last executing test programs: 8.954338418s ago: executing program 0 (id=181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000059f000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf8600000000000007080000f0ff029abfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004601000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000c46923422eed8a9b9ab9b20b17437cfc821d3e7802a87233638d8cbba132efe98fd7b4d7dd83feb93ccec676250afc707a7a77e4576d1bc8924938e31a8ca5ea98bfe288d3109961a2b78c3742bf711bc8d26231a7d86b76cd8f1cbbaf3254d73e566da60129d7b1c28eb34a4e5488c450563e60fb78470f508160791b05ac4e505c9888eb5cc05c541520f36ceee6685b09b75af9"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00e30e07000000d044da356ac6538e0100fc1d3d44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @dev}, &(0x7f0000000500)=0xc) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0xc, 0x8, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x4, 0x8001}, 0x3, 0x3}}) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000, @remote, 0xe5e}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x40}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write(r3, 0xcd, 0x61, &(0x7f00000005c0)="c814eb371f7c8ef82f51be7cd5591bec82dfae75c45d34288b9e6634de487bb250ec6117f92dc44002c7714f278aefc495e86a0f79776a324785fa975fc18865698df0c08ce44bd67fb4a0e2352ec89125846327d13ed73c175642f27fd0a445ab") 8.797048871s ago: executing program 2 (id=182): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x8010) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x0, 0x4, 0xff, 0x2200, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '['}], 0xa, "5130b27badc797c66be7b3bfb7f6ee88f0b6786b67e6db09fe85a941"}, 0x3f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000003020835700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r9 = signalfd(r6, &(0x7f0000000340)={[0x8]}, 0x8) fcntl$setlease(r9, 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0xc4}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000180)={0x20, 0xe, 0xc, "0000b617fd4ca9feb5b37480"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.896139335s ago: executing program 2 (id=189): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200)=0xfffffffc, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r2, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="d0d5f7a7", 0x4, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x80000000, 0xfffffffd, {0x3}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x48}}, 0x0) 6.810592965s ago: executing program 0 (id=190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) eventfd(0xffffffff) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x2, 0x0, 0x0, 0x42, 0x5c}) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf00001, 0x1}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a30000000000500010007000000580008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780060001404e"], 0x80}}, 0x40800) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x4, 0x74, 0x2, 0x1, 0x800, 0x8, 0xff, 0x8}, &(0x7f0000000380)={0xfff, 0x7, 0x7f, 0x3, 0x2, 0x7fff, 0x7fffffff, 0x6}, &(0x7f00000003c0)={0x0, 0xfffffffffffffff9, 0x3, 0x100000001, 0x6, 0xb30, 0x2, 0x2}, &(0x7f00000004c0)={r1, r2+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x3]}, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae00081902010000000009240202b034000000090585da20"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000580)=""/219, 0xdb}], 0x2, 0x182, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000800) 5.505857312s ago: executing program 3 (id=196): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@deltclass={0x58, 0x29, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x8}, {0x0, 0x9}, {0x2, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x40, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5}}, @tclass_kind_options=@c_netem={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={0x0, 0x6b, 0x3d}, 0x0, &(0x7f0000000280)="f4677f981900c4ad13f8224aff7f7afc6ec8e882ef9dbc24b7804256a4fade47456d2d89e0f071de94f5e3fbaff7fce15d79fcd5401a71e5f7d3b77bd7d33eb31c5155442b96a1d2b33d39cbd7c842a5ca2d1e70bff0f56c1d71a0ff180167531d6b9907006c82616221ed", &(0x7f0000000180)="800a4312af4353d02cef25ccf6ca313c75f109f570e5d62f4e835264f0a9c491c976af585fc7ec03e7890426c897f12cf0dd4deabff663a567985e9bb0") 5.37253365s ago: executing program 3 (id=197): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x79}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$sock(r1, &(0x7f0000001dc0), 0x213, 0x0) 5.279369743s ago: executing program 0 (id=199): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.108413028s ago: executing program 3 (id=202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x47f, 0x400000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x32}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x80) ppoll(&(0x7f0000000200)=[{r1, 0x14}, {0xffffffffffffffff, 0xc2a4}, {r4, 0x84}, {r2}, {r5, 0x524c}, {r2, 0x200}, {r3, 0x2000}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000480"], 0x34}}, 0x0) stat(&(0x7f0000004b00)='./cgroup\x00', &(0x7f0000004b40)) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 5.067885348s ago: executing program 2 (id=203): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x5, 0x200000e4, 0x2, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x40, r3, 0x5}, 0xc) close(0x4) 4.776391167s ago: executing program 2 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)='`', 0x1}], 0x1}}], 0x1, 0x2c000011) sendto(r3, &(0x7f00000002c0)='q', 0x100000, 0x8000, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000ecff0f11000001000000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000300)=""/186, 0x41000, 0x14e640a775c045a2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x4, 0x8, 0x9}, {0x4, 0x4, 0xe, 0x6}, {0x0, 0x5, 0x8, 0x8}, {0x4, 0x2, 0xe, 0x4}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x4, 0x1, 0xc}, {0x4, 0x3, 0x3, 0x2}, {0x0, 0x5, 0xf, 0x9}, {0x2, 0x1, 0x1, 0x2}], 0x10, 0x7, @void, @value}, 0x94) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 4.104466729s ago: executing program 1 (id=205): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x7}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x4}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x2000c8c0) (fail_nth: 5) 3.26954268s ago: executing program 3 (id=206): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xb42, 0x0, 0x3, 0x2}, {0x2, 0x60, 0x4, 0xffff}, {0x7, 0x2, 0xfb, 0x4}, {0x0, 0x6, 0x5, 0xdab5}]}, 0x10) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "cfdafc01"}, @local=@item_012={0x1, 0x2, 0x2, '['}]}}, 0x0}, 0x0) 3.158600865s ago: executing program 1 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00030010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="4eb1988d422200042c0012800800010067726500200002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 2.932514421s ago: executing program 1 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)=0x200000b) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000440)=""/108, 0x6c}], 0x6}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 2.678257455s ago: executing program 1 (id=209): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, 0x0, 0x0, 0x60, 0x0) 2.601860439s ago: executing program 1 (id=210): preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) 2.455451165s ago: executing program 1 (id=211): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev2(r1, 0x0, 0x0, 0x1, 0x8003, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x26000400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) poll(&(0x7f0000000040)=[{r2, 0x2124}], 0x1, 0x11ff) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020480) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80006) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x110000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cdc10004267726f7570", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf252600000008000300", @ANYRES32=r6], 0x28}}, 0xc0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 1.930143362s ago: executing program 0 (id=215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1000}, 0x0, 0xfffffffe, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.832361982s ago: executing program 0 (id=216): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "1cff13"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "b48a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "0614af"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xff, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, "861b36"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x51) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket(0x200000000000011, 0x2, 0x80000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x9, 0x2}, {0x2, 0x5}, {0xf, 0x4}]}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x2, 0x2c}, {0x9, 0x200}, {0x5, 0x7}, {0x10, 0x81}, {0x5}, {0x7, 0x10f}, {0xe, 0x2}, {0xc, 0x400}, {0x10, 0xb}]}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xfffff801}}]}}, &(0x7f0000000500)=""/180, 0xc2, 0xb4, 0x1, 0xf, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x281, 0xf5, &(0x7f00000002c0)=""/245, 0x41100, 0x18, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0xfffff801}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x2, 0x7}, {0x5, 0x1, 0xf}, {0x2, 0x4, 0xb, 0x7}], 0x10, 0x8, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x7) 1.790771978s ago: executing program 4 (id=217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xfffd, 0x0, 0x0, @loopback}, 0x1c) 1.770116173s ago: executing program 3 (id=218): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x801, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xf17c6ff0a457fbf4) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x30, 0xa, 0x2, "325c5ff50adb00008d0900", 0x35303553}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000440)="2e0f10cfb82c008ee0b86e008ee813a018030f013a66b80500000066b9090000000f01c12e0f3026663664660fc7b309000fc7ab0d00b8e5000f00d8", 0x3c}], 0x1, 0x8, &(0x7f00000004c0)=[@vmwrite={0x8, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}], 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1.60278701s ago: executing program 2 (id=219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dcbbc7cb890d1fcf552b094d420a6ab94cd0116181cb2d26a6a51331a02402640de18e30725cd7b8be5890a23f3c854d5e6b243204f5c23efac2372a21558dbb691fbd9ce8732261d5809cb04ccd0edb6ecdb68c75dd2ca6cd14759ba", @ANYBLOB=',\x00']) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x1e0, 0x130, 0x98, 0x98, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1003000000000000}}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffff, 0x0, 'ipvlan0\x00', 'pimreg0\x00', {}, {}, 0x33, 0x3, 0x12}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) mmap$KVM_VCPU(&(0x7f0000e16000/0x2000)=nil, 0x0, 0x0, 0x43033, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r1, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x31f0d2, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) io_uring_enter(r4, 0x4794, 0x10d2, 0x0, &(0x7f0000000100)={[0x100000000]}, 0x8) ftruncate(0xffffffffffffffff, 0x2000009) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) splice(0xffffffffffffffff, &(0x7f00000020c0)=0x67b9, r0, 0x0, 0x5, 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)=""/20, 0x14}], 0x1}, 0x700) 1.602350468s ago: executing program 4 (id=220): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, 0x0, 0x0, 0x60, 0x0) 1.42839074s ago: executing program 4 (id=221): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000014c0), 0x4) write$vga_arbiter(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="029b085df312aa31755d1849b8bca9d356b75005df7639042baf7bc221ce45e30222fc6e6baf79b96444c37ab932cbf3ff0f000000000000dd9d201d4254ec4df8bc5e0e0bf3412236a9f324b58a449f2c7e8869866e442c8c7919cba7e0f7722fe5262059b23f856187661065240f1c31c9eb9c74af6d436d3f6a8bbe13393b7e2934be58509c46580753b802e00f97c6527aea15efece2637ed6bf30404cd3e5ea50471f0c3c6420d28b96e289ae9696da2b8ae44b5d618a000000000000000000000000cccf1546ccf70f78827b69e6f4de7f2374f120bdf93220845cf625b547c9f57905e567e1e5c6ea70d76fd931c608ab4385dfef4276b2d87cc421d59e34d451969ac138706d065019d65e87750fa00d3a70e67a611d32508852edd9fa801c6627c6dc90138be6d646c82bbf2fe71f7184d66828bc6f2729d280665cf3202ee7cd268e47da1fb5ca6f2284b94d72ac322dc5d6530a2a3f2bce9d40f3e81c3d961d07ecdf1c3b9e8aea920b366bcc530098d50059ec162bdff9bde34e99526afc90e282c6abbb2f4647d19d132cc892706d8181f1544a44a4bb8ea95aa718126db7c6eb11"], 0x8) ppoll(&(0x7f0000000080)=[{r0, 0x4b9ce50e2ea3b2d8}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2001000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x35, 0x9a, 0x5, 0x6, 0x7e2b, 0x7, 0x9}, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='unlock mem'], 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5ed92fb3ab951a43bd019d837aac16223d0a873402900502493e687e490f626a0592b157959896408c1fc8ec7a3b4aa42c6d89c45226ca605d2a73d3d6e62131de1597be5e408999c4acb05ddd409975d870222df199af5e9796f7fb61cb66984f0792471dab67898540e6dd35f61d9b41039f5b1c89f4f776ea8660b313cfbe67000000") ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40004) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r2, r4, 0x0, 0x7, 0x400087c3, 0x66, 0x2, 0xc0284ef, 0x7, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110b5000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000880)=[{0x2, 0x3, {0x0, 0x0, 0x4}, {0x1, 0x0, 0xe}, 0x1, 0x1}, {0x3, 0x0, {0x2, 0x1, 0x4}, {0x1}, 0xff, 0xff}], 0x40) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) 1.3907494s ago: executing program 2 (id=222): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x2, 0x1b1) pidfd_send_signal(r0, 0x11, &(0x7f0000000140)={0x1e, 0x3}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, r1, 0x502, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4000054) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@updsa={0x180, 0x1a, 0xb11, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x100000000, 0x0, 0x0, 0x0, 0x970}, {}, {0x0, 0x0, 0x4}, 0x0, 0x3503, 0xa}, [@algo_crypt={0x48, 0x2, {{'xchacha20-neon\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256-asm\x00'}}}]}, 0x180}}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000100000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c0007090502", @ANYRES8=r0, @ANYRES16=r2], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000800010109025000010106500009040000ff02020000052406000005240002000d240f010000000000000000000c240703000003000300050009058103200000000a0905820220000000000905030208"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 819.100129ms ago: executing program 3 (id=223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000059f000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b509000000000000dbaa00fea0000000bf8600000000000007080000f0ff029abfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004601000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000c46923422eed8a9b9ab9b20b17437cfc821d3e7802a87233638d8cbba132efe98fd7b4d7dd83feb93ccec676250afc707a7a77e4576d1bc8924938e31a8ca5ea98bfe288d3109961a2b78c3742bf711bc8d26231a7d86b76cd8f1cbbaf3254d73e566da60129d7b1c28eb34a4e5488c450563e60fb78470f508160791b05ac4e505c9888eb5cc05c541520f36ceee6685b09b75af9"], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00e30e07000000d044da356ac6538e0100fc1d3d44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @dev}, &(0x7f0000000500)=0xc) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0xc, 0x8, 0x80, 0xe72, 0xb0c, 0x9, 0x35, 0x27, {0x4, 0x8001}, 0x3, 0x3}}) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000, @remote, 0xe5e}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x40}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 556.8647ms ago: executing program 4 (id=224): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x20000000) (fail_nth: 5) 180.939095ms ago: executing program 0 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x61, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0xfffffffffffffe56, 0x70, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r7) syz_usb_connect(0x2, 0x4c7, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xdd, 0xa2, 0x42, 0x10, 0x1199, 0x68c0, 0x9af4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b5, 0x1, 0x9, 0x6, 0x50, 0xf, [{{0x9, 0x4, 0x8, 0x8, 0xf, 0xcc, 0xc9, 0x7c, 0xbb, [@generic={0x64, 0x30, "56addcd9e43e207364812607c15d28c798d5653cba9a7474dd61e423f87f07ec341bfee23137c9c46c4c4fc00115cf5377239ae072a52366a3301e8cf407e5a8167a9782f0f166770c26204c3a0793894ccf91f469822c783a2fea2cbe5c7c5b9832"}, @generic={0x5d, 0x23, "9d42e396dfbbe1567299bc84d99ee74c0b8df492a2be4c478d9161c324a85501a4bfcd195c62d9004e24ec4df0c2438cb51f3166e2d8b955babfb2cebcc187218b8c61531c8440426a57cb315adeea9af90853cdbef9bed815e7fd"}], [{{0x9, 0x5, 0xb, 0x2, 0x400, 0x4, 0x2, 0x7, [@generic={0xdf, 0x21, "67235c9ed681efc9019b80d0315549e9f1e66caf2ab3f2aba0989cec84cf7da148d50f667bab11be1027d6521335968c235b94ff4cfd0db5598e2172ce7aad9c647f7e355baf17ecae7b72f88a4a66773f1042aaed9273f81ef95827bff39e66e2c25d5144b35a16ba3954917526f37036863bf135bf532b73b3a0edf2f5823a9b03a3219ced10091cba380d42f5c41aced7fb3c7d2c32a26fccd946476bf551ccc14062a60cdf6eb14a66a6f00eb477a1ae993eedc959a17b4b3b426525cdafe0b3fd0025f5fa25887896193c32871c0bd6f8a7a8aca26492cf350771"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x9f, 0xc0, 0x1, [@generic={0x96, 0x22, "2e90cd5c8a93612fcc3ea015bca0340f3450e9f1064d2327b6b3ab40d89b6f705c51d50ec0255b877134af0406e0dd016a94a2c7201fd9b38eec56afc5b9105beda4f7d279e9fd763cfb951d68859759eec56b4f5dc508bb965561c0a96c95e85fd90a08f2941d93b1e98a74973d489819fd582890af6e3a6267d3e41fbefc232889222c08feeb70d7066210698fd8100bd1a356"}, @generic={0xc2, 0xf, "7058b648484e225a05343a580c671ada97ede9a1d2761628336fb5bd6fdd5ffd9a0c715a7c818e2d9104154867ad9862b94dba8f87638df9d62c8cbae11071eddea7c46a595ce3f10ddb0b43a4fc5e6ff42ff71f27ad75fa9278c4606cefa717b8ee7429079d8ebc66b9932c7d69411e379b051865b2d10fc6e25e928aaa293a0fc4f302cd2d0ec207ed4a5278217329988f7745482c920570ae2828b0ad35584c75d31d52dbc3288a46e7bd95c3c0bed32157e7dddc6df86df9ba2ecc85e586"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0xc3ffdf15055b483, 0x1, 0x6, 0x64}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x5, 0x6a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x7}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xe, 0x9, 0xa9, [@generic={0x27, 0x21, "fceacf1c2b7e430ae77b909878ad586c886d9f5be671e3539f5ac3e24270e5dd832a558b3a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xff, 0x8, 0x7, [@generic={0x6b, 0x1, "f6d278590a2167403554cf4605283062697f58408b505964784c7b8dad2da82838eed3d19165b1290cbfc9f074f9e1fbc913eebaa5f13371505be627b805288b0ecd268657500d53d4cabe5e7db509d406ab5772b1ed779809746f8fa96bf91cb94e31394a0dbf0f86"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x4, 0x3, 0xc}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x4, 0x80}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x81, 0x9, 0xf}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x9, 0x3, [@generic={0x41, 0xc, "769c1685f9b8afa66a66b0d13849b9ffdbea61b33296a7aa661a3ab19521b8da65a45d9a89b45fec5fbd4b715cf56fef0669b401069ad099f161cb7f83eb60"}, @generic={0x2e, 0x21, "93eb485cd6bd69c281e875d4beb957d65fbb5b7a1209fc1ab51f38e5da214a7f6076328e49796b21dc215ae2"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0xae, 0x2d, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x7596762abcd7415e, 0x3, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x71, 0x3}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x8, 0x7f, 0x10, 0x1}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x5, 0x8}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x144b}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "be403bb69e6ba88af9bd380ba869622248c58ce3b82b2b56ced380f6624e5011fc412b55f9fe989fc38c09db7474bf409f2510751ac5659f62f1b3f8c3616772b3472e0c8a43f1c975673a0ea23c97490db0cf90ddaeaece8f50feabfbf405fed4ba4683c36a15e4596377e1f8a6b828d05777b15484605549366aa076ead91707bf5401ab4c3d4bc6434bb42dc1d0637db3c4f2579b35d918e1c0af3800eb59180124a07656b3bab9efda955b9ccccfe2bf129d146230e445f162a288dc1cfb43d68a9d1da97d24"}}]}) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f7ee25bd7000fcdbdf2502000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) recvmsg$unix(r9, &(0x7f0000001000)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/150, 0x96}, {&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000d00)=""/145, 0x91}, {&(0x7f0000000dc0)=""/248, 0xf8}, {&(0x7f0000000ec0)=""/128, 0x80}], 0x6, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10042) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c00030000000000000000007581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000009e79c7ad2600bb2b53e4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 90.74262ms ago: executing program 4 (id=226): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000002000010000000000ce2f305586e07d436c658f2c0000001f3db42c328dab4e46000a10140000000007000077ab3635732c000014000200fc0000000000000000000000000000000500160032000000140001002001"], 0x4c}}, 0x40000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="68010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf270cd531ab51c445254400000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x24000001}, 0x44044) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 0s ago: executing program 4 (id=227): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x109040, 0x0) poll(&(0x7f0000000040)=[{r0, 0x128}], 0x1, 0x400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) kernel console output (not intermixed with test programs): 850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.965841][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.980209][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.991048][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.145829][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.168475][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.177325][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.189387][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.199332][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.300446][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.332922][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.355343][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.370678][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.422924][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.559820][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 63.563494][ T5894] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 63.594961][ T9] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 63.603208][ T9] usb 3-1: config 0 has no interface number 0 [ 63.615068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.623375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.638918][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.690814][ T9] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 63.833996][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.864808][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.872848][ T9] usb 3-1: Product: syz [ 63.883298][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.945017][ T9] usb 3-1: Manufacturer: syz [ 63.949656][ T9] usb 3-1: SerialNumber: syz [ 63.950103][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.981503][ T5836] Bluetooth: hci1: command tx timeout [ 63.987052][ T5833] Bluetooth: hci0: command tx timeout [ 63.990008][ T5831] Bluetooth: hci3: command tx timeout [ 64.006162][ T9] usb 3-1: config 0 descriptor?? [ 64.042901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.050931][ T5831] Bluetooth: hci2: command tx timeout [ 64.050972][ T5831] Bluetooth: hci4: command tx timeout [ 64.063508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.091747][ T5899] Zero length message leads to an empty skb [ 64.267244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.299754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.504827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.694751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.716989][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.740137][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.794774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.803750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 64.815765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.874947][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.914568][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 64.949609][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.978315][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 65.020960][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 65.049854][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.082431][ T5884] usb 5-1: config 0 descriptor?? [ 65.110553][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.127708][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.138695][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.164519][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.194892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.228952][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.309096][ T5904] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 65.346054][ T5883] usb 4-1: config 0 has no interfaces? [ 65.351818][ T5883] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 65.368462][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.376099][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.394168][ T5883] usb 4-1: config 0 descriptor?? [ 65.445599][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'. [ 65.720643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.092225][ T5836] Bluetooth: hci1: command tx timeout [ 66.097795][ T5831] Bluetooth: hci0: command tx timeout [ 66.097807][ T5833] Bluetooth: hci3: command tx timeout [ 66.125450][ T5836] Bluetooth: hci4: command tx timeout [ 66.129307][ T5833] Bluetooth: hci2: command tx timeout [ 66.151447][ T5892] usb 3-1: USB disconnect, device number 2 [ 66.234035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.706642][ T5928] loop7: detected capacity change from 0 to 16384 [ 67.738050][ T5882] usb 4-1: USB disconnect, device number 2 [ 68.099240][ T5887] usb 1-1: USB disconnect, device number 2 [ 68.466227][ T5882] usb 5-1: USB disconnect, device number 2 [ 68.733881][ T5937] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 68.938329][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.191423][ T5944] FAULT_INJECTION: forcing a failure. [ 69.191423][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.254963][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 69.272326][ T5883] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 69.308815][ T5883] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 69.317036][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.3.14 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 69.317060][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.317074][ T5944] Call Trace: [ 69.317081][ T5944] [ 69.317088][ T5944] dump_stack_lvl+0x241/0x360 [ 69.317125][ T5944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.317147][ T5944] ? __pfx__printk+0x10/0x10 [ 69.317170][ T5944] ? __pfx_lock_release+0x10/0x10 [ 69.317195][ T5944] should_fail_ex+0x3b0/0x4e0 [ 69.317220][ T5944] _copy_from_iter+0x1e9/0x1c20 [ 69.317238][ T5944] ? __virt_addr_valid+0x183/0x530 [ 69.317268][ T5944] ? __pfx__copy_from_iter+0x10/0x10 [ 69.317287][ T5944] ? __virt_addr_valid+0x183/0x530 [ 69.317306][ T5944] ? __virt_addr_valid+0x183/0x530 [ 69.317329][ T5944] ? __virt_addr_valid+0x45f/0x530 [ 69.317348][ T5944] ? __phys_addr_symbol+0x2f/0x70 [ 69.317367][ T5944] ? __check_object_size+0x47a/0x730 [ 69.317390][ T5944] netlink_sendmsg+0x73d/0xcb0 [ 69.317418][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.317438][ T5944] ? aa_sock_msg_perm+0x91/0x160 [ 69.317466][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.317481][ T5944] __sock_sendmsg+0x221/0x270 [ 69.317504][ T5944] ____sys_sendmsg+0x52a/0x7e0 [ 69.317529][ T5944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.317544][ T5944] ? __fget_files+0x2a/0x410 [ 69.317567][ T5944] ? __fget_files+0x2a/0x410 [ 69.317594][ T5944] __sys_sendmsg+0x269/0x350 [ 69.317614][ T5944] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.317642][ T5944] ? do_sys_openat2+0x17a/0x1d0 [ 69.317683][ T5944] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.317703][ T5944] ? do_syscall_64+0x100/0x230 [ 69.317727][ T5944] ? do_syscall_64+0xb6/0x230 [ 69.317751][ T5944] do_syscall_64+0xf3/0x230 [ 69.317771][ T5944] ? clear_bhb_loop+0x35/0x90 [ 69.317790][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.317817][ T5944] RIP: 0033:0x7fc937b8cd29 [ 69.317836][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.317848][ T5944] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.317866][ T5944] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29 [ 69.317877][ T5944] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 69.317887][ T5944] RBP: 00007fc9389d8090 R08: 0000000000000000 R09: 0000000000000000 [ 69.317896][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.317905][ T5944] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28 [ 69.317928][ T5944] [ 69.771990][ T5883] usb 1-1: config 8 has no interface number 0 [ 69.793506][ T5883] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 69.838716][ T5883] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 69.858050][ T5883] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.871787][ T5883] usb 1-1: config 8 interface 206 has no altsetting 0 [ 69.912520][ T5883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 69.926411][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.935011][ T5883] usb 1-1: Product: syz [ 69.939349][ T5883] usb 1-1: Manufacturer: syz [ 69.944062][ T5883] usb 1-1: SerialNumber: syz [ 70.227845][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.389437][ T5950] kvm: emulating exchange as write [ 70.418827][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.494604][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 70.496489][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.574501][ T5882] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 70.654555][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.804567][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 70.844691][ T5882] usb 4-1: config 0 has no interface number 0 [ 70.853838][ T5887] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 70.873906][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.910150][ T5887] usb 2-1: config 0 descriptor?? [ 70.919421][ T5887] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 70.958164][ T5882] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 71.058447][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.173628][ T5882] usb 4-1: Product: syz [ 71.241327][ T5883] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 71.264659][ T5882] usb 4-1: Manufacturer: syz [ 71.281025][ T5882] usb 4-1: SerialNumber: syz [ 71.303583][ T5883] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 71.314893][ T5882] usb 4-1: config 0 descriptor?? [ 71.324738][ T5887] gspca_vc032x: reg_w err -71 [ 71.334904][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.341139][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.347470][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.368818][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.374189][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.394001][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.413418][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.419270][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.444837][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.445321][ T5883] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 71.450334][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.531454][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.553345][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.703635][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.712182][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.712901][ T5883] usb 1-1: USB disconnect, device number 3 [ 71.754520][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.801319][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.832057][ T5883] garmin_gps 1-1:8.206: device disconnected [ 71.839210][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.880170][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.902441][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.919634][ T5887] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.933208][ T5887] gspca_vc032x: Unknown sensor... [ 71.955227][ T5887] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 72.152667][ T5887] usb 2-1: USB disconnect, device number 2 [ 72.394560][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.576554][ T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.759351][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 72.776443][ T972] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 72.785482][ T972] usb 3-1: config 0 has no interface number 0 [ 72.792169][ T5884] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 72.811188][ T972] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 72.820551][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.828881][ T972] usb 3-1: Product: syz [ 72.836824][ T972] usb 3-1: Manufacturer: syz [ 72.841898][ T972] usb 3-1: SerialNumber: syz [ 72.849755][ T972] usb 3-1: config 0 descriptor?? [ 72.866606][ T5884] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.875804][ T5884] usb 1-1: config 1 has no interface number 1 [ 72.882017][ T5884] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 73.040111][ T5884] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.099169][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.184656][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.224582][ T5884] usb 1-1: Product: syz [ 73.269535][ T5884] usb 1-1: Manufacturer: syz [ 73.292632][ T5884] usb 1-1: SerialNumber: syz [ 73.863042][ T5884] usb 1-1: USB disconnect, device number 4 [ 74.569074][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.647770][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.944699][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.034229][ T5887] usb 4-1: USB disconnect, device number 3 [ 75.050529][ T5884] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 75.227771][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 75.343130][ T5887] usb 3-1: USB disconnect, device number 3 [ 75.373141][ T5884] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 75.383192][ T5884] usb 2-1: config 0 has no interface number 0 [ 75.390563][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.402005][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 75.413918][ T5884] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 75.425494][ T5884] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.445550][ T5884] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.466646][ T5884] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 75.477870][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.489264][ T5884] usb 2-1: Product: syz [ 75.493476][ T5884] usb 2-1: Manufacturer: syz [ 75.530109][ T5884] usb 2-1: SerialNumber: syz [ 75.543829][ T5884] usb 2-1: config 0 descriptor?? [ 75.556140][ T5992] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 75.570512][ T5884] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 75.660207][ T5884] scsi host1: usb-storage 2-1:0.189 [ 75.726689][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.765699][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 75.780777][ T25] usb 1-1: can't read configurations, error -71 [ 76.249261][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.262290][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.475254][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 76.503220][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 76.504583][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 76.523474][ T6011] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 76.533522][ T6011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.551822][ T5887] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 76.561625][ T5887] usb 4-1: config 0 has no interface number 0 [ 76.581061][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.594168][ T5882] usb 3-1: config 244 has an invalid interface number: 68 but max is 0 [ 76.604108][ T5882] usb 3-1: config 244 has no interface number 0 [ 76.613829][ T5887] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 76.621098][ T5882] usb 3-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 76.633284][ T5882] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 76.644620][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 76.656142][ T5882] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 76.669759][ T25] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 76.683646][ T25] usb 1-1: config 0 has no interface number 0 [ 76.696337][ T25] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.707815][ T3509] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 76.731024][ T5882] usb 3-1: config 244 interface 68 has no altsetting 0 [ 76.738823][ T3509] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 76.759580][ T25] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 76.796304][ T5882] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.11 [ 76.811097][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.829506][ T25] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 76.843075][ T5882] usb 3-1: Product: syz [ 76.849320][ T5882] usb 3-1: Manufacturer: syz [ 76.858099][ T5882] usb 3-1: SerialNumber: syz [ 76.862782][ T25] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 76.873884][ T25] usb 1-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.890370][ T6008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.912197][ T25] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 76.922437][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.933482][ T25] usb 1-1: Product: syz [ 76.938963][ T25] usb 1-1: Manufacturer: syz [ 76.943944][ T25] usb 1-1: SerialNumber: syz [ 76.948841][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.976715][ T25] usb 1-1: config 0 descriptor?? [ 76.999097][ T6009] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 77.068682][ T3509] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 77.082799][ T3509] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 77.147010][ T5887] usb 4-1: Product: syz [ 77.159482][ T5882] comedi comedi0: Endpoint has wrong direction [ 77.176751][ T5882] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device. [ 77.179881][ T5887] usb 4-1: Manufacturer: syz [ 77.205928][ T5882] usb 3-1: USB disconnect, device number 4 [ 77.224536][ T5887] usb 4-1: SerialNumber: syz [ 77.245793][ T25] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 77.268714][ T5887] usb 4-1: config 0 descriptor?? [ 77.326452][ T25] usb 1-1: USB disconnect, device number 6 [ 78.172210][ T6026] kernel profiling enabled (shift: 9) [ 78.183410][ T29] audit: type=1326 audit(1737681578.042:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.450811][ T29] audit: type=1326 audit(1737681578.072:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.493908][ T5882] usb 2-1: USB disconnect, device number 3 [ 78.503091][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 78.523021][ T3578] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 78.558519][ T3578] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 78.571662][ T29] audit: type=1326 audit(1737681578.072:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.593938][ T3578] sd 1:0:0:1: [sdc] Sense not available. [ 78.600599][ T3578] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 78.612017][ T29] audit: type=1326 audit(1737681578.072:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.634888][ T3578] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 78.653669][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 78.662995][ T3578] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 78.676925][ T6035] netlink: 192 bytes leftover after parsing attributes in process `syz.1.40'. [ 78.708927][ T3578] sd 1:0:0:1: [sdc] Asking for cache data failed [ 78.737008][ T3578] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 78.745163][ T29] audit: type=1326 audit(1737681578.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.851763][ T29] audit: type=1326 audit(1737681578.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 78.911372][ T3578] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 78.953888][ T29] audit: type=1326 audit(1737681578.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 79.005105][ T6043] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 79.097782][ T5842] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 79.150299][ T25] usb 4-1: USB disconnect, device number 4 [ 79.211157][ T29] audit: type=1326 audit(1737681578.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6025 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5847f8cd29 code=0x7ffc0000 [ 79.703085][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.44'. [ 79.845078][ T5882] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.945439][ T6063] netlink: 'syz.4.45': attribute type 11 has an invalid length. [ 79.953469][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 80.092179][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 80.101066][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 80.127017][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.143790][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.156607][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.209946][ T5882] usb 2-1: Product: syz [ 80.218743][ T5882] usb 2-1: Manufacturer: syz [ 80.230193][ T5882] usb 2-1: SerialNumber: syz [ 80.257196][ T5882] usb 2-1: config 0 descriptor?? [ 80.287152][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.298592][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 80.326263][ T6066] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.712224][ T6073] mmap: syz.3.49 (6073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.743505][ T6073] FAULT_INJECTION: forcing a failure. [ 80.743505][ T6073] name failslab, interval 1, probability 0, space 0, times 1 [ 80.781764][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.3.49 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 80.781782][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.781788][ T6073] Call Trace: [ 80.781792][ T6073] [ 80.781797][ T6073] dump_stack_lvl+0x241/0x360 [ 80.781823][ T6073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.781845][ T6073] ? __pfx__printk+0x10/0x10 [ 80.781869][ T6073] ? kmem_cache_alloc_noprof+0x48/0x380 [ 80.781892][ T6073] ? __pfx___might_resched+0x10/0x10 [ 80.781918][ T6073] should_fail_ex+0x3b0/0x4e0 [ 80.781944][ T6073] should_failslab+0xac/0x100 [ 80.781965][ T6073] ? vm_area_dup+0x61/0x290 [ 80.781985][ T6073] kmem_cache_alloc_noprof+0x70/0x380 [ 80.782009][ T6073] vm_area_dup+0x61/0x290 [ 80.782032][ T6073] __split_vma+0x1cb/0xc50 [ 80.782061][ T6073] ? validate_chain+0x11e/0x5920 [ 80.782085][ T6073] ? __pfx___split_vma+0x10/0x10 [ 80.782103][ T6073] ? _prb_read_valid+0xa39/0xac0 [ 80.782134][ T6073] ? mark_lock+0x9a/0x360 [ 80.782156][ T6073] vms_gather_munmap_vmas+0x2e6/0x1600 [ 80.782176][ T6073] ? __lock_acquire+0x1397/0x2100 [ 80.782207][ T6073] ? mtree_range_walk+0x6fd/0x8e0 [ 80.782232][ T6073] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 80.782261][ T6073] ? mas_find+0x8c0/0xbb0 [ 80.782289][ T6073] __mmap_region+0x7c4/0x2d30 [ 80.782339][ T6073] ? __pfx___mmap_region+0x10/0x10 [ 80.782368][ T6073] ? __schedule+0x1874/0x4be0 [ 80.782428][ T6073] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 80.782458][ T6073] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 80.782489][ T6073] ? mm_get_unmapped_area+0xa8/0xd0 [ 80.782517][ T6073] ? cap_mmap_addr+0x163/0x2c0 [ 80.782540][ T6073] mmap_region+0x226/0x2c0 [ 80.782570][ T6073] do_mmap+0x97a/0x10d0 [ 80.782591][ T6073] ? mtree_load+0x23a/0x9c0 [ 80.782623][ T6073] ? __pfx_do_mmap+0x10/0x10 [ 80.782645][ T6073] ? __pfx_down_write_killable+0x10/0x10 [ 80.782661][ T6073] ? common_file_perm+0x1a6/0x210 [ 80.782690][ T6073] __se_sys_remap_file_pages+0xaea/0xc00 [ 80.782722][ T6073] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 80.782744][ T6073] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.782766][ T6073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.782786][ T6073] ? do_syscall_64+0x100/0x230 [ 80.782815][ T6073] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 80.782835][ T6073] do_syscall_64+0xf3/0x230 [ 80.782858][ T6073] ? clear_bhb_loop+0x35/0x90 [ 80.782893][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.782927][ T6073] RIP: 0033:0x7fc937b8cd29 [ 80.782942][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.782954][ T6073] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 80.782972][ T6073] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29 [ 80.782984][ T6073] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 000000002013e000 [ 80.782994][ T6073] RBP: 00007fc9389d8090 R08: 0000000000000001 R09: 0000000000000000 [ 80.783003][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.783012][ T6073] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28 [ 80.783036][ T6073] [ 80.896310][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 81.239444][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.254235][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.352272][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 81.380282][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 81.468926][ T6074] delete_channel: no stack [ 81.579064][ T5882] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 81.602458][ T5882] em28xx 2-1:0.0: No AC97 audio processor [ 81.651397][ T5882] usb 2-1: USB disconnect, device number 4 [ 81.673941][ T5882] em28xx 2-1:0.0: Disconnecting em28xx [ 81.742506][ T5882] em28xx 2-1:0.0: Freeing device [ 81.804727][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 81.862456][ T5918] udevd[5918]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 81.881530][ T5842] udevd[5842]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 81.908089][ T80] cfg80211: failed to load regulatory.db [ 82.006499][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 82.019526][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.028824][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.044568][ T25] usb 4-1: Product: syz [ 82.074174][ T25] usb 4-1: Manufacturer: syz [ 82.085760][ T25] usb 4-1: SerialNumber: syz [ 82.101069][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.134666][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 82.192329][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 82.265426][ T80] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.393724][ T25] r8152-cfgselector 4-1: Needed 2 retries to read version [ 82.451384][ T80] usb 3-1: Using ep0 maxpacket: 16 [ 82.476389][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 82.482971][ T80] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 82.499863][ T80] usb 3-1: config 0 has no interface number 0 [ 82.543291][ T80] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 82.552887][ T80] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.561759][ T80] usb 3-1: Product: syz [ 82.566251][ T80] usb 3-1: Manufacturer: syz [ 82.570908][ T80] usb 3-1: SerialNumber: syz [ 82.606577][ T80] usb 3-1: config 0 descriptor?? [ 82.664622][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.871320][ T6104] xt_hashlimit: size too large, truncated to 1048576 [ 82.925382][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 82.967989][ T25] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 82.989863][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.025843][ T25] usb 1-1: Product: syz [ 83.043543][ T5887] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 83.053946][ T25] usb 1-1: Manufacturer: syz [ 83.062022][ T25] usb 1-1: SerialNumber: syz [ 83.073033][ T25] usb 1-1: config 0 descriptor?? [ 83.668468][ T6095] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 83.684326][ T6095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.822115][ T5892] usb 1-1: USB disconnect, device number 7 [ 84.707374][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.824716][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.861599][ T6126] FAULT_INJECTION: forcing a failure. [ 84.861599][ T6126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.901453][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.0.63 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 84.901479][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.901489][ T6126] Call Trace: [ 84.901495][ T6126] [ 84.901507][ T6126] dump_stack_lvl+0x241/0x360 [ 84.901537][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.901561][ T6126] ? __pfx__printk+0x10/0x10 [ 84.901588][ T6126] ? snprintf+0xda/0x120 [ 84.901610][ T6126] should_fail_ex+0x3b0/0x4e0 [ 84.901637][ T6126] _copy_to_user+0x31/0xb0 [ 84.901659][ T6126] simple_read_from_buffer+0xca/0x150 [ 84.901681][ T6126] proc_fail_nth_read+0x1e9/0x250 [ 84.901704][ T6126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.901733][ T6126] ? rw_verify_area+0x55e/0x6f0 [ 84.901756][ T6126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.901777][ T6126] vfs_read+0x1fc/0xb70 [ 84.901794][ T6126] ? fdget_pos+0x254/0x320 [ 84.901817][ T6126] ? __pfx___mutex_lock+0x10/0x10 [ 84.901841][ T6126] ? __pfx_vfs_read+0x10/0x10 [ 84.901860][ T6126] ? __fget_files+0x2a/0x410 [ 84.901882][ T6126] ? __fget_files+0x395/0x410 [ 84.901902][ T6126] ? __fget_files+0x2a/0x410 [ 84.901932][ T6126] ksys_read+0x18f/0x2b0 [ 84.901950][ T6126] ? __pfx_ksys_read+0x10/0x10 [ 84.901967][ T6126] ? do_syscall_64+0x100/0x230 [ 84.901993][ T6126] ? do_syscall_64+0xb6/0x230 [ 84.902017][ T6126] do_syscall_64+0xf3/0x230 [ 84.902039][ T6126] ? clear_bhb_loop+0x35/0x90 [ 84.902058][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.902081][ T6126] RIP: 0033:0x7f3ace98b73c [ 84.902096][ T6126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.902109][ T6126] RSP: 002b:00007f3acf786030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.902127][ T6126] RAX: ffffffffffffffda RBX: 00007f3aceba5fa0 RCX: 00007f3ace98b73c [ 84.902139][ T6126] RDX: 000000000000000f RSI: 00007f3acf7860a0 RDI: 0000000000000005 [ 84.902149][ T6126] RBP: 00007f3acf786090 R08: 0000000000000000 R09: 0000000000000000 [ 84.902159][ T6126] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 84.902169][ T6126] R13: 0000000000000000 R14: 00007f3aceba5fa0 R15: 00007f3aceccfa28 [ 84.902196][ T6126] [ 85.246533][ T5892] usb 5-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 85.256820][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.377162][ T5892] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.444608][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.452658][ T5892] usb 5-1: SerialNumber: syz [ 85.894602][ T80] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.949127][ T5887] usb 3-1: USB disconnect, device number 5 [ 86.234545][ T80] usb 4-1: Using ep0 maxpacket: 16 [ 86.246291][ T80] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 86.280376][ T80] usb 4-1: config 0 has no interface number 0 [ 86.323699][ T80] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 86.333954][ T80] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.347618][ T80] usb 4-1: Product: syz [ 86.371503][ T80] usb 4-1: Manufacturer: syz [ 86.384667][ T972] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 86.401528][ T80] usb 4-1: SerialNumber: syz [ 86.584599][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 86.592060][ T80] usb 4-1: config 0 descriptor?? [ 86.621937][ T972] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 86.630400][ T972] usb 1-1: config 0 has no interface number 0 [ 86.950880][ T972] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 86.960456][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.969107][ T972] usb 1-1: Product: syz [ 86.973467][ T972] usb 1-1: Manufacturer: syz [ 86.978159][ T972] usb 1-1: SerialNumber: syz [ 87.066458][ T972] usb 1-1: config 0 descriptor?? [ 87.360953][ T5892] usb 5-1: 0:2 : does not exist [ 87.391757][ T5892] usb 5-1: USB disconnect, device number 3 [ 87.699077][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 87.716853][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.905357][ T5833] Bluetooth: hci1: hardware error 0x02 [ 88.034657][ T80] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 88.186551][ T80] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 88.195331][ T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 88.255239][ T80] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023 [ 88.297931][ T80] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 88.347264][ T80] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.380255][ T80] usb 2-1: Product: syz [ 88.389670][ T80] usb 2-1: Manufacturer: syz [ 88.401490][ T80] usb 2-1: SerialNumber: syz [ 88.420164][ T80] usb 2-1: config 0 descriptor?? [ 88.512933][ T80] hub 2-1:0.0: bad descriptor, ignoring hub [ 88.542787][ T80] hub 2-1:0.0: probe with driver hub failed with error -5 [ 88.587728][ T80] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 88.693889][ T80] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 88.758063][ T6156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.782531][ T80] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 88.949849][ T80] usb 1-1: USB disconnect, device number 8 [ 88.964910][ T5887] usb 2-1: USB disconnect, device number 5 [ 89.192661][ T5887] usb 4-1: USB disconnect, device number 6 [ 89.676362][ T80] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.684291][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.837063][ T5882] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 89.854514][ T80] usb 3-1: Using ep0 maxpacket: 8 [ 89.859846][ T5882] usb 1-1: config 0 has no interface number 0 [ 89.871545][ T80] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 89.901961][ T5882] usb 1-1: New USB device found, idVendor=e748, idProduct=7698, bcdDevice=38.cc [ 90.055149][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.079383][ T80] usb 3-1: config 2 has no interface number 0 [ 90.144089][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.190782][ T80] usb 3-1: config 2 interface 31 has no altsetting 0 [ 90.207270][ T5882] usb 1-1: Product: syz [ 90.225806][ T5882] usb 1-1: Manufacturer: syz [ 90.237937][ T80] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 90.252931][ T5882] usb 1-1: SerialNumber: syz [ 90.263286][ T80] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.300206][ T5882] usb 1-1: config 0 descriptor?? [ 90.340531][ T6181] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.79'. [ 90.372751][ T80] usb 3-1: Product: syz [ 90.403048][ T80] usb 3-1: Manufacturer: syz [ 90.411175][ T5882] usb 1-1: bad CDC descriptors [ 90.424691][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.459189][ T80] usb 3-1: SerialNumber: syz [ 90.464583][ T972] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.691272][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.700257][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.752382][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 90.789936][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.801986][ T972] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.812791][ T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 90.822832][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.832561][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.858129][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.872045][ T972] usb 2-1: config 0 descriptor?? [ 90.875222][ T5882] usb 1-1: USB disconnect, device number 9 [ 90.909765][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.918917][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.918948][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.918977][ T5887] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.918997][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.945746][ T5887] usb 5-1: config 0 descriptor?? [ 90.953781][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.023638][ T6177] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 91.038796][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.093808][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.176815][ T80] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 91.222621][ T80] usb 3-1: USB disconnect, device number 6 [ 91.472422][ T5887] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 91.661153][ T5887] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 91.918262][ T5887] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 91.992531][ T5887] usb 5-1: USB disconnect, device number 4 [ 92.074798][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 92.256494][ T25] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 92.267092][ T25] usb 3-1: config 0 has no interface number 0 [ 92.314219][ T25] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.445540][ T25] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.501920][ T6194] FAULT_INJECTION: forcing a failure. [ 92.501920][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 92.515141][ T6185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.524071][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.4.84 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 92.524095][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 92.524104][ T6194] Call Trace: [ 92.524112][ T6194] [ 92.524119][ T6194] dump_stack_lvl+0x241/0x360 [ 92.524148][ T6194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.524170][ T6194] ? __pfx__printk+0x10/0x10 [ 92.524193][ T6194] ? fs_reclaim_acquire+0x93/0x130 [ 92.524211][ T6194] ? __pfx___might_resched+0x10/0x10 [ 92.524230][ T6194] should_fail_ex+0x3b0/0x4e0 [ 92.524256][ T6194] should_failslab+0xac/0x100 [ 92.524278][ T6194] __kmalloc_noprof+0xdd/0x4c0 [ 92.524297][ T6194] ? kstrtouint_from_user+0x128/0x190 [ 92.524311][ T6194] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 92.524332][ T6194] tomoyo_realpath_from_path+0xcf/0x5e0 [ 92.524359][ T6194] tomoyo_path_number_perm+0x236/0x860 [ 92.524381][ T6194] ? __lock_acquire+0x1397/0x2100 [ 92.524401][ T6194] ? tomoyo_path_number_perm+0x206/0x860 [ 92.524428][ T6194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 92.524485][ T6194] ? __fget_files+0x2a/0x410 [ 92.524508][ T6194] ? __fget_files+0x2a/0x410 [ 92.524533][ T6194] security_file_ioctl+0xc6/0x2a0 [ 92.524555][ T6194] __se_sys_ioctl+0x46/0x170 [ 92.524573][ T6194] do_syscall_64+0xf3/0x230 [ 92.524596][ T6194] ? clear_bhb_loop+0x35/0x90 [ 92.524615][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.524638][ T6194] RIP: 0033:0x7f510cf8cd29 [ 92.524653][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.524665][ T6194] RSP: 002b:00007f510de3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.524682][ T6194] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8cd29 [ 92.524693][ T6194] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003 [ 92.524703][ T6194] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000 [ 92.524712][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.524721][ T6194] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28 [ 92.524745][ T6194] [ 92.526410][ T6194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.832437][ T25] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 92.857540][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.890317][ T25] usb 3-1: Product: syz [ 92.898909][ T25] usb 3-1: Manufacturer: syz [ 92.908610][ T25] usb 3-1: SerialNumber: syz [ 92.927426][ T25] usb 3-1: config 0 descriptor?? [ 92.978970][ T8] usb 4-1: USB disconnect, device number 7 [ 93.021237][ T6188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.036067][ T6188] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.094581][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.143414][ T6188] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.230828][ T25] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 93.243688][ T6188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.250929][ T25] usb 3-1: USB disconnect, device number 7 [ 93.315573][ T6188] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.372669][ T6188] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.393826][ T6188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.443700][ T6188] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 93.457500][ T6188] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 93.474940][ T6188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.484015][ T6188] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.515510][ T6188] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.545864][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.689221][ T25] usb 2-1: USB disconnect, device number 6 [ 93.814709][ T80] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.974578][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 93.991259][ T80] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 94.003217][ T80] usb 5-1: config 0 has no interface number 0 [ 94.023091][ T80] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 94.032802][ T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.041131][ T80] usb 5-1: Product: syz [ 94.050036][ T80] usb 5-1: Manufacturer: syz [ 94.134529][ T80] usb 5-1: SerialNumber: syz [ 94.182586][ T80] usb 5-1: config 0 descriptor?? [ 94.311485][ T6222] FAULT_INJECTION: forcing a failure. [ 94.311485][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.370846][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.1.94 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 94.370870][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.370879][ T6222] Call Trace: [ 94.370885][ T6222] [ 94.370892][ T6222] dump_stack_lvl+0x241/0x360 [ 94.370922][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.370944][ T6222] ? __pfx__printk+0x10/0x10 [ 94.370971][ T6222] ? snprintf+0xda/0x120 [ 94.370993][ T6222] should_fail_ex+0x3b0/0x4e0 [ 94.371018][ T6222] _copy_to_user+0x31/0xb0 [ 94.371038][ T6222] simple_read_from_buffer+0xca/0x150 [ 94.371062][ T6222] proc_fail_nth_read+0x1e9/0x250 [ 94.371083][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.371105][ T6222] ? rw_verify_area+0x55e/0x6f0 [ 94.371125][ T6222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.371141][ T6222] vfs_read+0x1fc/0xb70 [ 94.371154][ T6222] ? fdget_pos+0x254/0x320 [ 94.371171][ T6222] ? __pfx___mutex_lock+0x10/0x10 [ 94.371190][ T6222] ? __pfx_vfs_read+0x10/0x10 [ 94.371205][ T6222] ? __fget_files+0x2a/0x410 [ 94.371223][ T6222] ? __fget_files+0x395/0x410 [ 94.371238][ T6222] ? __fget_files+0x2a/0x410 [ 94.371260][ T6222] ksys_read+0x18f/0x2b0 [ 94.371274][ T6222] ? __pfx_ksys_read+0x10/0x10 [ 94.371287][ T6222] ? do_syscall_64+0x100/0x230 [ 94.371307][ T6222] ? do_syscall_64+0xb6/0x230 [ 94.371326][ T6222] do_syscall_64+0xf3/0x230 [ 94.371344][ T6222] ? clear_bhb_loop+0x35/0x90 [ 94.371359][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.371379][ T6222] RIP: 0033:0x7f51f5d8b73c [ 94.371391][ T6222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.371401][ T6222] RSP: 002b:00007f51f6cbc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.371416][ T6222] RAX: ffffffffffffffda RBX: 00007f51f5fa5fa0 RCX: 00007f51f5d8b73c [ 94.371425][ T6222] RDX: 000000000000000f RSI: 00007f51f6cbc0a0 RDI: 0000000000000005 [ 94.371433][ T6222] RBP: 00007f51f6cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 94.371441][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.371448][ T6222] R13: 0000000000000000 R14: 00007f51f5fa5fa0 R15: 00007f51f60cfa28 [ 94.371467][ T6222] [ 94.793528][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'. [ 94.844616][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.404654][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.410921][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.491515][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.543466][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.824555][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 95.844983][ T5887] usb 2-1: config 0 has an invalid interface number: 53 but max is 0 [ 95.894651][ T5887] usb 2-1: config 0 has no interface number 0 [ 95.895766][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 95.939082][ T5887] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 95.948390][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.961175][ T5887] usb 2-1: Product: syz [ 95.968550][ T5887] usb 2-1: Manufacturer: syz [ 95.981748][ T5887] usb 2-1: SerialNumber: syz [ 95.989863][ T5887] usb 2-1: config 0 descriptor?? [ 96.423460][ T5883] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.544521][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.614533][ T80] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.627578][ T5883] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.696248][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 96.704265][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.730349][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.762898][ T5892] usb 5-1: USB disconnect, device number 5 [ 96.824217][ T5883] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.839831][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.858031][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.873212][ T5887] usb 3-1: Product: syz [ 96.880631][ T5887] usb 3-1: Manufacturer: syz [ 96.887822][ T5887] usb 3-1: SerialNumber: syz [ 96.924164][ T5887] usb 3-1: config 0 descriptor?? [ 96.936982][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.949779][ T5887] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.960497][ T5887] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 97.095593][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.110324][ T80] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.131561][ T6254] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 97.213136][ T80] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.223548][ T80] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.232698][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.249232][ T5883] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.275287][ T6263] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 97.390974][ T80] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.553273][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.559585][ T5887] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.559589][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.568000][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.755498][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.765551][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.808661][ T5887] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 97.816140][ T5887] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 97.843507][ T5887] em28xx 3-1:0.0: No AC97 audio processor [ 98.267286][ T5887] usb 3-1: USB disconnect, device number 8 [ 98.273882][ T5887] em28xx 3-1:0.0: Disconnecting em28xx [ 98.348667][ T5887] em28xx 3-1:0.0: Freeing device [ 99.013400][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.116592][ T80] usb 4-1: USB disconnect, device number 8 [ 99.184572][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.286773][ T972] usb 2-1: USB disconnect, device number 7 [ 99.314254][ T5887] usb 1-1: USB disconnect, device number 10 [ 99.365345][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.387409][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.441992][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.482166][ T5883] usb 5-1: config 0 descriptor?? [ 99.511837][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 99.602651][ T6286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 99.644686][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.651415][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.651428][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.917865][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.927642][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.935152][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.943176][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.952192][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.988558][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.008330][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.228096][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 100.249694][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.379767][ T6302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.395557][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.424845][ T6306] FAULT_INJECTION: forcing a failure. [ 100.424845][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 100.426937][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.471517][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.115 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 100.471540][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.471549][ T6306] Call Trace: [ 100.471555][ T6306] [ 100.471561][ T6306] dump_stack_lvl+0x241/0x360 [ 100.471592][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.471615][ T6306] ? __pfx__printk+0x10/0x10 [ 100.471649][ T6306] should_fail_ex+0x3b0/0x4e0 [ 100.471675][ T6306] should_failslab+0xac/0x100 [ 100.471697][ T6306] ? skb_clone+0x20c/0x390 [ 100.471714][ T6306] kmem_cache_alloc_noprof+0x70/0x380 [ 100.471741][ T6306] skb_clone+0x20c/0x390 [ 100.471761][ T6306] __netlink_deliver_tap+0x3cc/0x7f0 [ 100.471788][ T6306] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.471804][ T6306] netlink_deliver_tap+0x19d/0x1b0 [ 100.471822][ T6306] netlink_unicast+0x7c4/0x990 [ 100.471863][ T6306] ? __pfx_netlink_unicast+0x10/0x10 [ 100.471884][ T6306] ? __virt_addr_valid+0x45f/0x530 [ 100.471905][ T6306] ? __phys_addr_symbol+0x2f/0x70 [ 100.471924][ T6306] ? __check_object_size+0x47a/0x730 [ 100.471948][ T6306] netlink_sendmsg+0x8e4/0xcb0 [ 100.471976][ T6306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.471997][ T6306] ? aa_sock_msg_perm+0x91/0x160 [ 100.472027][ T6306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.472042][ T6306] __sock_sendmsg+0x221/0x270 [ 100.472064][ T6306] ____sys_sendmsg+0x52a/0x7e0 [ 100.472090][ T6306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.472104][ T6306] ? __fget_files+0x2a/0x410 [ 100.472128][ T6306] ? __fget_files+0x2a/0x410 [ 100.472157][ T6306] __sys_sendmsg+0x269/0x350 [ 100.472180][ T6306] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.472209][ T6306] ? do_sys_openat2+0x17a/0x1d0 [ 100.472255][ T6306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.472276][ T6306] ? do_syscall_64+0x100/0x230 [ 100.472302][ T6306] ? do_syscall_64+0xb6/0x230 [ 100.472326][ T6306] do_syscall_64+0xf3/0x230 [ 100.472348][ T6306] ? clear_bhb_loop+0x35/0x90 [ 100.472368][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.472391][ T6306] RIP: 0033:0x7fc937b8cd29 [ 100.472406][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.472419][ T6306] RSP: 002b:00007fc9389d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.472437][ T6306] RAX: ffffffffffffffda RBX: 00007fc937da5fa0 RCX: 00007fc937b8cd29 [ 100.472448][ T6306] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 100.472458][ T6306] RBP: 00007fc9389d8090 R08: 0000000000000000 R09: 0000000000000000 [ 100.472466][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.472473][ T6306] R13: 0000000000000000 R14: 00007fc937da5fa0 R15: 00007fc937ecfa28 [ 100.472499][ T6306] [ 100.754401][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.772907][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.837792][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.845426][ T80] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 100.856461][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.918328][ T5883] pwc: Registered as video103. [ 100.980761][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 101.044534][ T972] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 101.088504][ T80] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 101.125918][ T80] usb 2-1: config 0 has no interface number 0 [ 101.134903][ T5883] usb 5-1: USB disconnect, device number 6 [ 101.169628][ T80] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.208213][ T972] usb 3-1: unable to get BOS descriptor set [ 101.234509][ T80] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 101.264555][ T80] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 101.267437][ T972] usb 3-1: string descriptor 0 read error: -22 [ 101.314955][ T972] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 101.337681][ T80] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.351044][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.385702][ T972] usb 3-1: config 0 descriptor?? [ 101.434540][ T80] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.489395][ T80] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 101.581001][ T80] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.612393][ T80] usb 2-1: Product: syz [ 101.627894][ T972] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 101.678093][ T80] usb 2-1: Manufacturer: syz [ 101.682752][ T80] usb 2-1: SerialNumber: syz [ 101.695002][ T972] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 101.835421][ T972] dib0700: firmware download failed at 7 with -22 [ 101.872642][ T972] usb 3-1: USB disconnect, device number 9 [ 101.964688][ T80] usb 2-1: config 0 descriptor?? [ 101.973083][ T6301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.991012][ T80] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 102.021090][ T80] scsi host1: usb-storage 2-1:0.189 [ 102.074530][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 102.134661][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.339470][ T5887] usb 1-1: config 0 has no interfaces? [ 102.354108][ T5887] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 102.385565][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.396707][ T5887] usb 1-1: config 0 descriptor?? [ 102.406273][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.426862][ T5883] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.460049][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.491252][ T5883] usb 5-1: config 0 descriptor?? [ 102.579467][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 103.109110][ T3438] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 103.174352][ T3438] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 103.251771][ T3438] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 103.275319][ T3438] scsi 1:0:0:1: Attached scsi generic sg2 type 0 [ 103.412425][ T80] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.423355][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 103.430482][ T25] usb 2-1: USB disconnect, device number 8 [ 103.442363][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 103.456562][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 103.475285][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 103.483077][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 103.494941][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 103.509627][ T11] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 103.536557][ T11] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 103.540446][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 103.570202][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 103.572110][ T11] sd 1:0:0:1: [sdc] Sense not available. [ 103.588444][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 103.596598][ T11] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 103.603983][ T11] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 103.640477][ T11] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 103.648613][ T80] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.662157][ T11] sd 1:0:0:1: [sdc] Asking for cache data failed [ 103.677198][ T11] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 103.695960][ T80] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.758993][ T80] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.783369][ T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.791676][ T11] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 103.798914][ T6020] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 103.804707][ T972] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.852967][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 103.872917][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 103.880234][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 103.888546][ T6336] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 103.929243][ T80] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.972463][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 104.013026][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 104.038229][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 104.079248][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 104.090200][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 104.090663][ T972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.112959][ T972] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 104.122979][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.158570][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 104.172294][ T5883] pwc: Registered as video103. [ 104.187476][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 104.270747][ T5883] usb 5-1: USB disconnect, device number 7 [ 104.444526][ T972] usb 4-1: Product: syz [ 104.469133][ T972] usb 4-1: Manufacturer: syz [ 104.502319][ T972] usb 4-1: SerialNumber: syz [ 104.541319][ T972] usb 4-1: config 0 descriptor?? [ 104.588552][ T5919] udevd[5919]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 104.596769][ T6020] udevd[6020]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 104.820183][ T972] usb 4-1: Limiting number of CPorts to U8_MAX [ 104.881001][ T972] usb 4-1: Not enough endpoints found in device, aborting! [ 104.898286][ T5883] usb 1-1: USB disconnect, device number 11 [ 104.972204][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 105.321526][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 105.434666][ T5883] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.465521][ T8] usb 4-1: USB disconnect, device number 9 [ 105.633762][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 105.670956][ T5883] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 105.713710][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.784499][ T5883] usb 1-1: Product: syz [ 105.812595][ T5883] usb 1-1: Manufacturer: syz [ 105.844495][ T5883] usb 1-1: SerialNumber: syz [ 105.862257][ T5883] usb 1-1: config 0 descriptor?? [ 105.944796][ T5883] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 105.950538][ T972] usb 3-1: USB disconnect, device number 10 [ 106.038145][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.307004][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.348974][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.534976][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.576037][ T8] usb 2-1: config 0 descriptor?? [ 106.599090][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 106.664719][ T5887] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 106.971831][ T5887] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 107.058432][ T5887] usb 5-1: config 0 has no interface number 0 [ 107.066742][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.090421][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.097096][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.129593][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.163390][ T6377] netlink: 108 bytes leftover after parsing attributes in process `syz.3.133'. [ 107.185395][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.204557][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 107.248873][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.269452][ T5887] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 107.293279][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 107.312892][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.343287][ T5887] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.398702][ T5887] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.460258][ T5887] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 107.520759][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.530480][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 107.557952][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 107.586163][ T5887] usb 5-1: Product: syz [ 107.594017][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 107.601807][ T5887] usb 5-1: Manufacturer: syz [ 107.628698][ T5887] usb 5-1: SerialNumber: syz [ 107.635970][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 107.654817][ T5887] usb 5-1: config 0 descriptor?? [ 107.662099][ T6372] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.670114][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 107.696574][ T5887] ums-alauda 5-1:0.189: USB Mass Storage device detected [ 107.705477][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 107.713905][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 107.755444][ T5887] scsi host1: usb-storage 5-1:0.189 [ 107.763326][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 107.816862][ T8] pwc: Registered as video103. [ 107.839980][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 107.893258][ T5884] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.993568][ T8] usb 2-1: USB disconnect, device number 9 [ 108.054654][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 108.072988][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.126715][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.173989][ T5884] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.185499][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.242483][ T5884] usb 4-1: Product: syz [ 108.260333][ T5884] usb 4-1: Manufacturer: syz [ 108.280578][ T5884] usb 4-1: SerialNumber: syz [ 108.302261][ T5884] usb 4-1: config 0 descriptor?? [ 108.354756][ T5884] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.447373][ T5884] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 108.598415][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.778107][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 108.791620][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.803709][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.830250][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.846565][ T12] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 108.846849][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.858250][ T12] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 108.871260][ T8] usb 2-1: Product: syz [ 108.880985][ T8] usb 2-1: Manufacturer: syz [ 108.891814][ T8] usb 2-1: SerialNumber: syz [ 108.902706][ T8] usb 2-1: config 0 descriptor?? [ 108.917650][ T12] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 108.945774][ T5884] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 108.981579][ T12] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 109.029117][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.086661][ T8] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 109.154164][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.167905][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.213880][ T5884] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 109.224904][ T5884] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 109.250812][ T5884] em28xx 4-1:0.0: No AC97 audio processor [ 109.324692][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.358143][ T5884] usb 4-1: USB disconnect, device number 10 [ 109.381965][ T5884] em28xx 4-1:0.0: Disconnecting em28xx [ 109.398843][ T5884] em28xx 4-1:0.0: Freeing device [ 109.514597][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 109.533577][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.556748][ T8] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 109.594252][ T5882] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.721644][ T3438] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 109.722022][ T5887] usb 5-1: USB disconnect, device number 8 [ 109.728877][ T11] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 109.750214][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 109.765583][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.768176][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.780455][ T3438] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 109.796733][ T5883] gspca_stk1135: reg_w 0x353 err -71 [ 109.804158][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 109.810935][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.858463][ T8] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 109.880549][ T8] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 109.893713][ T5883] gspca_stk1135: Sensor write failed [ 109.895817][ T6397] fuse: Bad value for 'group_id' [ 109.899390][ T11] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 109.910519][ T8] em28xx 2-1:0.0: No AC97 audio processor [ 109.916538][ T5882] usb 3-1: config 0 descriptor?? [ 109.931509][ T6397] fuse: Bad value for 'group_id' [ 109.937609][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 109.963282][ T8] usb 2-1: USB disconnect, device number 10 [ 109.998200][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 110.011122][ T8] em28xx 2-1:0.0: Freeing device [ 110.017989][ T6397] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 110.092190][ T5883] gspca_stk1135: Sensor write failed [ 110.143434][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 110.185340][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.215023][ T5883] gspca_stk1135: Sensor read failed [ 110.220317][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.229827][ T5883] gspca_stk1135: Sensor read failed [ 110.235165][ T5883] gspca_stk1135: Detected sensor type unknown (0x0) [ 110.241903][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.269583][ T5883] gspca_stk1135: Sensor read failed [ 110.275359][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.283237][ T5883] gspca_stk1135: Sensor read failed [ 110.295543][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.303183][ T5883] gspca_stk1135: Sensor write failed [ 110.309909][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 110.586014][ T5883] gspca_stk1135: Sensor write failed [ 110.615954][ T5883] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 110.788387][ T5883] usb 1-1: USB disconnect, device number 12 [ 110.893932][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.984557][ T972] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.007764][ T6413] bridge1: entered promiscuous mode [ 111.072927][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 111.116532][ T5829] udevd[5829]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 111.140926][ T972] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.160931][ T972] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.231569][ T972] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.258067][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.285252][ T6409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.298768][ T972] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.364882][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.528001][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 111.544667][ T5883] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.547387][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.581700][ T8] usb 2-1: config 1 has no interface number 1 [ 111.598621][ T8] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.624046][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.660456][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.687455][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.732134][ T8] usb 2-1: Product: syz [ 111.740642][ T6347] udevd[6347]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 111.762582][ T8] usb 2-1: Manufacturer: syz [ 111.780500][ T8] usb 2-1: SerialNumber: syz [ 111.908408][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 112.064507][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 112.277166][ T5883] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 112.303581][ T8] usb 2-1: USB disconnect, device number 11 [ 112.354522][ T5883] usb 1-1: config 0 has no interface number 0 [ 112.454806][ T5883] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 112.546395][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.586390][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 112.622558][ T5883] usb 1-1: Product: syz [ 112.675869][ T5883] usb 1-1: Manufacturer: syz [ 112.714552][ T5883] usb 1-1: SerialNumber: syz [ 113.073399][ T5832] usb 3-1: USB disconnect, device number 11 [ 113.116209][ T5883] usb 1-1: config 0 descriptor?? [ 113.252937][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.530358][ T8] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 113.550594][ T8] usb 5-1: config 0 has no interface number 0 [ 113.575550][ T8] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.660312][ T8] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.692377][ T8] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 113.764641][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.803418][ T8] usb 5-1: Product: syz [ 113.808057][ T8] usb 5-1: Manufacturer: syz [ 113.812659][ T8] usb 5-1: SerialNumber: syz [ 113.904530][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.951909][ T8] usb 5-1: config 0 descriptor?? [ 113.983175][ T8] vmk80xx 5-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 113.998247][ T5887] usb 4-1: USB disconnect, device number 11 [ 114.021943][ T8] vmk80xx 5-1:0.255: probe with driver vmk80xx failed with error -22 [ 114.267242][ T6437] syz_tun: entered allmulticast mode [ 114.589158][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 114.623776][ T5882] usb 1-1: USB disconnect, device number 13 [ 114.632286][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 114.644236][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 114.654590][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.670635][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.681145][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.690979][ T5832] usb 2-1: SerialNumber: syz [ 114.714171][ T6429] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 115.262591][ T5832] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.284733][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.439213][ T5832] usb 2-1: USB disconnect, device number 12 [ 115.614553][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 115.636952][ T8] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 115.777880][ T8] usb 1-1: config 0 has no interface number 0 [ 115.790007][ T5895] usb 5-1: USB disconnect, device number 9 [ 115.814341][ T8] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 115.834858][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.873612][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.914104][ T8] usb 1-1: Product: syz [ 115.934173][ T8] usb 1-1: Manufacturer: syz [ 115.947452][ T8] usb 1-1: SerialNumber: syz [ 116.011972][ T8] usb 1-1: config 0 descriptor?? [ 116.141096][ T6453] fuse: Bad value for 'group_id' [ 116.149988][ T5884] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.167216][ T5884] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.179988][ T6453] fuse: Bad value for 'group_id' [ 116.188254][ T5884] usb 3-1: config 1 has no interface number 1 [ 116.198580][ T5884] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 116.209222][ T5884] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.223613][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.235707][ T6453] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.256176][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.265098][ T5884] usb 3-1: Product: syz [ 116.269376][ T5884] usb 3-1: Manufacturer: syz [ 116.274113][ T5884] usb 3-1: SerialNumber: syz [ 116.374750][ T5883] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 116.503982][ T6459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.153'. [ 116.579627][ T5883] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 116.596744][ T5883] usb 4-1: config 0 has no interface number 0 [ 116.604145][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.693114][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 116.788493][ T5883] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 116.803154][ T5884] usb 3-1: USB disconnect, device number 12 [ 116.866810][ T5883] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.895007][ T5883] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.985673][ T5883] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 117.041167][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.060861][ T5883] usb 4-1: Product: syz [ 117.074140][ T5883] usb 4-1: Manufacturer: syz [ 117.083301][ T5883] usb 4-1: SerialNumber: syz [ 117.300374][ T5883] usb 4-1: config 0 descriptor?? [ 117.308691][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.336919][ T6455] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.345228][ T5883] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 117.366714][ T5883] scsi host1: usb-storage 4-1:0.189 [ 118.441521][ T5883] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 118.498228][ T3509] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 118.551431][ T3509] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 118.675907][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.738777][ T3509] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 118.780141][ T3509] scsi 1:0:0:1: Attached scsi generic sg2 type 0 [ 118.850712][ T5883] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 118.867988][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.886130][ T5883] usb 2-1: Product: syz [ 118.895911][ T5883] usb 2-1: Manufacturer: syz [ 118.964572][ T5883] usb 2-1: SerialNumber: syz [ 118.989794][ T5883] usb 2-1: config 0 descriptor?? [ 119.002914][ T5882] usb 1-1: USB disconnect, device number 14 [ 119.039512][ T5883] usb 2-1: ucan: probing device on interface #0 [ 119.048352][ T5883] usb 2-1: ucan: invalid EP count (0) [ 119.072879][ T5883] usb 2-1: ucan: probe failed; try to update the device firmware [ 119.093459][ T8] usb 4-1: USB disconnect, device number 12 [ 119.101925][ T3509] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 119.108720][ T3438] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 119.188701][ T3509] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 119.227815][ T3438] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 119.229491][ T5982] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 119.923958][ T6479] bridge1: entered promiscuous mode [ 119.948668][ T6479] bridge1: entered allmulticast mode [ 119.968697][ T6479] team0: Port device bridge1 added [ 119.982098][ T5895] usb 2-1: USB disconnect, device number 13 [ 120.670915][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 120.993692][ T5847] udevd[5847]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 121.368537][ T5982] udevd[5982]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 121.391827][ T6347] udevd[6347]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 121.464821][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.624675][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 121.638816][ T8] usb 2-1: config 0 has an invalid interface number: 53 but max is 0 [ 121.722081][ T8] usb 2-1: config 0 has no interface number 0 [ 121.743605][ T8] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 121.894284][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.914536][ T8] usb 2-1: Product: syz [ 121.918707][ T8] usb 2-1: Manufacturer: syz [ 121.923276][ T8] usb 2-1: SerialNumber: syz [ 121.950365][ T8] usb 2-1: config 0 descriptor?? [ 122.050485][ T6516] xt_l2tp: missing protocol rule (udp|l2tpip) [ 122.544574][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.714619][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.905229][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 122.935195][ T5884] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 122.948168][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 123.000922][ T5884] usb 1-1: config 0 has no interface number 0 [ 123.033905][ T8] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 123.068317][ T8] usb 3-1: config 0 has no interface number 0 [ 123.184610][ T5884] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 123.195248][ T8] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 123.227127][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.236529][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.259611][ T5884] usb 1-1: Product: syz [ 123.294829][ T5884] usb 1-1: Manufacturer: syz [ 123.312527][ T5884] usb 1-1: SerialNumber: syz [ 123.312633][ T8] usb 3-1: Product: syz [ 123.334970][ T5884] usb 1-1: config 0 descriptor?? [ 123.342178][ T8] usb 3-1: Manufacturer: syz [ 123.353676][ T8] usb 3-1: SerialNumber: syz [ 123.376685][ T8] usb 3-1: config 0 descriptor?? [ 124.433959][ T5883] usb 2-1: USB disconnect, device number 14 [ 124.618083][ T5882] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.779088][ T5882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.794153][ T5882] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.817653][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.843458][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.926593][ T6540] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 124.971232][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.085465][ T6548] fuse: Unknown parameter '‚fd0x0000000000000004' [ 125.338429][ T5895] usb 5-1: USB disconnect, device number 10 [ 125.455760][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.489037][ T5883] usb 1-1: USB disconnect, device number 15 [ 125.605680][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 125.650272][ T5882] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 125.681064][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.721446][ T5882] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 125.752444][ T5882] usb 2-1: config 0 has no interface number 1 [ 125.762605][ T5882] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.787435][ T5882] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 125.814154][ T5895] usb 3-1: USB disconnect, device number 13 [ 125.833866][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.885079][ T5882] usb 2-1: Product: syz [ 125.889289][ T5882] usb 2-1: Manufacturer: syz [ 125.893901][ T5882] usb 2-1: SerialNumber: syz [ 125.933558][ T5882] usb 2-1: config 0 descriptor?? [ 125.944545][ T5883] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 126.116303][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.134779][ T5883] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.160698][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.170989][ T5882] kaweth 2-1:0.235: Firmware present in device. [ 126.194579][ T5883] usb 1-1: config 0 descriptor?? [ 126.202639][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 126.224614][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.224616][ T5895] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.387455][ T5895] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.406587][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.416956][ T5884] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.424575][ T5895] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.433326][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.454689][ T5895] usb 3-1: config 1 has no interface number 1 [ 126.455334][ T5884] usb 4-1: config 0 descriptor?? [ 126.471676][ T5895] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 126.478384][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 126.501815][ T5895] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.525173][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.535300][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.543752][ T5895] usb 3-1: Product: syz [ 126.555817][ T5895] usb 3-1: Manufacturer: syz [ 126.561021][ T5895] usb 3-1: SerialNumber: syz [ 126.634238][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.641834][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.650426][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.657959][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.672285][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.690190][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 126.702296][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 126.888162][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.906154][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.917485][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 126.928537][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 126.938438][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.945949][ T5895] usb 3-1: USB disconnect, device number 14 [ 126.952086][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 126.964596][ T5884] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.971793][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.979134][ T5884] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.988179][ T5882] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 127.005040][ T5882] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 127.014306][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.025711][ T5884] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.043148][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.052786][ T5884] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.073005][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.081392][ T5884] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.100675][ T5882] kaweth 2-1:0.0: Firmware present in device. [ 127.107415][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.113975][ T5884] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.124698][ T5882] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 127.144929][ T5884] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.151637][ T5883] pwc: Registered as video103. [ 127.156878][ T5882] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 127.169664][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 127.179487][ T5884] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.199891][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.210763][ T5882] usb 2-1: USB disconnect, device number 15 [ 127.229049][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.254940][ T5883] usb 1-1: USB disconnect, device number 16 [ 127.277119][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.303530][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.320180][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.364697][ T5884] pwc: Registered as video103. [ 127.412378][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.430171][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 127.505521][ T5884] usb 4-1: USB disconnect, device number 13 [ 127.604541][ T5882] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 127.774548][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 127.796289][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.809392][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.834676][ T5882] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.855402][ T5882] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 127.865337][ T5883] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 127.876681][ T5882] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 127.893728][ T5882] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.903450][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.909386][ T6572] netlink: 108 bytes leftover after parsing attributes in process `syz.3.183'. [ 127.912593][ T5882] usb 2-1: SerialNumber: syz [ 127.933421][ T6565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.942545][ T5882] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 127.952948][ T5882] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 128.004853][ T5895] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.034684][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 128.041199][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 128.056586][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.070789][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.079967][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.090217][ T5883] usb 1-1: Product: syz [ 128.094375][ T5883] usb 1-1: Manufacturer: syz [ 128.099043][ T5883] usb 1-1: SerialNumber: syz [ 128.107755][ T5883] usb 1-1: config 0 descriptor?? [ 128.115614][ T5883] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.125000][ T5883] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 128.153199][ T5884] usb 2-1: USB disconnect, device number 16 [ 128.175052][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.186495][ T5895] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.196116][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.206009][ T5895] usb 3-1: config 0 descriptor?? [ 128.217514][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 128.234609][ T5882] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 128.386484][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.397775][ T5882] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.407221][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.418111][ T5882] usb 4-1: config 0 descriptor?? [ 128.427169][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 128.637824][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.647668][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.658434][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.672638][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.681969][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.699221][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.715014][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 128.728364][ T5883] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 128.832553][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.840212][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.847925][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 128.855565][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 128.863719][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 128.871428][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.879212][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 128.892687][ T5882] pwc: recv_control_msg error -71 req 02 val 2100 [ 128.905479][ T5882] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.912329][ T5882] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.919341][ T5882] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.926334][ T5882] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.926869][ T5895] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.933262][ T5882] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.942837][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.948359][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.962924][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.966669][ T5895] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.973304][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.979843][ T5895] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.983278][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.991245][ T5895] pwc: recv_control_msg error -71 req 02 val 2600 [ 129.010093][ T5882] pwc: Registered as video103. [ 129.013802][ T5895] pwc: recv_control_msg error -71 req 02 val 2900 [ 129.017238][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 129.023349][ T5895] pwc: recv_control_msg error -71 req 02 val 2800 [ 129.043916][ T5882] usb 4-1: USB disconnect, device number 14 [ 129.044969][ T5895] pwc: recv_control_msg error -71 req 04 val 1100 [ 129.061071][ T5883] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 129.063990][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.069743][ T5883] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 129.076837][ T5895] pwc: Registered as video103. [ 129.083691][ T5883] em28xx 1-1:0.0: No AC97 audio processor [ 129.096421][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 129.107211][ T5883] usb 1-1: USB disconnect, device number 17 [ 129.114847][ T5883] em28xx 1-1:0.0: Disconnecting em28xx [ 129.136060][ T5883] em28xx 1-1:0.0: Freeing device [ 129.165787][ T5895] usb 3-1: USB disconnect, device number 15 [ 129.206170][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.364575][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 129.391295][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 129.422712][ T5884] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.441337][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.472019][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.481287][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.496994][ T5884] usb 2-1: SerialNumber: syz [ 129.510567][ T6580] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 129.645400][ T6588] capability: warning: `syz.4.188' uses 32-bit capabilities (legacy support in use) [ 129.744002][ T5884] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.762005][ T5884] usb 2-1: USB disconnect, device number 17 [ 129.791703][ T6591] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.190'. [ 129.801117][ T6591] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 129.934558][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 129.944635][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.044640][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 130.084620][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 130.092440][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.108155][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.109222][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.119050][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 130.130627][ T5895] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.148530][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.148702][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.166276][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.171528][ T5883] usb 3-1: config 0 descriptor?? [ 130.178115][ T6588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.190153][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.224703][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 130.257540][ T5882] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 130.287151][ T5882] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 130.297815][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.306516][ T5882] usb 1-1: Product: syz [ 130.311090][ T5882] usb 1-1: Manufacturer: syz [ 130.315813][ T5882] usb 1-1: SerialNumber: syz [ 130.323454][ T5882] usb 1-1: config 0 descriptor?? [ 130.330053][ T6591] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 130.347997][ T5882] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.533466][ T5832] usb 5-1: USB disconnect, device number 11 [ 130.603838][ T5883] microsoft 0003:045E:009D.0002: unknown main item tag 0x0 [ 130.613759][ T5895] usb 1-1: USB disconnect, device number 18 [ 130.625207][ T5882] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 130.653996][ T5883] microsoft 0003:045E:009D.0002: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 130.682484][ T5883] microsoft 0003:045E:009D.0002: no inputs found [ 130.691107][ T5883] microsoft 0003:045E:009D.0002: could not initialize ff, continuing anyway [ 130.796640][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.824523][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.828315][ T972] usb 3-1: USB disconnect, device number 16 [ 130.855740][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.881953][ T5882] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 130.891320][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.902079][ T5882] usb 2-1: config 0 descriptor?? [ 130.904180][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'. [ 131.640626][ T5892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 131.652160][ T6598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.691371][ T5882] usb 2-1: string descriptor 0 read error: -71 [ 131.734206][ T972] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.735061][ T5882] uclogic 0003:5543:004D.0003: failed retrieving string descriptor #200: -71 [ 131.769677][ T5882] uclogic 0003:5543:004D.0003: failed retrieving pen parameters: -71 [ 131.794378][ T5882] uclogic 0003:5543:004D.0003: failed probing pen v2 parameters: -71 [ 131.814219][ T5882] uclogic 0003:5543:004D.0003: failed probing parameters: -71 [ 131.981647][ T5892] usb 1-1: config 0 has no interfaces? [ 131.988443][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 132.017897][ T5882] uclogic 0003:5543:004D.0003: probe with driver uclogic failed with error -71 [ 132.017904][ T5892] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 132.017927][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.034168][ T5882] usb 2-1: USB disconnect, device number 18 [ 132.071587][ T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.101745][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.117777][ T5892] usb 1-1: config 0 descriptor?? [ 132.133704][ T972] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.145765][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.162666][ T972] usb 5-1: Product: syz [ 132.171165][ T972] usb 5-1: Manufacturer: syz [ 132.183844][ T972] usb 5-1: SerialNumber: syz [ 132.200403][ T972] usb 5-1: config 0 descriptor?? [ 132.222011][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.241889][ T972] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.263438][ T972] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 132.406423][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 132.431311][ T8] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 132.440947][ T8] usb 3-1: config 0 has no interface number 0 [ 132.474411][ T8] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 132.496932][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.514625][ T8] usb 3-1: Product: syz [ 132.522458][ T8] usb 3-1: Manufacturer: syz [ 132.533255][ T8] usb 3-1: SerialNumber: syz [ 132.545944][ T8] usb 3-1: config 0 descriptor?? [ 132.587250][ T6633] FAULT_INJECTION: forcing a failure. [ 132.587250][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 132.600616][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.1.205 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 132.600641][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 132.600652][ T6633] Call Trace: [ 132.600659][ T6633] [ 132.600666][ T6633] dump_stack_lvl+0x241/0x360 [ 132.600701][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.600724][ T6633] ? __pfx__printk+0x10/0x10 [ 132.600759][ T6633] should_fail_ex+0x3b0/0x4e0 [ 132.600792][ T6633] should_failslab+0xac/0x100 [ 132.600815][ T6633] ? skb_clone+0x20c/0x390 [ 132.600832][ T6633] kmem_cache_alloc_noprof+0x70/0x380 [ 132.600858][ T6633] skb_clone+0x20c/0x390 [ 132.600877][ T6633] __netlink_deliver_tap+0x3cc/0x7f0 [ 132.600903][ T6633] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.600918][ T6633] netlink_deliver_tap+0x19d/0x1b0 [ 132.600936][ T6633] netlink_unicast+0x7c4/0x990 [ 132.600968][ T6633] ? __pfx_netlink_unicast+0x10/0x10 [ 132.600990][ T6633] ? __virt_addr_valid+0x45f/0x530 [ 132.601012][ T6633] ? __phys_addr_symbol+0x2f/0x70 [ 132.601031][ T6633] ? __check_object_size+0x47a/0x730 [ 132.601057][ T6633] netlink_sendmsg+0x8e4/0xcb0 [ 132.601086][ T6633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.601107][ T6633] ? aa_sock_msg_perm+0x91/0x160 [ 132.601137][ T6633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.601154][ T6633] __sock_sendmsg+0x221/0x270 [ 132.601178][ T6633] ____sys_sendmsg+0x52a/0x7e0 [ 132.601205][ T6633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.601221][ T6633] ? __fget_files+0x2a/0x410 [ 132.601245][ T6633] ? __fget_files+0x2a/0x410 [ 132.601274][ T6633] __sys_sendmsg+0x269/0x350 [ 132.601296][ T6633] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.601325][ T6633] ? do_sys_openat2+0x17a/0x1d0 [ 132.601372][ T6633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.601394][ T6633] ? do_syscall_64+0x100/0x230 [ 132.601421][ T6633] ? do_syscall_64+0xb6/0x230 [ 132.601446][ T6633] do_syscall_64+0xf3/0x230 [ 132.601469][ T6633] ? clear_bhb_loop+0x35/0x90 [ 132.601490][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.601521][ T6633] RIP: 0033:0x7f51f5d8cd29 [ 132.601536][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.601550][ T6633] RSP: 002b:00007f51f6cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.601575][ T6633] RAX: ffffffffffffffda RBX: 00007f51f5fa5fa0 RCX: 00007f51f5d8cd29 [ 132.601587][ T6633] RDX: 000000002000c8c0 RSI: 0000000020006040 RDI: 0000000000000003 [ 132.601598][ T6633] RBP: 00007f51f6cbc090 R08: 0000000000000000 R09: 0000000000000000 [ 132.601609][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.601619][ T6633] R13: 0000000000000000 R14: 00007f51f5fa5fa0 R15: 00007f51f60cfa28 [ 132.601645][ T6633] [ 133.188880][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195294][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.229448][ T972] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 133.381907][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 133.430278][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.438937][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.454229][ T972] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 133.464494][ T972] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 133.472432][ T972] em28xx 5-1:0.0: No AC97 audio processor [ 133.484645][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 133.489898][ T972] usb 5-1: USB disconnect, device number 12 [ 133.540651][ T972] em28xx 5-1:0.0: Disconnecting em28xx [ 133.568384][ T972] em28xx 5-1:0.0: Freeing device [ 133.656127][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.667296][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.677802][ T5883] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 133.689075][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.729415][ T5883] usb 4-1: config 0 descriptor?? [ 133.967511][ T5883] usbhid 4-1:0.0: can't add hid device: -71 [ 133.984688][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.005877][ T5883] usb 4-1: USB disconnect, device number 15 [ 134.121434][ T6654] FAULT_INJECTION: forcing a failure. [ 134.121434][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 134.138162][ T6654] CPU: 0 UID: 0 PID: 6654 Comm: syz.4.213 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 134.138178][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 134.138184][ T6654] Call Trace: [ 134.138188][ T6654] [ 134.138193][ T6654] dump_stack_lvl+0x241/0x360 [ 134.138212][ T6654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.138225][ T6654] ? __pfx__printk+0x10/0x10 [ 134.138239][ T6654] ? fs_reclaim_acquire+0x93/0x130 [ 134.138250][ T6654] ? __pfx___might_resched+0x10/0x10 [ 134.138262][ T6654] should_fail_ex+0x3b0/0x4e0 [ 134.138278][ T6654] should_failslab+0xac/0x100 [ 134.138291][ T6654] __kmalloc_noprof+0xdd/0x4c0 [ 134.138303][ T6654] ? kstrtouint_from_user+0x128/0x190 [ 134.138311][ T6654] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 134.138324][ T6654] tomoyo_realpath_from_path+0xcf/0x5e0 [ 134.138339][ T6654] tomoyo_path_number_perm+0x236/0x860 [ 134.138352][ T6654] ? __lock_acquire+0x1397/0x2100 [ 134.138364][ T6654] ? tomoyo_path_number_perm+0x206/0x860 [ 134.138378][ T6654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.138412][ T6654] ? __fget_files+0x2a/0x410 [ 134.138427][ T6654] ? __fget_files+0x2a/0x410 [ 134.138441][ T6654] security_file_ioctl+0xc6/0x2a0 [ 134.138455][ T6654] __se_sys_ioctl+0x46/0x170 [ 134.138465][ T6654] do_syscall_64+0xf3/0x230 [ 134.138480][ T6654] ? clear_bhb_loop+0x35/0x90 [ 134.138492][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.138507][ T6654] RIP: 0033:0x7f510cf8cd29 [ 134.138516][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.138524][ T6654] RSP: 002b:00007f510de3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.138536][ T6654] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8cd29 [ 134.138542][ T6654] RDX: 0000000020001400 RSI: 00000000c004743e RDI: 0000000000000003 [ 134.138548][ T6654] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.138555][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.138560][ T6654] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28 [ 134.138574][ T6654] [ 134.138579][ T6654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.389098][ T5895] usb 1-1: USB disconnect, device number 19 [ 134.614993][ T972] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.774832][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 134.793428][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.823132][ T5892] usb 3-1: USB disconnect, device number 17 [ 134.881403][ T972] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.890849][ T5883] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 134.898468][ T972] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 134.898497][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.918240][ T972] usb 2-1: config 0 descriptor?? [ 134.946711][ T6672] fuse: Bad value for 'group_id' [ 134.954972][ T6672] fuse: Bad value for 'group_id' [ 134.962374][ T6672] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.126606][ T5883] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.137652][ T5883] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.147060][ T5883] usb 1-1: config 1 has no interface number 1 [ 135.160341][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 135.169721][ T5883] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 135.178969][ T5883] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.198177][ T5883] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.208023][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.221146][ T5883] usb 1-1: Product: syz [ 135.242737][ T5883] usb 1-1: Manufacturer: syz [ 135.247613][ T5883] usb 1-1: SerialNumber: syz [ 135.334526][ T80] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 135.484779][ T80] usb 3-1: Using ep0 maxpacket: 32 [ 135.496203][ T80] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.510138][ T80] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 135.529191][ T5883] usb 1-1: USB disconnect, device number 20 [ 135.536844][ T80] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.561748][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.578542][ T80] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 135.612070][ T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.637048][ T80] usb 3-1: config 0 descriptor?? [ 135.737476][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.860521][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.871417][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.925002][ T5832] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 135.946215][ T6685] FAULT_INJECTION: forcing a failure. [ 135.946215][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.959614][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.4.224 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 135.959637][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.959646][ T6685] Call Trace: [ 135.959652][ T6685] [ 135.959658][ T6685] dump_stack_lvl+0x241/0x360 [ 135.959690][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.959718][ T6685] ? __pfx__printk+0x10/0x10 [ 135.959746][ T6685] ? snprintf+0xda/0x120 [ 135.959764][ T6685] should_fail_ex+0x3b0/0x4e0 [ 135.959790][ T6685] _copy_to_user+0x31/0xb0 [ 135.959813][ T6685] simple_read_from_buffer+0xca/0x150 [ 135.959836][ T6685] proc_fail_nth_read+0x1e9/0x250 [ 135.959859][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.959882][ T6685] ? rw_verify_area+0x55e/0x6f0 [ 135.959906][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.959926][ T6685] vfs_read+0x1fc/0xb70 [ 135.959943][ T6685] ? fdget_pos+0x254/0x320 [ 135.959964][ T6685] ? __pfx___mutex_lock+0x10/0x10 [ 135.959987][ T6685] ? __pfx_vfs_read+0x10/0x10 [ 135.960005][ T6685] ? __fget_files+0x2a/0x410 [ 135.960027][ T6685] ? __fget_files+0x395/0x410 [ 135.960047][ T6685] ? __fget_files+0x2a/0x410 [ 135.960084][ T6685] ksys_read+0x18f/0x2b0 [ 135.960103][ T6685] ? __pfx_ksys_read+0x10/0x10 [ 135.960118][ T6685] ? do_syscall_64+0x100/0x230 [ 135.960142][ T6685] ? do_syscall_64+0xb6/0x230 [ 135.960178][ T6685] do_syscall_64+0xf3/0x230 [ 135.960201][ T6685] ? clear_bhb_loop+0x35/0x90 [ 135.960221][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.960245][ T6685] RIP: 0033:0x7f510cf8b73c [ 135.960260][ T6685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.960274][ T6685] RSP: 002b:00007f510de3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.960292][ T6685] RAX: ffffffffffffffda RBX: 00007f510d1a5fa0 RCX: 00007f510cf8b73c [ 135.960305][ T6685] RDX: 000000000000000f RSI: 00007f510de3a0a0 RDI: 0000000000000004 [ 135.960315][ T6685] RBP: 00007f510de3a090 R08: 0000000000000000 R09: 0000000000000000 [ 135.960325][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.960335][ T6685] R13: 0000000000000000 R14: 00007f510d1a5fa0 R15: 00007f510d2cfa28 [ 135.960361][ T6685] [ 136.204652][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 136.214303][ T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 136.222745][ T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 136.246467][ T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 136.254686][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.268481][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.324841][ T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 136.333143][ T80] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 136.350187][ T6690] netlink: 340 bytes leftover after parsing attributes in process `syz.4.226'. [ 136.369730][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.381892][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.385203][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 136.390506][ T80] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 136.423363][ T5832] usb 4-1: Product: syz [ 136.428940][ T5832] usb 4-1: Manufacturer: syz [ 136.451847][ T5832] usb 4-1: SerialNumber: syz [ 136.461174][ T80] ================================================================== [ 136.471604][ T80] BUG: KASAN: stack-out-of-bounds in usb_check_int_endpoints+0x1fe/0x280 [ 136.480041][ T80] Read of size 1 at addr ffffc9000213e831 by task kworker/1:1/80 [ 136.487770][ T80] [ 136.490103][ T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 136.490124][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.490136][ T80] Workqueue: usb_hub_wq hub_event [ 136.490173][ T80] Call Trace: [ 136.490179][ T80] [ 136.490186][ T80] dump_stack_lvl+0x241/0x360 [ 136.490214][ T80] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.490237][ T80] ? __pfx__printk+0x10/0x10 [ 136.490259][ T80] ? _printk+0xd5/0x120 [ 136.490281][ T80] print_report+0x169/0x550 [ 136.490299][ T80] ? process_scheduled_works+0xa66/0x1840 [ 136.490323][ T80] ? kthread+0x7a9/0x920 [ 136.490341][ T80] ? ret_from_fork+0x4b/0x80 [ 136.490357][ T80] ? ret_from_fork_asm+0x1a/0x30 [ 136.490372][ T80] ? __virt_addr_valid+0xbd/0x530 [ 136.490393][ T80] ? usb_check_int_endpoints+0x1fe/0x280 [ 136.490411][ T80] kasan_report+0x143/0x180 [ 136.490430][ T80] ? usb_check_int_endpoints+0x1fe/0x280 [ 136.490449][ T80] usb_check_int_endpoints+0x1fe/0x280 [ 136.490467][ T80] thrustmaster_probe+0x47d/0xcb0 [ 136.490485][ T80] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.490509][ T80] ? __pfx_thrustmaster_probe+0x10/0x10 [ 136.490525][ T80] ? hid_match_id+0x308/0x330 [ 136.490544][ T80] ? hid_lookup_quirk+0x32e/0x580 [ 136.490565][ T80] hid_device_probe+0x3bf/0x710 [ 136.490587][ T80] ? really_probe+0x148/0xad0 [ 136.490608][ T80] ? __pfx_hid_device_probe+0x10/0x10 [ 136.490626][ T80] really_probe+0x2b9/0xad0 [ 136.490650][ T80] __driver_probe_device+0x1a2/0x390 [ 136.490672][ T80] driver_probe_device+0x50/0x430 [ 136.490694][ T80] __device_attach_driver+0x2d6/0x530 [ 136.490714][ T80] bus_for_each_drv+0x24e/0x2e0 [ 136.490730][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 136.490750][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.490768][ T80] __device_attach+0x333/0x520 [ 136.490785][ T80] ? __pfx_lock_release+0x10/0x10 [ 136.490804][ T80] ? __pfx___device_attach+0x10/0x10 [ 136.490824][ T80] ? do_raw_spin_unlock+0x13c/0x8b0 [ 136.490841][ T80] bus_probe_device+0x189/0x260 [ 136.490858][ T80] device_add+0x856/0xbf0 [ 136.490879][ T80] hid_add_device+0x3b6/0x520 [ 136.490901][ T80] usbhid_probe+0xb52/0xec0 [ 136.490927][ T80] usb_probe_interface+0x641/0xbb0 [ 136.490950][ T80] ? __pfx_usb_probe_interface+0x10/0x10 [ 136.490966][ T80] really_probe+0x2b9/0xad0 [ 136.490989][ T80] __driver_probe_device+0x1a2/0x390 [ 136.491011][ T80] driver_probe_device+0x50/0x430 [ 136.491033][ T80] __device_attach_driver+0x2d6/0x530 [ 136.491055][ T80] bus_for_each_drv+0x24e/0x2e0 [ 136.491071][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 136.491092][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.491111][ T80] __device_attach+0x333/0x520 [ 136.491130][ T80] ? __pfx_lock_release+0x10/0x10 [ 136.491161][ T80] ? __pfx___device_attach+0x10/0x10 [ 136.491182][ T80] ? do_raw_spin_unlock+0x13c/0x8b0 [ 136.491202][ T80] bus_probe_device+0x189/0x260 [ 136.491220][ T80] device_add+0x856/0xbf0 [ 136.491240][ T80] usb_set_configuration+0x1976/0x1fb0 [ 136.491266][ T80] usb_generic_driver_probe+0x88/0x140 [ 136.491290][ T80] usb_probe_device+0x1b8/0x380 [ 136.491306][ T80] ? __pfx_usb_probe_device+0x10/0x10 [ 136.491320][ T80] really_probe+0x2b9/0xad0 [ 136.491342][ T80] __driver_probe_device+0x1a2/0x390 [ 136.491362][ T80] driver_probe_device+0x50/0x430 [ 136.491384][ T80] __device_attach_driver+0x2d6/0x530 [ 136.491405][ T80] bus_for_each_drv+0x24e/0x2e0 [ 136.491421][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 136.491442][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.491459][ T80] __device_attach+0x333/0x520 [ 136.491480][ T80] ? __pfx___device_attach+0x10/0x10 [ 136.491501][ T80] bus_probe_device+0x189/0x260 [ 136.491518][ T80] device_add+0x856/0xbf0 [ 136.491537][ T80] usb_new_device+0x104a/0x19a0 [ 136.491566][ T80] ? __pfx_usb_new_device+0x10/0x10 [ 136.491588][ T80] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.491608][ T80] ? lockdep_hardirqs_on+0x99/0x150 [ 136.491631][ T80] hub_event+0x2d6d/0x5150 [ 136.491673][ T80] ? __pfx_hub_event+0x10/0x10 [ 136.491697][ T80] ? __pfx_lock_acquire+0x10/0x10 [ 136.491716][ T80] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.491737][ T80] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.491760][ T80] ? process_scheduled_works+0x976/0x1840 [ 136.491785][ T80] process_scheduled_works+0xa66/0x1840 [ 136.491821][ T80] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.491849][ T80] ? assign_work+0x364/0x3d0 [ 136.491875][ T80] worker_thread+0x870/0xd30 [ 136.491896][ T80] ? __kthread_parkme+0x169/0x1d0 [ 136.491915][ T80] ? __pfx_worker_thread+0x10/0x10 [ 136.491932][ T80] kthread+0x7a9/0x920 [ 136.491951][ T80] ? __pfx_kthread+0x10/0x10 [ 136.491970][ T80] ? __pfx_worker_thread+0x10/0x10 [ 136.491987][ T80] ? __pfx_kthread+0x10/0x10 [ 136.492005][ T80] ? __pfx_kthread+0x10/0x10 [ 136.492025][ T80] ? __pfx_kthread+0x10/0x10 [ 136.492042][ T80] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.492062][ T80] ? lockdep_hardirqs_on+0x99/0x150 [ 136.492083][ T80] ? __pfx_kthread+0x10/0x10 [ 136.492102][ T80] ret_from_fork+0x4b/0x80 [ 136.492120][ T80] ? __pfx_kthread+0x10/0x10 [ 136.492146][ T80] ret_from_fork_asm+0x1a/0x30 [ 136.492169][ T80] [ 136.492176][ T80] [ 137.004210][ T80] The buggy address belongs to stack of task kworker/1:1/80 [ 137.011480][ T80] and is located at offset 49 in frame: [ 137.017098][ T80] thrustmaster_probe+0x0/0xcb0 [ 137.021950][ T80] [ 137.024261][ T80] This frame has 2 objects: [ 137.028746][ T80] [32, 36) 'trans.i' [ 137.028757][ T80] [48, 49) 'ep_addr.i' [ 137.032717][ T80] [ 137.039152][ T80] The buggy address belongs to the virtual mapping at [ 137.039152][ T80] [ffffc90002138000, ffffc90002141000) created by: [ 137.039152][ T80] copy_process+0x5d1/0x3d50 [ 137.056766][ T80] [ 137.059088][ T80] The buggy address belongs to the physical page: [ 137.065492][ T80] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fa96 [ 137.074236][ T80] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.081348][ T80] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 137.089978][ T80] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 137.098546][ T80] page dumped because: kasan: bad access detected [ 137.104950][ T80] page_owner tracks the page as allocated [ 137.110648][ T80] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 51, tgid 51 (kworker/u8:3), ts 3826283846, free_ts 0 [ 137.128518][ T80] post_alloc_hook+0x1f3/0x230 [ 137.133277][ T80] get_page_from_freelist+0x365c/0x37a0 [ 137.138819][ T80] __alloc_pages_noprof+0x292/0x710 [ 137.144005][ T80] alloc_pages_mpol_noprof+0x3e1/0x780 [ 137.149462][ T80] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 137.155340][ T80] dup_task_struct+0x444/0x8c0 [ 137.160094][ T80] copy_process+0x5d1/0x3d50 [ 137.164678][ T80] kernel_clone+0x226/0x8e0 [ 137.169166][ T80] user_mode_thread+0x132/0x1a0 [ 137.174001][ T80] call_usermodehelper_exec_work+0x5c/0x230 [ 137.179887][ T80] process_scheduled_works+0xa66/0x1840 [ 137.185423][ T80] worker_thread+0x870/0xd30 [ 137.190000][ T80] kthread+0x7a9/0x920 [ 137.194057][ T80] ret_from_fork+0x4b/0x80 [ 137.198465][ T80] ret_from_fork_asm+0x1a/0x30 [ 137.203306][ T80] page_owner free stack trace missing [ 137.208658][ T80] [ 137.210970][ T80] Memory state around the buggy address: [ 137.216584][ T80] ffffc9000213e700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.224631][ T80] ffffc9000213e780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.232676][ T80] >ffffc9000213e800: f1 f1 f1 f1 04 f2 01 f3 00 00 00 00 00 00 00 00 [ 137.240717][ T80] ^ [ 137.246330][ T80] ffffc9000213e880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.254376][ T80] ffffc9000213e900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.262423][ T80] ================================================================== [ 137.293329][ T5832] usb 4-1: config 0 descriptor?? [ 137.323021][ T5832] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.340855][ T5832] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 137.384307][ T80] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.391541][ T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-04858-g21266b8df522 #0 [ 137.401785][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 137.411839][ T80] Workqueue: usb_hub_wq hub_event [ 137.416870][ T80] Call Trace: [ 137.420136][ T80] [ 137.423054][ T80] dump_stack_lvl+0x241/0x360 [ 137.427725][ T80] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.432912][ T80] ? __pfx__printk+0x10/0x10 [ 137.437493][ T80] ? preempt_schedule+0xe1/0xf0 [ 137.442335][ T80] ? vscnprintf+0x5d/0x90 [ 137.446651][ T80] panic+0x349/0x880 [ 137.450537][ T80] ? check_panic_on_warn+0x21/0xb0 [ 137.455639][ T80] ? __pfx_panic+0x10/0x10 [ 137.460047][ T80] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 137.466016][ T80] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 137.472332][ T80] ? print_report+0x502/0x550 [ 137.477000][ T80] check_panic_on_warn+0x86/0xb0 [ 137.481941][ T80] ? usb_check_int_endpoints+0x1fe/0x280 [ 137.487561][ T80] end_report+0x77/0x160 [ 137.491791][ T80] kasan_report+0x154/0x180 [ 137.496287][ T80] ? usb_check_int_endpoints+0x1fe/0x280 [ 137.501909][ T80] usb_check_int_endpoints+0x1fe/0x280 [ 137.507363][ T80] thrustmaster_probe+0x47d/0xcb0 [ 137.512382][ T80] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.518359][ T80] ? __pfx_thrustmaster_probe+0x10/0x10 [ 137.523889][ T80] ? hid_match_id+0x308/0x330 [ 137.528556][ T80] ? hid_lookup_quirk+0x32e/0x580 [ 137.533571][ T80] hid_device_probe+0x3bf/0x710 [ 137.538414][ T80] ? really_probe+0x148/0xad0 [ 137.543084][ T80] ? __pfx_hid_device_probe+0x10/0x10 [ 137.548444][ T80] really_probe+0x2b9/0xad0 [ 137.552938][ T80] __driver_probe_device+0x1a2/0x390 [ 137.558214][ T80] driver_probe_device+0x50/0x430 [ 137.563230][ T80] __device_attach_driver+0x2d6/0x530 [ 137.568593][ T80] bus_for_each_drv+0x24e/0x2e0 [ 137.573427][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 137.579308][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.584670][ T80] __device_attach+0x333/0x520 [ 137.590668][ T80] ? __pfx_lock_release+0x10/0x10 [ 137.595952][ T80] ? __pfx___device_attach+0x10/0x10 [ 137.601234][ T80] ? do_raw_spin_unlock+0x13c/0x8b0 [ 137.606429][ T80] bus_probe_device+0x189/0x260 [ 137.611276][ T80] device_add+0x856/0xbf0 [ 137.615604][ T80] hid_add_device+0x3b6/0x520 [ 137.620321][ T80] usbhid_probe+0xb52/0xec0 [ 137.626661][ T80] usb_probe_interface+0x641/0xbb0 [ 137.631772][ T80] ? __pfx_usb_probe_interface+0x10/0x10 [ 137.637395][ T80] really_probe+0x2b9/0xad0 [ 137.641896][ T80] __driver_probe_device+0x1a2/0x390 [ 137.647180][ T80] driver_probe_device+0x50/0x430 [ 137.652206][ T80] __device_attach_driver+0x2d6/0x530 [ 137.657573][ T80] bus_for_each_drv+0x24e/0x2e0 [ 137.662414][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 137.668297][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.673654][ T80] __device_attach+0x333/0x520 [ 137.678410][ T80] ? __pfx_lock_release+0x10/0x10 [ 137.683429][ T80] ? __pfx___device_attach+0x10/0x10 [ 137.688717][ T80] ? do_raw_spin_unlock+0x13c/0x8b0 [ 137.693909][ T80] bus_probe_device+0x189/0x260 [ 137.698748][ T80] device_add+0x856/0xbf0 [ 137.703088][ T80] usb_set_configuration+0x1976/0x1fb0 [ 137.708546][ T80] usb_generic_driver_probe+0x88/0x140 [ 137.713997][ T80] usb_probe_device+0x1b8/0x380 [ 137.718839][ T80] ? __pfx_usb_probe_device+0x10/0x10 [ 137.724217][ T80] really_probe+0x2b9/0xad0 [ 137.728715][ T80] __driver_probe_device+0x1a2/0x390 [ 137.733992][ T80] driver_probe_device+0x50/0x430 [ 137.739013][ T80] __device_attach_driver+0x2d6/0x530 [ 137.744376][ T80] bus_for_each_drv+0x24e/0x2e0 [ 137.749212][ T80] ? __pfx___device_attach_driver+0x10/0x10 [ 137.755096][ T80] ? __pfx_bus_for_each_drv+0x10/0x10 [ 137.760457][ T80] __device_attach+0x333/0x520 [ 137.765213][ T80] ? __pfx___device_attach+0x10/0x10 [ 137.770489][ T80] bus_probe_device+0x189/0x260 [ 137.775335][ T80] device_add+0x856/0xbf0 [ 137.779657][ T80] usb_new_device+0x104a/0x19a0 [ 137.784502][ T80] ? __pfx_usb_new_device+0x10/0x10 [ 137.789690][ T80] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.794885][ T80] ? lockdep_hardirqs_on+0x99/0x150 [ 137.800073][ T80] hub_event+0x2d6d/0x5150 [ 137.804498][ T80] ? __pfx_hub_event+0x10/0x10 [ 137.809260][ T80] ? __pfx_lock_acquire+0x10/0x10 [ 137.814275][ T80] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.820248][ T80] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.826567][ T80] ? process_scheduled_works+0x976/0x1840 [ 137.832278][ T80] process_scheduled_works+0xa66/0x1840 [ 137.837831][ T80] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.843807][ T80] ? assign_work+0x364/0x3d0 [ 137.848389][ T80] worker_thread+0x870/0xd30 [ 137.852967][ T80] ? __kthread_parkme+0x169/0x1d0 [ 137.857980][ T80] ? __pfx_worker_thread+0x10/0x10 [ 137.863077][ T80] kthread+0x7a9/0x920 [ 137.867135][ T80] ? __pfx_kthread+0x10/0x10 [ 137.871715][ T80] ? __pfx_worker_thread+0x10/0x10 [ 137.876814][ T80] ? __pfx_kthread+0x10/0x10 [ 137.881390][ T80] ? __pfx_kthread+0x10/0x10 [ 137.885969][ T80] ? __pfx_kthread+0x10/0x10 [ 137.890545][ T80] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.895733][ T80] ? lockdep_hardirqs_on+0x99/0x150 [ 137.900922][ T80] ? __pfx_kthread+0x10/0x10 [ 137.905503][ T80] ret_from_fork+0x4b/0x80 [ 137.909909][ T80] ? __pfx_kthread+0x10/0x10 [ 137.914494][ T80] ret_from_fork_asm+0x1a/0x30 [ 137.919257][ T80] [ 137.922564][ T80] Kernel Offset: disabled [ 137.926876][ T80] Rebooting in 86400 seconds..