314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2235.755363][T19314] usb 3-1: USB disconnect, device number 105 [ 2235.785631][T29806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.796112][T19764] em28xx 2-1:0.0: chip ID is em2765 [ 2235.883070][T29806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2236.419457][T19764] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2236.427752][T19764] em28xx 2-1:0.0: board has no eeprom [ 2236.554221][T29825] fuse: Bad value for 'fd' [ 2236.586594][T27216] usb 1-1: USB disconnect, device number 3 [ 2236.703715][T19764] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2236.721728][T19764] em28xx 2-1:0.0: dvb set to bulk mode. [ 2236.729317][T27216] Unregistered device Sky IT Digital Key (green led) [ 2236.730287][ T939] em28xx 2-1:0.0: Binding DVB extension [ 2236.744595][T27216] as10x_usb: device has been disconnected [ 2236.754343][T19764] usb 2-1: USB disconnect, device number 87 [ 2236.780160][T19764] em28xx 2-1:0.0: Disconnecting em28xx [ 2236.828832][ T939] em28xx 2-1:0.0: Registering input extension [ 2237.038900][T19764] em28xx 2-1:0.0: Closing input extension [ 2237.348465][T29793] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2237.355027][T29793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2237.387930][T27216] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2237.395886][T29793] vhci_hcd vhci_hcd.0: Device attached [ 2237.549354][T27216] usb 4-1: Using ep0 maxpacket: 16 [ 2237.558434][T27216] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2237.568270][T27216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.578218][T27216] usb 4-1: Product: syz [ 2237.584914][T27216] usb 4-1: Manufacturer: syz [ 2237.590244][T27216] usb 4-1: SerialNumber: syz [ 2237.606763][T27216] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2237.613308][T27216] r8152-cfgselector 4-1: config 0 descriptor?? [ 2237.648878][ T939] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2237.750654][T29844] netlink: 'syz.2.5956': attribute type 4 has an invalid length. [ 2237.770943][T29838] vhci_hcd: connection reset by peer [ 2237.778080][T19764] em28xx 2-1:0.0: Freeing device [ 2237.798307][T24743] vhci_hcd: stop threads [ 2237.828959][T24743] vhci_hcd: release socket [ 2237.858908][T24743] vhci_hcd: disconnect device [ 2238.478973][T19314] r8152-cfgselector 4-1: USB disconnect, device number 81 [ 2238.741122][T29810] veth1_to_bond: left allmulticast mode [ 2239.306570][T29858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2239.578848][T19314] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 2239.590968][T29865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5961'. [ 2239.804000][T19314] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2239.886337][T19314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2239.914872][T19314] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 2239.924887][T19314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.943611][T19314] usb 3-1: Product: syz [ 2239.965763][T19314] usb 3-1: Manufacturer: syz [ 2240.020015][T19314] usb 3-1: SerialNumber: syz [ 2240.158897][T23668] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2240.187504][T19314] usb 3-1: config 0 descriptor?? [ 2240.348047][T23668] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2240.363314][T23668] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2240.391852][T23668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2240.437094][T23668] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2240.742128][T23668] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2240.756877][T23668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.766383][T23668] usb 4-1: Product: syz [ 2240.785395][T23668] usb 4-1: Manufacturer: syz [ 2240.789416][T19764] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2240.953091][T19764] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2241.271881][T19764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.292019][T29882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2241.318809][T23668] usb 4-1: SerialNumber: syz [ 2241.319778][T19764] usb 2-1: Product: syz [ 2241.331288][T19764] usb 2-1: Manufacturer: syz [ 2241.337884][T19764] usb 2-1: SerialNumber: syz [ 2241.349593][T23668] usb 4-1: config 0 descriptor?? [ 2241.388412][T19764] usb 2-1: config 0 descriptor?? [ 2241.393013][T23668] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input100 [ 2241.450465][T19764] ch341 2-1:0.0: ch341-uart converter detected [ 2241.623230][T23668] usb 4-1: USB disconnect, device number 82 [ 2241.639107][T19314] powermate: Expected payload of 3--6 bytes, found 7 bytes! [ 2241.786934][T19314] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input101 [ 2241.818685][ C0] powermate: config urb returned -71 [ 2241.825132][ C0] powermate: config urb returned -71 [ 2241.831536][ C0] powermate: config urb returned -71 [ 2241.838899][ C0] powermate: config urb returned -71 [ 2241.871909][T19314] usb 3-1: USB disconnect, device number 106 [ 2241.877987][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 2242.055105][T29887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5967'. [ 2242.302291][T29891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2242.317208][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5968'. [ 2242.326911][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5968'. [ 2242.342045][T19764] usb 2-1: failed to send control message: -71 [ 2242.356131][T19764] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2242.378584][T19764] usb 2-1: USB disconnect, device number 88 [ 2242.403228][T19764] ch341 2-1:0.0: device disconnected [ 2242.729235][ T939] vhci_hcd: vhci_device speed not set [ 2242.759002][T27216] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2242.798901][T19314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2242.948875][T19314] usb 1-1: Using ep0 maxpacket: 8 [ 2242.960226][T27216] usb 4-1: Using ep0 maxpacket: 8 [ 2242.977045][T27216] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2243.005775][T19314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.015224][T27216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.038492][T27216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.066953][T19314] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2243.108602][T27216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2243.138384][T19314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.162651][T27216] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2243.227558][T19314] usb 1-1: Product: syz [ 2243.232865][T27216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.241637][T19314] usb 1-1: Manufacturer: syz [ 2243.251295][T19314] usb 1-1: SerialNumber: syz [ 2243.260030][T27216] usb 4-1: config 0 descriptor?? [ 2243.426716][T19314] usb 1-1: config 0 descriptor?? [ 2243.671599][T19314] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2243.689513][T27216] redragon 0003:0C45:760B.0029: unknown main item tag 0x6 [ 2243.719570][T27216] redragon 0003:0C45:760B.0029: item fetching failed at offset 7/133 [ 2243.819979][T27216] redragon 0003:0C45:760B.0029: probe with driver redragon failed with error -22 [ 2244.052060][ T939] usb 4-1: USB disconnect, device number 83 [ 2244.213295][T29909] veth1_to_bond: entered allmulticast mode [ 2245.181584][T29920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2245.294571][T23668] usb 1-1: USB disconnect, device number 4 [ 2245.434068][T29925] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2245.568857][T19314] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2245.802349][ T939] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2245.866376][T19314] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2245.965944][T19314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.091274][T19314] usb 4-1: Product: syz [ 2246.106452][ T939] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2246.131887][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.140559][ T939] usb 2-1: Product: syz [ 2246.260294][T27216] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 2246.260476][T19314] usb 4-1: Manufacturer: syz [ 2246.285261][T19314] usb 4-1: SerialNumber: syz [ 2246.305891][ T939] usb 2-1: Manufacturer: syz [ 2246.310968][ T939] usb 2-1: SerialNumber: syz [ 2246.326222][ T939] usb 2-1: config 0 descriptor?? [ 2246.355954][ T939] ch341 2-1:0.0: ch341-uart converter detected [ 2246.429328][T19314] usb 4-1: config 0 descriptor?? [ 2246.464674][T19314] ch341 4-1:0.0: ch341-uart converter detected [ 2246.480748][T27216] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2246.492166][T27216] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2246.507072][T27216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2246.518253][T19764] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2246.563270][T27216] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2246.608565][T27216] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2246.628079][T27216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.644681][T27216] usb 5-1: Product: syz [ 2246.652329][T27216] usb 5-1: Manufacturer: syz [ 2246.657129][T27216] usb 5-1: SerialNumber: syz [ 2246.673933][T27216] usb 5-1: config 0 descriptor?? [ 2246.703475][T19764] usb 1-1: config 0 has no interfaces? [ 2246.713680][T19764] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2246.723066][T19764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.744156][T19764] usb 1-1: Product: syz [ 2246.750140][T19764] usb 1-1: Manufacturer: syz [ 2246.753814][T27216] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input102 [ 2246.769282][T19764] usb 1-1: SerialNumber: syz [ 2246.776628][T19764] usb 1-1: config 0 descriptor?? [ 2246.988213][T27216] usb 5-1: USB disconnect, device number 9 [ 2247.036831][T29907] veth1_to_bond: left allmulticast mode [ 2247.144770][T29937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.159601][T29937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.174795][T29937] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5981'. [ 2247.214045][T29925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.226604][T29925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.241856][T29925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.252802][T29925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.402396][T29920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.413783][T29920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.517652][T29920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.527222][T29920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.569019][T29942] SET target dimension over the limit! [ 2248.029314][ T939] usb 2-1: failed to send control message: -110 [ 2248.039995][ T939] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2248.259289][T19314] usb 4-1: failed to send control message: -110 [ 2248.288355][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.308801][T19314] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 2248.317800][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.351588][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.375033][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.387057][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.464890][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.479359][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.488417][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.494086][T29950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5984'. [ 2248.752836][T19314] usb 2-1: USB disconnect, device number 89 [ 2248.762926][T19314] ch341 2-1:0.0: device disconnected [ 2249.085000][T19314] usb 4-1: USB disconnect, device number 84 [ 2249.159922][T19314] ch341 4-1:0.0: device disconnected [ 2249.410084][T23668] usb 1-1: USB disconnect, device number 5 [ 2249.766398][T29960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2250.259362][T29970] fuse: Bad value for 'fd' [ 2252.083831][T27216] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 2252.136658][ T939] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2252.190602][T19764] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2252.269855][T27216] usb 5-1: device descriptor read/64, error -71 [ 2252.319748][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 2252.363741][ T939] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 2252.376152][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.384573][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2252.393269][T19764] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2252.403304][T19764] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2252.414878][T19764] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2252.468153][ T939] usb 2-1: Product: syz [ 2252.473370][ T939] usb 2-1: Manufacturer: syz [ 2252.478046][ T939] usb 2-1: SerialNumber: syz [ 2252.485221][T19764] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2252.528861][T27216] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 2252.541051][ T939] usb 2-1: config 0 descriptor?? [ 2252.579259][T19764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.588797][ T939] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 2252.610421][ T5920] usb 1-1: config 0 has no interfaces? [ 2252.648550][ T5920] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2252.657778][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.671833][ T5920] usb 1-1: Product: syz [ 2252.676073][ T5920] usb 1-1: Manufacturer: syz [ 2252.681416][T27216] usb 5-1: device descriptor read/64, error -71 [ 2252.693636][T19764] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 2252.716485][ T5920] usb 1-1: SerialNumber: syz [ 2252.738046][ T5920] usb 1-1: config 0 descriptor?? [ 2252.821784][T27216] usb usb5-port1: attempt power cycle [ 2252.907353][T29992] __nla_validate_parse: 40 callbacks suppressed [ 2252.907395][T29992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5999'. [ 2252.963322][T19764] usb 3-1: USB disconnect, device number 107 [ 2252.991878][T29995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.002981][T29995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.019595][T29995] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5998'. [ 2253.318772][T27216] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 2253.358799][T23668] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2253.518851][T23668] usb 4-1: Using ep0 maxpacket: 16 [ 2253.549199][T23668] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2253.569137][T27216] usb 5-1: device descriptor read/8, error -71 [ 2253.569281][T23668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.585231][T23668] usb 4-1: Product: syz [ 2253.592202][T23668] usb 4-1: Manufacturer: syz [ 2253.597174][T23668] usb 4-1: SerialNumber: syz [ 2253.782266][T23668] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2253.898813][T23668] r8152-cfgselector 4-1: config 0 descriptor?? [ 2254.026342][T27216] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2254.113786][T27216] usb 5-1: device descriptor read/8, error -71 [ 2254.270154][T27216] usb usb5-port1: unable to enumerate USB device [ 2255.179226][T23668] usb 1-1: USB disconnect, device number 6 [ 2255.268816][T27216] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2255.382664][ T939] pwc: send_video_command error -71 [ 2255.408040][ T939] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2255.439207][ T939] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2255.450834][T27216] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2255.469768][T27216] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2255.486285][ T939] usb 2-1: USB disconnect, device number 90 [ 2255.530129][T27216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2255.541996][T27216] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2255.560020][T27216] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2255.569452][T27216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.577501][T27216] usb 5-1: Product: syz [ 2255.581754][T27216] usb 5-1: Manufacturer: syz [ 2255.588776][T27216] usb 5-1: SerialNumber: syz [ 2255.595964][T27216] usb 5-1: config 0 descriptor?? [ 2255.612761][T27216] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input103 [ 2255.885404][T27216] usb 5-1: USB disconnect, device number 14 [ 2255.971462][T23668] r8152-cfgselector 4-1: USB disconnect, device number 85 [ 2256.680541][T27216] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2257.038863][ T939] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 2257.154717][T27216] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2257.165789][T27216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.236200][ T939] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2257.252227][T27216] usb 4-1: Product: syz [ 2257.256512][ T939] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2257.256541][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2257.256567][ T939] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2257.297238][T27216] usb 4-1: Manufacturer: syz [ 2257.518937][T27216] usb 4-1: SerialNumber: syz [ 2257.534607][T27216] usb 4-1: config 0 descriptor?? [ 2257.584832][T27216] ch341 4-1:0.0: ch341-uart converter detected [ 2257.775803][T30035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.784571][T27216] usb 4-1: failed to receive control message: -32 [ 2257.791308][T27216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 2257.817386][T30035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.866914][ T939] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2257.878731][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.886737][ T939] usb 5-1: Product: syz [ 2257.969225][ T939] usb 5-1: Manufacturer: syz [ 2257.973859][ T939] usb 5-1: SerialNumber: syz [ 2258.014711][ T939] usb 5-1: config 0 descriptor?? [ 2258.032359][ T939] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input104 [ 2258.283740][ T939] usb 5-1: USB disconnect, device number 15 [ 2258.740676][T30061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2258.748493][T30061] IPv6: NLM_F_CREATE should be set when creating new route [ 2258.839495][T27216] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2258.946678][ T939] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2259.123050][ T939] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2259.132535][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.168299][ T939] usb 2-1: Product: syz [ 2259.209988][ T939] usb 2-1: Manufacturer: syz [ 2259.214729][ T939] usb 2-1: SerialNumber: syz [ 2259.268814][T23668] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2259.271521][ T939] usb 2-1: config 0 descriptor?? [ 2259.329198][T27216] usb 3-1: config 0 has no interfaces? [ 2259.335244][ T939] ch341 2-1:0.0: ch341-uart converter detected [ 2259.410006][T19314] usb 4-1: USB disconnect, device number 86 [ 2259.410721][T27216] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2259.440379][T27216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.442812][T19314] ch341 4-1:0.0: device disconnected [ 2259.450275][T27216] usb 3-1: Product: syz [ 2259.458423][T27216] usb 3-1: Manufacturer: syz [ 2259.479830][T23668] usb 1-1: Using ep0 maxpacket: 32 [ 2259.492940][T23668] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2259.503037][ T939] usb 2-1: failed to receive control message: -32 [ 2259.513230][T23668] usb 1-1: config 0 has no interface number 0 [ 2259.549525][T23668] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2259.580780][T23668] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2259.604860][T23668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.624610][ T939] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 2259.627674][T23668] usb 1-1: Product: syz [ 2259.641704][T27216] usb 3-1: SerialNumber: syz [ 2259.663455][T27216] usb 3-1: config 0 descriptor?? [ 2259.677999][T23668] usb 1-1: Manufacturer: syz [ 2259.700334][T23668] usb 1-1: SerialNumber: syz [ 2259.747467][T23668] usb 1-1: config 0 descriptor?? [ 2259.770927][T23668] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2259.791777][T23668] em28xx 1-1:0.132: Video interface 132 found: [ 2260.184531][T30056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.193773][T19314] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 2260.208836][T30056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.225918][T30056] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6015'. [ 2260.243198][T23668] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 2260.408077][T19314] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2260.419621][T19314] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2260.431826][T19314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2260.452976][T30066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.478867][T19314] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2260.479289][T30066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.524767][T19314] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2260.536123][T19314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.548798][T19314] usb 4-1: Product: syz [ 2260.553121][T19314] usb 4-1: Manufacturer: syz [ 2260.557911][T19314] usb 4-1: SerialNumber: syz [ 2260.655695][T19314] usb 4-1: config 0 descriptor?? [ 2260.673726][T19314] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input105 [ 2260.878817][T27216] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2260.893552][T19314] usb 4-1: USB disconnect, device number 87 [ 2261.072921][T27216] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2261.082708][T27216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.091764][T27216] usb 5-1: Product: syz [ 2261.096939][T27216] usb 5-1: Manufacturer: syz [ 2261.103567][T27216] usb 5-1: SerialNumber: syz [ 2261.116076][T27216] usb 5-1: config 0 descriptor?? [ 2261.126887][T27216] ch341 5-1:0.0: ch341-uart converter detected [ 2261.699599][T23668] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2261.721699][T23668] em28xx 1-1:0.132: board has no eeprom [ 2261.771144][ T939] usb 2-1: USB disconnect, device number 91 [ 2261.789189][T23668] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2261.797063][T23668] em28xx 1-1:0.132: analog set to bulk mode. [ 2261.818493][ T939] ch341 2-1:0.0: device disconnected [ 2261.854277][T19314] em28xx 1-1:0.132: Registering V4L2 extension [ 2261.924250][T30092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6026'. [ 2261.939930][T30092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6026'. [ 2261.940844][T27216] usb 5-1: failed to send control message: -71 [ 2261.978637][T27216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2262.002640][T19314] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2262.028003][T27216] usb 5-1: USB disconnect, device number 16 [ 2262.046106][T19314] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2262.048940][T27216] ch341 5-1:0.0: device disconnected [ 2262.088295][T19314] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2262.128064][T19314] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2262.139160][ T939] usb 1-1: USB disconnect, device number 7 [ 2262.152819][ T939] em28xx 1-1:0.132: Disconnecting em28xx [ 2262.229448][T23668] usb 3-1: USB disconnect, device number 108 [ 2262.468272][T19314] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 2262.480223][T19314] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 2262.487893][T19314] em28xx 1-1:0.132: No AC97 audio processor [ 2262.510993][T19314] usb 1-1: Decoder not found [ 2262.589113][T19314] em28xx 1-1:0.132: failed to create media graph [ 2262.595514][T19314] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 2262.645466][T30112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.719216][T30110] ================================================================== [ 2262.727304][T30110] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2262.734777][T30110] Read of size 8 at addr ffff888084b98740 by task v4l_id/30110 [ 2262.742326][T30110] [ 2262.743401][T19314] em28xx 1-1:0.132: Remote control support is not available for this card. [ 2262.744646][T30110] CPU: 1 UID: 0 PID: 30110 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2262.744666][T30110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2262.744678][T30110] Call Trace: [ 2262.744688][T30110] [ 2262.744697][T30110] dump_stack_lvl+0x189/0x250 [ 2262.744730][T30110] ? __virt_addr_valid+0x1c8/0x5c0 [ 2262.744759][T30110] ? rcu_is_watching+0x15/0xb0 [ 2262.744781][T30110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2262.744806][T30110] ? rcu_is_watching+0x15/0xb0 [ 2262.744826][T30110] ? lock_release+0x4b/0x3e0 [ 2262.744845][T30110] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2262.744875][T30110] ? __virt_addr_valid+0x1c8/0x5c0 [ 2262.744900][T30110] ? __virt_addr_valid+0x4a5/0x5c0 [ 2262.744925][T30110] print_report+0xca/0x240 [ 2262.744949][T30110] ? v4l2_fh_open+0xac/0x420 [ 2262.744968][T30110] kasan_report+0x118/0x150 [ 2262.744990][T30110] ? v4l2_fh_open+0xac/0x420 [ 2262.745012][T30110] v4l2_fh_open+0xac/0x420 [ 2262.745031][T30110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2262.745063][T30110] em28xx_v4l2_open+0x157/0x9a0 [ 2262.745235][T30110] v4l2_open+0x1bf/0x3a0 [ 2262.745283][T30110] chrdev_open+0x4cc/0x5e0 [ 2262.745303][T30110] ? __pfx_chrdev_open+0x10/0x10 [ 2262.745322][T30110] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2262.745346][T30110] ? __pfx_chrdev_open+0x10/0x10 [ 2262.745363][T30110] do_dentry_open+0x953/0x13f0 [ 2262.745390][T30110] vfs_open+0x3b/0x340 [ 2262.745409][T30110] ? path_openat+0x2ecd/0x3830 [ 2262.745434][T30110] path_openat+0x2ee5/0x3830 [ 2262.745472][T30110] ? __pfx_path_openat+0x10/0x10 [ 2262.745504][T30110] do_filp_open+0x1fa/0x410 [ 2262.745527][T30110] ? __lock_acquire+0xab9/0xd20 [ 2262.745545][T30110] ? __pfx_do_filp_open+0x10/0x10 [ 2262.745578][T30110] ? _raw_spin_unlock+0x28/0x50 [ 2262.745602][T30110] ? alloc_fd+0x64c/0x6c0 [ 2262.745634][T30110] do_sys_openat2+0x121/0x1c0 [ 2262.745656][T30110] ? __pfx_do_sys_openat2+0x10/0x10 [ 2262.745679][T30110] ? exc_page_fault+0x82/0x100 [ 2262.745707][T30110] ? do_user_addr_fault+0xc85/0x1380 [ 2262.745727][T30110] __x64_sys_openat+0x138/0x170 [ 2262.745750][T30110] do_syscall_64+0xfa/0xfa0 [ 2262.745778][T30110] ? lockdep_hardirqs_on+0x9c/0x150 [ 2262.745804][T30110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.745824][T30110] ? clear_bhb_loop+0x60/0xb0 [ 2262.745845][T30110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.745864][T30110] RIP: 0033:0x7f8f380a7407 [ 2262.745883][T30110] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2262.745901][T30110] RSP: 002b:00007fffdacec5d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2262.745921][T30110] RAX: ffffffffffffffda RBX: 00007f8f3880a880 RCX: 00007f8f380a7407 [ 2262.745936][T30110] RDX: 0000000000000000 RSI: 00007fffdacecf1a RDI: ffffffffffffff9c [ 2262.745950][T30110] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2262.745962][T30110] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2262.745973][T30110] R13: 00007fffdacec820 R14: 00007f8f38971000 R15: 0000561bf054c4d8 [ 2262.745996][T30110] [ 2262.746003][T30110] [ 2263.055946][T30110] Allocated by task 19314: [ 2263.060357][T30110] kasan_save_track+0x3e/0x80 [ 2263.065051][T30110] __kasan_kmalloc+0x93/0xb0 [ 2263.069656][T30110] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2263.075039][T30110] em28xx_v4l2_init+0x10b/0x2e70 [ 2263.079987][T30110] em28xx_init_extension+0x120/0x1c0 [ 2263.085281][T30110] process_scheduled_works+0xae1/0x17b0 [ 2263.088249][T23668] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2263.090828][T30110] worker_thread+0x8a0/0xda0 [ 2263.090850][T30110] kthread+0x711/0x8a0 [ 2263.090870][T30110] ret_from_fork+0x4bc/0x870 [ 2263.090927][T30110] ret_from_fork_asm+0x1a/0x30 [ 2263.090943][T30110] [ 2263.118815][T30110] Freed by task 19314: [ 2263.122881][T30110] kasan_save_track+0x3e/0x80 [ 2263.127576][T30110] __kasan_save_free_info+0x46/0x50 [ 2263.132780][T30110] __kasan_slab_free+0x5c/0x80 [ 2263.137646][T30110] kfree+0x19a/0x6d0 [ 2263.141550][T30110] em28xx_v4l2_init+0x1683/0x2e70 [ 2263.146591][T30110] em28xx_init_extension+0x120/0x1c0 [ 2263.151884][T30110] process_scheduled_works+0xae1/0x17b0 [ 2263.157439][T30110] worker_thread+0x8a0/0xda0 [ 2263.162039][T30110] kthread+0x711/0x8a0 [ 2263.166116][T30110] ret_from_fork+0x4bc/0x870 [ 2263.170711][T30110] ret_from_fork_asm+0x1a/0x30 [ 2263.175477][T30110] [ 2263.177799][T30110] The buggy address belongs to the object at ffff888084b98000 [ 2263.177799][T30110] which belongs to the cache kmalloc-8k of size 8192 [ 2263.191862][T30110] The buggy address is located 1856 bytes inside of [ 2263.191862][T30110] freed 8192-byte region [ffff888084b98000, ffff888084b9a000) [ 2263.205858][T30110] [ 2263.208191][T30110] The buggy address belongs to the physical page: [ 2263.214627][T30110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x84b98 [ 2263.223428][T30110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2263.232027][T30110] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2263.239949][T30110] page_type: f5(slab) [ 2263.243945][T30110] raw: 00fff00000000040 ffff88801a027280 ffffea0000c13400 0000000000000003 [ 2263.252536][T30110] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 2263.261144][T30110] head: 00fff00000000040 ffff88801a027280 ffffea0000c13400 0000000000000003 [ 2263.269820][T30110] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 2263.278500][T30110] head: 00fff00000000003 ffffea000212e601 00000000ffffffff 00000000ffffffff [ 2263.287187][T30110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2263.295862][T30110] page dumped because: kasan: bad access detected [ 2263.302294][T30110] page_owner tracks the page as allocated [ 2263.308011][T30110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29839, tgid 29792 (syz.1.5941), ts 2237330055593, free_ts 2237292388760 [ 2263.329552][T30110] post_alloc_hook+0x234/0x290 [ 2263.334337][T30110] get_page_from_freelist+0x2365/0x2440 [ 2263.339890][T30110] __alloc_frozen_pages_noprof+0x181/0x370 [ 2263.345705][T30110] alloc_pages_mpol+0x232/0x4a0 [ 2263.350566][T30110] allocate_slab+0x96/0x350 [ 2263.355081][T30110] ___slab_alloc+0xf56/0x1990 [ 2263.359775][T30110] __slab_alloc+0x65/0x100 [ 2263.364202][T30110] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 2263.370631][T30110] kmalloc_reserve+0x136/0x290 [ 2263.375403][T30110] __alloc_skb+0x142/0x2d0 [ 2263.379831][T30110] netlink_dump+0x167/0xe90 [ 2263.384340][T30110] netlink_recvmsg+0x676/0xa30 [ 2263.389112][T30110] sock_recvmsg_nosec+0x186/0x1c0 [ 2263.394153][T30110] ____sys_recvmsg+0x3aa/0x460 [ 2263.398929][T30110] ___sys_recvmsg+0x1b5/0x510 [ 2263.403610][T30110] do_recvmmsg+0x307/0x770 [ 2263.408027][T30110] page last free pid 7730 tgid 7730 stack trace: [ 2263.414352][T30110] __free_frozen_pages+0xbc4/0xd30 [ 2263.419479][T30110] __slab_free+0x2e7/0x390 [ 2263.423895][T30110] qlist_free_all+0x97/0x140 [ 2263.428495][T30110] kasan_quarantine_reduce+0x148/0x160 [ 2263.433948][T30110] __kasan_slab_alloc+0x22/0x80 [ 2263.438794][T30110] __kmalloc_noprof+0x3c3/0x7f0 [ 2263.443642][T30110] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2263.449189][T30110] tomoyo_path2_perm+0x288/0x680 [ 2263.454119][T30110] tomoyo_path_rename+0x141/0x190 [ 2263.459132][T30110] security_path_rename+0x250/0x490 [ 2263.464322][T30110] do_renameat2+0x52b/0xa50 [ 2263.468825][T30110] __x64_sys_rename+0x82/0x90 [ 2263.473487][T30110] do_syscall_64+0xfa/0xfa0 [ 2263.477987][T30110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.483868][T30110] [ 2263.486187][T30110] Memory state around the buggy address: [ 2263.491815][T30110] ffff888084b98600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2263.499879][T30110] ffff888084b98680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2263.507950][T30110] >ffff888084b98700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2263.516010][T30110] ^ [ 2263.522158][T30110] ffff888084b98780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2263.530208][T30110] ffff888084b98800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2263.538265][T30110] ================================================================== [ 2263.566946][T30110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2263.574186][T30110] CPU: 0 UID: 0 PID: 30110 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2263.583222][T30110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2263.593299][T30110] Call Trace: [ 2263.596588][T30110] [ 2263.599527][T30110] dump_stack_lvl+0x99/0x250 [ 2263.604111][T30110] ? __asan_memcpy+0x40/0x70 [ 2263.608693][T30110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2263.613891][T30110] ? __pfx__printk+0x10/0x10 [ 2263.618469][T30110] vpanic+0x237/0x6d0 [ 2263.622436][T30110] ? __pfx_vpanic+0x10/0x10 [ 2263.626930][T30110] ? preempt_schedule+0xae/0xc0 [ 2263.631766][T30110] ? __pfx_preempt_schedule+0x10/0x10 [ 2263.637126][T30110] panic+0xb9/0xc0 [ 2263.640836][T30110] ? __pfx_panic+0x10/0x10 [ 2263.645238][T30110] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2263.651116][T30110] ? is_module_address+0x17/0xf0 [ 2263.656040][T30110] ? v4l2_fh_open+0xac/0x420 [ 2263.660613][T30110] check_panic_on_warn+0x89/0xb0 [ 2263.665540][T30110] ? v4l2_fh_open+0xac/0x420 [ 2263.670109][T30110] end_report+0x78/0x160 [ 2263.674352][T30110] kasan_report+0x129/0x150 [ 2263.678857][T30110] ? v4l2_fh_open+0xac/0x420 [ 2263.683443][T30110] v4l2_fh_open+0xac/0x420 [ 2263.687851][T30110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2263.693822][T30110] em28xx_v4l2_open+0x157/0x9a0 [ 2263.698672][T30110] v4l2_open+0x1bf/0x3a0 [ 2263.702912][T30110] chrdev_open+0x4cc/0x5e0 [ 2263.707312][T30110] ? __pfx_chrdev_open+0x10/0x10 [ 2263.712350][T30110] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2263.718678][T30110] ? __pfx_chrdev_open+0x10/0x10 [ 2263.723612][T30110] do_dentry_open+0x953/0x13f0 [ 2263.728363][T30110] vfs_open+0x3b/0x340 [ 2263.732415][T30110] ? path_openat+0x2ecd/0x3830 [ 2263.737162][T30110] path_openat+0x2ee5/0x3830 [ 2263.741743][T30110] ? __pfx_path_openat+0x10/0x10 [ 2263.746743][T30110] do_filp_open+0x1fa/0x410 [ 2263.751230][T30110] ? __lock_acquire+0xab9/0xd20 [ 2263.756067][T30110] ? __pfx_do_filp_open+0x10/0x10 [ 2263.761088][T30110] ? _raw_spin_unlock+0x28/0x50 [ 2263.765938][T30110] ? alloc_fd+0x64c/0x6c0 [ 2263.770256][T30110] do_sys_openat2+0x121/0x1c0 [ 2263.775007][T30110] ? __pfx_do_sys_openat2+0x10/0x10 [ 2263.780193][T30110] ? exc_page_fault+0x82/0x100 [ 2263.784947][T30110] ? do_user_addr_fault+0xc85/0x1380 [ 2263.790222][T30110] __x64_sys_openat+0x138/0x170 [ 2263.795070][T30110] do_syscall_64+0xfa/0xfa0 [ 2263.799573][T30110] ? lockdep_hardirqs_on+0x9c/0x150 [ 2263.804760][T30110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.810902][T30110] ? clear_bhb_loop+0x60/0xb0 [ 2263.815564][T30110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.821442][T30110] RIP: 0033:0x7f8f380a7407 [ 2263.825843][T30110] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2263.845524][T30110] RSP: 002b:00007fffdacec5d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2263.853932][T30110] RAX: ffffffffffffffda RBX: 00007f8f3880a880 RCX: 00007f8f380a7407 [ 2263.861896][T30110] RDX: 0000000000000000 RSI: 00007fffdacecf1a RDI: ffffffffffffff9c [ 2263.869854][T30110] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2263.877813][T30110] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2263.885770][T30110] R13: 00007fffdacec820 R14: 00007f8f38971000 R15: 0000561bf054c4d8 [ 2263.893751][T30110] [ 2263.897157][T30110] Kernel Offset: disabled [ 2263.901495][T30110] Rebooting in 86400 seconds..