last executing test programs: 9.053807377s ago: executing program 3 (id=2675): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001000)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7ffffffb, 0x22d01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)="1dc64cfcb41b377cd8c12f9635f05f2c7683a7ee21c28f995f7478", 0x1b}, {&(0x7f00000004c0)="64e95fcac300323cdbdf51dc058489d0cc68c8cc65381c61b4f1ea0f208c7361b53e5f3f79b4664904009198c4a60a46db55b6f8f4e6b4831311603eaa76dcdf4098892bcd465cca9a6ba0", 0x4b}, {&(0x7f0000000540)="750d0236e1e4fa4ce047a4c1b9a11a684c1447e2b7cdd5442f8f878699d78d71daa5d73a4962d4c415d905c617d488b51bafec6980642bcff8370df648943ab0f206e859b1f5ce1bea7b7f18733fc1b9306230746275432553a301", 0x5b}, {&(0x7f0000000740)="5b9b6d913492971bb2bf3d17f021fed34320328ea7342c15f0023a474661a8e062520a3ca627a40e237e459fcc56504d2f490bc542fac64d3706978f8d0c804af1570eea6d63147cc95b39b2e2cfcf85059e8e9e70f95bcb9a2b7a0203110a6dc8276efe3e7604f155d94c807c7a6d12222bd0b76532693f5b72d011ccd9b099d7706ffe464c4bb24f379943d609a3ac845e6bc6e6837e118d7d60a456afe6daef012edbbb92cb3693c689ab15aee4df94d6f3107ef88e45308ec0722a4e05779156134655c023089643", 0xca}, {&(0x7f00000005c0)="9ba89aa235e9b484ae5e4389de377586cd7d69c68d7457ce02a6fea82fd9399868caf665ede2eaaf1173946614494ed885d18f3f75013fb32d9c63d3fd0dfc323fb0c8fa2951f5", 0x47}, {&(0x7f0000000840)}, {&(0x7f0000000900)="85b5ff9cbdfc8dff12e2346d41ac7bc40a3aa753293e624b87e60b27dfa36cb4f0582d734505f973a53855fd52dbfbe42191f56ee0465ced0f9226ecf78c8a48226bfb72a8028c9483cc163d39d5ce282f792ca40d247501eaec7aa56ccce555f25e75b6755400f2da9754c2541b9b75313a87a54a4d26ca2a1d4bc292c924df579b323d512861c6c4f95b9427c961f8105795c0f1a25398d27a8535714529b8869f3e2998f400d946ed530c9bcb24cfef08a1ee223d87637368cbdbf00a4dd568f0af8a602fa86ed4", 0xc9}, {&(0x7f0000000a00)="8137b4d60c2ee0dcf2e8b635a08e34d072d159bfc44e28a1517ab243014722ec8767288b09ca0bb268834780dff879ad1534d40cf3e18620654e5dbc4e14ae35967302ff15d0684fd4563f6408b68fb8cbac726247884b35d089e3b8fa6ec1fb280d7f2846bc8ec13aceb10f218a18e9d345eb7addb0d625fca1b8863b1509b7430bd2df09457391b5a314de302b66b872238a52d78dbcb682459a", 0x9b}, {&(0x7f0000000680)="554133e124b358995d1ee54e8e985ba48dbab037064a87a5ceedba939cfe50fcac8b379409d80df3ff063b5f25940574c156bd79be91c2dfa0a45cedc6283eee31356adace06ca104699f27dd74e99ce917ca128a2ac61c63704996d4f326f744165", 0x62}, {&(0x7f0000000ac0)="260137ff0dc7016b46b574511a5f45189a9931e792df476b8323cce7fde5e25ae35ff6b7ab90e4d4af2f8d1dd46d039bff9f5efe8b9f", 0x36}], 0xa, &(0x7f0000000e00)=[{0xe8, 0xff, 0x7, "8ad273197765bf4fae4ce40f79206d1eceba2576a04442a34cc5883d333c76ac737c077a0664c1a2a45471ec151d9a993c0dbcfcd4589409e2318d43a327c06499a765eee7948c7ee0e5f4e49022e2db8f35e59f95140c850ca223dfc234d1b0a1df95ac1b27db7c13af341680ac9177e8a317c2dd2b430865a808c7f4a8601cb2fb2b8ca1ee0aee83adc9d1eeb115b8949e01502fc1653fc6bcedf26fb1e6ed91e6983c9ed4e6e86b8151bf387950ba36d42ec27f4422c5a06facaaecc5315ba2efcacc3fc5cce7db51e86c326bac6cc7508c"}, {0xf8, 0x10e, 0x3, "0ab72caff87e1f95bec39041236212c7ca669081837e0bef1ed19c4ee2b4ea53bc93c10eb4d6284a45055bff095cc88e48a4fca3ccd83cb3e7f0ffc696537a688f0b55224e01aa0e4e55b548cfbd1234ef5a89b0db86fa4547c30aa3cfa8633149cfd281befbea29fc58b788cda7acde4f1d6454d7502f1cd8b3b16fd79c8b90a4d6b84364c7dcd19a474670d4efe4bee99a75258026f8d8b2a10f50ec9cbbc29a2f2cafeaa1e771b7991b4c1da624d4c7d5241eb5de797bc6a406f264ccbe196afac77f2603875bc25eac0b7c8aca5573a8411d9e872579b5d62514eebe8976fd466e69"}], 0x1e0}, 0xc800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20001100}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) 8.395619023s ago: executing program 3 (id=2679): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="0500000000000000b3102b4738de1ab94f68f4fe568df3ab1658a271321f52d4fd7a4b0c6ce4da5d59fd07668e0b22bf1e4477cbc18617118d3ca9c7b9f72a7fba73cfaffb9bea4ba590c717b6afef85d1029e4e8e6606b443596a1d2b0b40", 0x5f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, 0x0) 8.228092427s ago: executing program 3 (id=2681): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usbip_server_init(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x60600) setreuid(0xee01, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x445, 0x4800003e, r2, 0x0) msgget$private(0x0, 0x428) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000100)=[0x0]) prctl$PR_SET_MM_AUXV(0x2f, 0xc, &(0x7f0000000540), 0x0) pread64(r4, &(0x7f00000000c0)=""/206, 0xce, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xffffffffffffffff}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x0, 0x24}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x200}}]}, 0x184}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x40}}, 0x0) 6.57789699s ago: executing program 1 (id=2685): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2279, &(0x7f0000000000)) 6.382288002s ago: executing program 1 (id=2686): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="99f047e5bd22d78ba29ade00ff4588bfdc3dc3205baaf8f009cdb910590f6127b38c11165ba529e76dd3e8433e3194969e92abbfe173282a4512ef7cfa394c5b66d884e99dae87b1ae6e2ac8e310955a85d8289436926a971a40dd748803a0b850db9bc838f253640c7f58fe190405dfd34dd5d641d700000000000000"], 0x118) 6.365425766s ago: executing program 3 (id=2687): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a00edff0040000109022400010000000009040000000300a221000000012200000905810300000000000000"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001000000000000000850000001500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000185100000600000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x806, 0x20) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x74, 0xfc, 0xfffff4c1, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x8000, 0x8000, 0x3ff, 0xffffffff}}) fcntl$setpipe(r6, 0x407, 0x0) 6.200314019s ago: executing program 1 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9}], 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r6, &(0x7f000000a300)={0x2020}, 0x204c) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x5df) preadv2(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000012400)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x1ff, 0x9, 0x6ffd, 0x9, 0x8}}}}, 0x17) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000100100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fd"], 0x48}, 0x2}, 0x0) io_setup(0x8, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0xbc, 0x6b, 0x20, 0x13b1, 0x42, 0x496b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x5, 0x5a}}]}}]}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x800000) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000700)={0xb3, 0x2, 0x6, "3052841b23c6f3e4b4b47b3205d25d79045c637ec41cdfd3fa7135bcebb3b1a386add92fc0f5e631a346d5abe973d290171ece01e298306af7d52992bbabf07c0d8debf3bba3fc3a639e688644e80a63bde40e46bf899f0befa934997dbc88704eaed15609d08feec42a59f2e14fe2072c7fe83781b819d0cef2c3e436fa247500504b56ea39d1df955fe851bf8622c8be0cf0fdb59b120645670f930bbc12c4f1e454ee694a11a78b9a5bde3bdd34b51bcdf2"}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6092c75c, 0xd10, 0x0, 0x542, 0x1, 0x0, '\x00', r2, r8, 0x1, 0x0, 0x3, 0x5}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.337138264s ago: executing program 0 (id=2691): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="0500000000000000b3102b4738de1ab94f68f4fe568df3ab1658a271321f52d4fd7a4b0c6ce4da5d59fd07668e0b22bf1e4477cbc18617118d3ca9c7b9f72a7fba73cfaffb9bea4ba590c717b6afef85d1029e4e8e6606b443596a1d2b0b40", 0x5f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, 0x0) 4.169039989s ago: executing program 0 (id=2692): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000533fa0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) 3.969811089s ago: executing program 4 (id=2693): r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = epoll_create(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001cc0)={0x30000014}) epoll_pwait2(r1, &(0x7f0000006000)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioprio_set$pid(0x0, r3, 0x6003) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000009900)=""/102400, 0x19000}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/201, 0xc9}], 0x4, 0x0, 0x102) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000300)="4da866df7285aacc8824130db40b42bb9da94ecd566bb681a66e59ff4f2b4049cd36316192a68b997e4b6b13e5f622e12cb36f067bc1d990e98a97d2569fc8e3753133e7625b2534857b687249b52813cfe712c9475bcfb1ab5a47599bf37006e817470bb7a8054659caf767d89038d0d00000ac432990846c6c7270b79d0fc8f40bfb7bc7f1bbcdf8bd45d55a4ca20a131972544af68ade9501200a649d8b8343acc39f76164e15e6a41acb4010f984226bd4b51efefd07659382fa88868e87d47705aa1f0549bba1a870ab99975a967db21b2c134ec8b4dd8e8d65de1c9fc7766158a4faf209a395d123b0b049010b9d015c293ed3c6a0ee7450c35dfcacbc") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = io_uring_setup(0x3eae, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x200, 0x0, 0x0, 0x0, r4}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r7) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) 3.770426001s ago: executing program 0 (id=2695): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/203) syz_emit_ethernet(0xd0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, [0xa0c, 0xa38, 0x7b4, 0xc53]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) eventfd2(0x7, 0x1) unshare(0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x121881, 0x0) pwritev(r3, &(0x7f00000006c0)=[{&(0x7f0000000480)="b6d283c6b925a557779bb09e0242fdee4a4af9db02eaf356d8f2fa6047eb3e383a723522f4d3f276c93de04e614c294237be3e34422f77575b9ad31a8132d5ab5116a54ca25a3a0e6232556317a5326d5f1e69ff4681b3cdaf27ede7340089314d0e8be7a37d59c480b1ce0fd6c5d6af7cdac574ff8f17af2f35fa1bdcf6f7f70012a1895bc062c37eb919440f3dbdbb31df46cd5591dd5af8848f4f35ea389a4bea151981d28fbef56b91b03afb53c23c54f3b09e43b0741883fd843f525f29da06bb324ccb93dd6a328b640ab0689e72cdce9fa97b51b8f2d9fc01336014923fb099e58fe73b02cc", 0xe9}, {&(0x7f0000000580)="16e65214a7466bc4350f542b7ee451d36aac5bba2a045e06974b5b55fed06b960289086b17db5a608188b7699987f5be17b7ad621d5f1d34dd47c05fa746c4ab522d9f4960cf387095fba170e72ee0e7bd0cf7ebbcd0ba901b174f2c8de0fd2d4d39fdccbf88ece2def636e2063b5b3442b181a5522298c4ede3c82282", 0x7d}, {&(0x7f0000000600)="dd1f26e3326352b99e6ef1437baed11b492b7c246e65bd76cf6cf6190001b5919d4ac972719cb655ca953bc6747432424f9cdc6a3e8831d257a93e12f91294b0356f77cd1396b0c4aff35e4320dba5850c09469d677e6382a1f85f0b70286a97495d7e0de09b2c85c53cbff3ad6f3d24623f87f5c4", 0x75}, {&(0x7f00000002c0)="c3b401f5870fd59935e06cd659e48c85", 0x10}], 0x4, 0xf1e, 0x62f) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r5, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x7041, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fb9b242fa6a73b1", 0xe, 0xfffffffffffffffe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 3.554501766s ago: executing program 2 (id=2697): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) semget$private(0x0, 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) sendmmsg$inet_sctp(r0, &(0x7f0000004400)=[{&(0x7f0000002540)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002580)='D', 0x1}], 0x1, &(0x7f0000002880)=ANY=[@ANYBLOB="20000000000000008400000002000000200040"], 0x20}], 0x1, 0x0) unshare(0xc000200) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.349446778s ago: executing program 2 (id=2698): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="99f047e5bd22d78ba29ade00ff4588bfdc3dc3205baaf8f009cdb910590f6127b38c11165ba529e76dd3e8433e3194969e92abbfe173282a4512ef7cfa394c5b66d884e99dae87b1ae6e2ac8e310955a85d8289436926a971a40dd748803a0b850db9bc838f253640c7f58fe190405dfd34dd5d641d700000000000000"], 0x118) 3.118154164s ago: executing program 2 (id=2699): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x282800, 0x40) pselect6(0x40, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0x0, 0x0) 3.117664275s ago: executing program 4 (id=2700): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 3.00906575s ago: executing program 2 (id=2701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000080)=0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r3, 0x6, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f00000010c0)=0x5, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 2.977128512s ago: executing program 4 (id=2702): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="0500000000000000b3102b4738de1ab94f68f4fe568df3ab1658a271321f52d4fd7a4b0c6ce4da5d59fd07668e0b22bf1e4477cbc18617118d3ca9c7b9f72a7fba73cfaffb9bea4ba590c717b6afef85d1029e4e8e6606b443596a1d2b0b40", 0x5f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, 0x0) 2.949850164s ago: executing program 3 (id=2703): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001000)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7ffffffb, 0x22d01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)="1dc64cfcb41b377cd8c12f9635f05f2c7683a7ee21c28f995f7478", 0x1b}, {&(0x7f00000004c0)="64e95fcac300323cdbdf51dc058489d0cc68c8cc65381c61b4f1ea0f208c7361b53e5f3f79b4664904009198c4a60a46db55b6f8f4e6b4831311603eaa76dcdf4098892bcd465cca9a6ba0", 0x4b}, {&(0x7f0000000540)="750d0236e1e4fa4ce047a4c1b9a11a684c1447e2b7cdd5442f8f878699d78d71daa5d73a4962d4c415d905c617d488b51bafec6980642bcff8370df648943ab0f206e859b1f5ce1bea7b7f18733fc1b9306230746275432553a301", 0x5b}, {&(0x7f0000000740)="5b9b6d913492971bb2bf3d17f021fed34320328ea7342c15f0023a474661a8e062520a3ca627a40e237e459fcc56504d2f490bc542fac64d3706978f8d0c804af1570eea6d63147cc95b39b2e2cfcf85059e8e9e70f95bcb9a2b7a0203110a6dc8276efe3e7604f155d94c807c7a6d12222bd0b76532693f5b72d011ccd9b099d7706ffe464c4bb24f379943d609a3ac845e6bc6e6837e118d7d60a456afe6daef012edbbb92cb3693c689ab15aee4df94d6f3107ef88e45308ec0722a4e05779156134655c023089643", 0xca}, {&(0x7f00000005c0)="9ba89aa235e9b484ae5e4389de377586cd7d69c68d7457ce02a6fea82fd9399868caf665ede2eaaf1173946614494ed885d18f3f75013fb32d9c63d3fd0dfc323fb0c8fa2951f5", 0x47}, {&(0x7f0000000840)}, {&(0x7f0000000900)="85b5ff9cbdfc8dff12e2346d41ac7bc40a3aa753293e624b87e60b27dfa36cb4f0582d734505f973a53855fd52dbfbe42191f56ee0465ced0f9226ecf78c8a48226bfb72a8028c9483cc163d39d5ce282f792ca40d247501eaec7aa56ccce555f25e75b6755400f2da9754c2541b9b75313a87a54a4d26ca2a1d4bc292c924df579b323d512861c6c4f95b9427c961f8105795c0f1a25398d27a8535714529b8869f3e2998f400d946ed530c9bcb24cfef08a1ee223d87637368cbdbf00a4dd568f0af8a602fa86ed4", 0xc9}, {&(0x7f0000000a00)="8137b4d60c2ee0dcf2e8b635a08e34d072d159bfc44e28a1517ab243014722ec8767288b09ca0bb268834780dff879ad1534d40cf3e18620654e5dbc4e14ae35967302ff15d0684fd4563f6408b68fb8cbac726247884b35d089e3b8fa6ec1fb280d7f2846bc8ec13aceb10f218a18e9d345eb7addb0d625fca1b8863b1509b7430bd2df09457391b5a314de302b66b872238a52d78dbcb682459a", 0x9b}, {&(0x7f0000000680)="554133e124b358995d1ee54e8e985ba48dbab037064a87a5ceedba939cfe50fcac8b379409d80df3ff063b5f25940574c156bd79be91c2dfa0a45cedc6283eee31356adace06ca104699f27dd74e99ce917ca128a2ac61c63704996d4f326f744165", 0x62}, {&(0x7f0000000ac0)="260137ff0dc7016b46b574511a5f45189a9931e792df476b8323cce7fde5e25ae35ff6b7ab90e4d4af2f8d1dd46d039bff9f5efe8b9f", 0x36}], 0xa, &(0x7f0000000e00)=[{0xe8, 0xff, 0x7, "8ad273197765bf4fae4ce40f79206d1eceba2576a04442a34cc5883d333c76ac737c077a0664c1a2a45471ec151d9a993c0dbcfcd4589409e2318d43a327c06499a765eee7948c7ee0e5f4e49022e2db8f35e59f95140c850ca223dfc234d1b0a1df95ac1b27db7c13af341680ac9177e8a317c2dd2b430865a808c7f4a8601cb2fb2b8ca1ee0aee83adc9d1eeb115b8949e01502fc1653fc6bcedf26fb1e6ed91e6983c9ed4e6e86b8151bf387950ba36d42ec27f4422c5a06facaaecc5315ba2efcacc3fc5cce7db51e86c326bac6cc7508c"}, {0xf8, 0x10e, 0x3, "0ab72caff87e1f95bec39041236212c7ca669081837e0bef1ed19c4ee2b4ea53bc93c10eb4d6284a45055bff095cc88e48a4fca3ccd83cb3e7f0ffc696537a688f0b55224e01aa0e4e55b548cfbd1234ef5a89b0db86fa4547c30aa3cfa8633149cfd281befbea29fc58b788cda7acde4f1d6454d7502f1cd8b3b16fd79c8b90a4d6b84364c7dcd19a474670d4efe4bee99a75258026f8d8b2a10f50ec9cbbc29a2f2cafeaa1e771b7991b4c1da624d4c7d5241eb5de797bc6a406f264ccbe196afac77f2603875bc25eac0b7c8aca5573a8411d9e872579b5d62514eebe8976fd466e69"}], 0x1e0}, 0xc800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20001100}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) 2.862025267s ago: executing program 1 (id=2704): ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TCSBRK(r0, 0x5409, 0x2195) (async) r1 = timerfd_create(0x0, 0x80000) r2 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) (rerun: 32) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='\\^\':})-$}\x00', 0x0, r3) (async) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0x1}, 0xfd}, 0x18) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000140)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "fe7d13f473cc86"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001140)={{r4, 0xcd, 0x80000000, 0x93, 0x1dc1, 0x9, 0x5, 0x1, 0x5, 0x1, 0x477e, 0x0, 0x5, 0x5, 0x3}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001200)={0xc}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x3}) (async) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000001280)) (async) r5 = userfaultfd(0x800) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000012c0)={0x100d, r3}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001340)={0x4, &(0x7f0000001300)=[{0x8, 0xf, 0xa, 0xff}, {0x1, 0x3, 0x3, 0x7fff}, {0x9b4b, 0xe4, 0x6, 0x5}, {0x6, 0x6, 0xc, 0x3}]}, 0x10) (async) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x1cf) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) (async, rerun: 32) r6 = syz_open_dev$mouse(&(0x7f0000001380), 0x0, 0xc0000) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0xa0a59418e678b5fb}, 0x0) (async) sendmsg$inet(r6, &(0x7f00000019c0)={&(0x7f0000001540)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001580)="68fa3d9963722be483b545112b42cca16dcf0b", 0x13}, {&(0x7f00000015c0)="f55fcf64ba0d3026957549316e4b5f122a11e54b5fa4c9fa2a3a2781b33117bdc76c757b5ac32ef773287d72f879d38777c6ada7ef38e2f421d230baea27bce2f9045f63e155472ffb3b0851f39a36fa0f71b639bc638adce3e9827c5316455d90aa213e25c5277d6fbdb2b9a2e2c7f8b42c800780a0923248be5938be195a8c4c050f438b9662f3867772ba1688a9136d26a7b5d6363d4e96524d2b63b0291ccb462b06e5ef8d38af51e2bcf40bc3ce1502f6fb6e244aba9670665f7541e580104f0f2c8cbb0ba7a0b7958e77b0da1cfba1eb2f577214bda4a7959c32c1235560fc466e7446cbc9dbbd075a1a", 0xed}, {&(0x7f00000016c0)="cf41e70ea4d91426443811a97bea9dda55079b9cb76d6a4df6f930e4f76ffad74b177bf43593e3f8caf88b450d43f6f6ad779524546b002a7be5dc8d80cedfbf55c8ad071586ce8d7293e734e6bc93b4b294ea", 0x53}, {&(0x7f0000001740)="d4b58d53d70d4622254e499a66983bd0", 0x10}, {&(0x7f0000001780)="d4214caf5b98e93f0483510df544aa771e63aa043de62675be3bd342e8679ce95bae678bee8be4b25e83e4258f1c123239510b1e30f9606e9cf2f0bd34bc68e4f2", 0x41}, {&(0x7f0000001800)="dbbf1518db7d79deb849a16ebd8daa2fd2613ea3c0bfd2c2fe8b5b58e0878ee34fc44381a5727271cd8986a87d7c09bca41ceecb9a34d2c5fa65d2441f79ea7c0b890fb43f168f229cc3bc50521f400d46e04e7adfcb486e79feb1d9e7", 0x5d}, {&(0x7f0000001880)="6f389b108a72a11956fe8d20eb7eb42ae82ad334f341aaf31a021799a953c30bcb88ac28ae4e2c9a1f04535d310b24ab76f5ce5020ae362e65f8260529251796c4daa1f94850cc9085c8aea0da8e24cd492fbe9935492fdfc752a157fa23e37013101a", 0x63}], 0x7, &(0x7f0000001980)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd8}}], 0x18}, 0x81) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001a00)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000001ac0)=0x84) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001b00), 0x408002, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40408c4}, 0x0) (async, rerun: 64) ioctl$NBD_CLEAR_QUE(r3, 0xab05) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001c40)={0x7fff, 0x1, 0x7, 0x8, 0x9, [{0x7, 0xe09, 0x3, '\x00', 0x500}, {0x84f, 0x3ff, 0x5, '\x00', 0x4}, {0x4, 0x7, 0x3, '\x00', 0x2284}, {0x8, 0x2, 0x8, '\x00', 0x1a86}, {0x8, 0x10, 0x6, '\x00', 0x600}, {0x5, 0x0, 0x9, '\x00', 0x1}, {0x0, 0x9, 0x10000, '\x00', 0x4}, {0xe37d, 0xffffffff, 0x7, '\x00', 0xa86}, {0x100000001, 0x5, 0x200, '\x00', 0x1000}]}) (async, rerun: 32) r8 = syz_open_dev$loop(&(0x7f0000001e80), 0x7, 0x202800) (rerun: 32) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000001ec0)=0xab3) (async) io_uring_enter(r3, 0x7daf, 0xc57d, 0x19, &(0x7f0000001f00)={[0x6]}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001f40)={r7, 0x5, 0x6, [0x3, 0x5, 0xfe5d, 0xf, 0xe431, 0x0]}, 0x14) 2.790190957s ago: executing program 4 (id=2705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000533fa0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) 2.608196218s ago: executing program 1 (id=2706): syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "198b5609c237618839458e3dca5dd9b8"}}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x7, 0x0, 0x7, 0x0, 0xfff, 0x4, 0x1}}, {0x6, 0x2, [0xff]}}, {{0x1c, 0x1, {0x5, 0x10, 0x3, 0x2, 0x2, 0x9, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0xb4}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000240)={{}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x200}) 2.607479916s ago: executing program 3 (id=2707): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a00edff0040000109022400010000000009040000000300a221000000012200000905810300000000000000"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001000000000000000850000001500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000185100000600000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x806, 0x20) pipe2(&(0x7f00000005c0), 0x0) getpgid(0xffffffffffffffff) 2.591855785s ago: executing program 4 (id=2708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9}], 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r6, &(0x7f000000a300)={0x2020}, 0x204c) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x5df) preadv2(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000012400)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x1ff, 0x9, 0x6ffd, 0x9, 0x8}}}}, 0x17) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000100100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fd"], 0x48}, 0x2}, 0x0) io_setup(0x8, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x95, 0xbc, 0x6b, 0x20, 0x13b1, 0x42, 0x496b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcf, 0x5, 0x5a}}]}}]}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x9, 0x800000) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000700)={0xb3, 0x2, 0x6, "3052841b23c6f3e4b4b47b3205d25d79045c637ec41cdfd3fa7135bcebb3b1a386add92fc0f5e631a346d5abe973d290171ece01e298306af7d52992bbabf07c0d8debf3bba3fc3a639e688644e80a63bde40e46bf899f0befa934997dbc88704eaed15609d08feec42a59f2e14fe2072c7fe83781b819d0cef2c3e436fa247500504b56ea39d1df955fe851bf8622c8be0cf0fdb59b120645670f930bbc12c4f1e454ee694a11a78b9a5bde3bdd34b51bcdf2"}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6092c75c, 0xd10, 0x0, 0x542, 0x1, 0x0, '\x00', r2, r8, 0x1, 0x0, 0x3, 0x5}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.410088366s ago: executing program 1 (id=2709): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00000300070000007c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) r2 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x137d, &(0x7f0000001380)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "3712cb", 0x1343, 0x6, 0x0, @remote, @mcast1, {[@fragment={0x3a, 0x0, 0x8, 0x0, 0x0, 0x5, 0x66}, @hopopts={0x25, 0x26, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x2, 0xc5, "12c4cfd364d8ea5cf8b75cb166699e896296fddad9de65fdd17c8de3e8ab678d0e1be76b410bbf8ed9d95ab4182ecdddd8e9c9737571e5421ab8ed584f3810b6860fc0540ec4e347c6c0cdfce3d4852f3ed79148e81301dbd8624c3857d810d7aab7436b93e2fb5567ce334f1007d49cbc7f97f22b1c799c2f2a58ab8ac4822be0f61f4925f4f8ad48d05b2de2ad0f3edb190a35a2c449b762cf29d11c8a2b8fc210733cfd10dd8dc345c85a45f66829b23b4ef55025fe5b604f3eac9d880d90b92d7a3a59"}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x58, {0x2, 0x14, 0x2, 0x6, [0x5, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x29, 0x2, 0x2, 0x0, 0x7fffffffffffffff, 0x8]}}]}, @routing={0x29, 0x6, 0x2, 0x10, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x0, 0x4, 0x4, 0x2, 0xf6, 0x8, 0xd, [@private1, @dev={0xfe, 0x80, '\x00', 0x11}]}, @fragment={0x2, 0x0, 0xb7, 0x1, 0x0, 0x3, 0x66}, @dstopts={0x32, 0x210, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x1ff, [0xfffffffffffffff7, 0x9, 0x2]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7, 0x1, [0x3, 0x1, 0x401, 0x9, 0x5, 0x9, 0x9, 0x2, 0x9]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x1000, "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"}]}, @srh={0x84, 0x6, 0x4, 0x3, 0x3, 0x10, 0x10, [@local, @local, @mcast2]}, @routing={0x4, 0x2, 0x2, 0x7d, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x3c, 0x10, 0x2, 0x10, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x7}, @loopback]}, @fragment={0x64, 0x0, 0x3, 0x0, 0x0, 0xb, 0x65}], @payload_direct={{{{0x23, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x9, 0x0, 0x1, 0x4, 0x3, 0x3, 0x3ff, 0x6, 0x1, 0x4e24, 0x4e22}, 0x4, 0x3}}, [0x0, 0x0, 0x0]}}}}}}, &(0x7f00000002c0)={0x1, 0x2, [0x9ce, 0x1b5, 0xe4b, 0xe29]}) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x4, 0x5, '\x00', &(0x7f0000000040)=0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x7fff}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x79, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x4, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x13, 0x9, 0x65, 0x8, 0x4}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "e23aa971c1daf0d5a8858bb3334d5d20"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140c}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 2.019877965s ago: executing program 2 (id=2710): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x19) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3045f84d", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000000000000008002600b4090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000019680)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x347f8fb7498e978}, 0x400c0d0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 1.729005209s ago: executing program 0 (id=2711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 1.118195402s ago: executing program 0 (id=2712): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff0000, '\x00', 0x0, 0x0, 0x0, 0x3, 0x202}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000002000000400000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002030000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffb5ff11e090780000000062ea00000000000000000000fdb180122d8ac26525546b55d17eb8363198b8f0fdd84435a31c3a0d14a8ebd4eb7705a8b8d1937733b7dff8fb2098fc9c20484c06905b04ef877c30566c7b85e18d98164b3eb572a1c00def2641ab4c2b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x10000001}) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1}, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) fanotify_init(0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="2000e4ffffffffff0000020000000000410023100000000000000000", @ANYRES32=0x0], 0x20}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfcc8, 0x0, 0x0, 0x0, 0x5a}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @map_idx={0x18, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x0, 0x0, 0xb, 0xffffffffffffff64, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0xb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x101}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcdca}}]}, &(0x7f0000000400)='GPL\x00', 0x8000, 0x0, &(0x7f0000000440), 0x41100, 0x20, '\x00', 0x0, 0x18, r2, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x5, 0x4}, 0x10, 0x1e188, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff], 0x0, 0x10, 0x700}, 0x90) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000680)="c73c5c94000e742185684da6758afd762c15b2e93c8fdfb382ccaa2a76e4bd8f2f6ae7e2455edf9516ed401535ee4925f49c7da7dd5ffc27cb74b4fffa26a7a60445c578514514a1097818bc4a18b410e253a46a9f03555d06ab78dd048af9ef0f473865ce151d5de6cb5fdc1097f11e43f903a1658ad7c48fd344c2e6ee394d731a21044c79fb0700ec6ba15fc5ac17a2ad0f9a99bd6eb46a8dca0d996f", 0x9e}, {&(0x7f0000000500)="716380d8455747ceae7b9f161e5e05d8a493eeb60f477567f33402e1b6051cd3c5b13f29ac4660c7b9c100b1ba09ea74edbc5a9cd8630fa68562b8624d5a4b1a812f4c3a3ae3474fcf5016fc353d29802f", 0x51}, {&(0x7f00000008c0)="8d45fdef0b04c664b9171971720e35c62adf510a4ad3bb68cbd8c00f11385dcf5544ba82ad7b94a93e4f0900000000000000f48079947bbec5034c15be5dd2b3d174d8105c66040830c639f0fccf512af3a5fc3061a34fd63c054b3447cebc1d85669129d3524738ff01fcc40fb47653fd07e9a5acea8ef717f92325af05e5e48900549394414c6772cbbea2e082530b725fb002c29329b584a8a541f957af9f86f42bb6296ebff1b45b11c47ef1c6ed1fa7b6d6d7b928d4134d92de7bc6a56220289df1d652d2d9da419dc41b3febc519bcefb51ce1d8106e3eefaa88a8f10800"/244, 0xf4}], 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x5100, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 882.948432ms ago: executing program 2 (id=2713): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a00edff0040000109022400010000000009040000000300a221000000012200000905810300000000000000"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001000000000000000850000001500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000185100000600000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x806, 0x20) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x74, 0xfc, 0xfffff4c1, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x8000, 0x8000, 0x3ff, 0xffffffff}}) fcntl$setpipe(r6, 0x407, 0x0) 632.487972ms ago: executing program 4 (id=2714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a00edff0040000109022400010000000009040000000300a221000000012200000905810300000000000000"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001000000000000000850000001500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000185100000600000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6(0xa, 0x806, 0x20) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x74, 0xfc, 0xfffff4c1, 0x2, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x8000, 0x8000, 0x3ff, 0xffffffff}}) fcntl$setpipe(r6, 0x407, 0x0) 0s ago: executing program 0 (id=2715): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x200, "2224644c23084eadc0dcad06a4954896fb9f2e1cec96d4200f583153efe8f343"}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0x75, &(0x7f0000000280)="d104e81d6f5c178e7e5876b8e35e59f1f333f835ea07fb8d0d55f284cba654d3202fc5c3c824eb9c60761815dece9aa8a06a9674b1c59975d1c547d2d0d0cce4e16c4a9ebf14f7e0fdb5cf39cfd98a31e24f3a60d3719b883b74d87cd7c6fa8fc22daab2f24137d484b3e546848bc616f2e5a4f707", 0x7f, 0x0, &(0x7f0000000300)="0cfc22d60a66ae7f349c4f6873f281108618c1c7a01dce09e3e55525e287135b1ff89c547cb1ed3515778e09505597a257491d4f84fe397b07f291f4149f086c9425d327a66a86a3fb6b4bfd89f1c5778195c03a9ea10d7f2dc30991d5c3edb64795f87e9d7b2830ebbce569d4db00b41069602590beeec77471ac09b081bc"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x6, "03aea2e9dd8227baf6c1a8a4de52bc9539d84ff109710109340406f51cb9e552"}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000200)={0x5, 0x2}) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) kernel console output (not intermixed with test programs): alNumber=0 [ 667.783424][ T784] usb 5-1: SerialNumber: ࡡ [ 667.799212][ T5158] hub 1-1:4.0: USB hub found [ 667.815327][ T5104] usb 3-1: unable to get BOS descriptor or descriptor too short [ 667.824653][ T5104] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 667.855605][ T5104] usb 3-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 667.864926][ T5104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.873174][ T5104] usb 3-1: Manufacturer: 鞶蓁₏핂㭜㗏砧퐛ᓐ䷚ৈ㽖儋浭憀蚖퐔箠霙㇩ꙵ떮門䴽줾⤆⁖养䤛쩠놄ᕭ슻ꅾ딃燥Ɡ맸 [ 667.888959][ T5104] usb 3-1: SerialNumber: ࡡ [ 668.007900][ T5158] hub 1-1:4.0: 2 ports detected [ 668.020396][T14661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.040720][T14661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.066840][ T784] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 668.077885][ T784] usb 5-1: USB disconnect, device number 105 [ 668.101738][T10448] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 668.137803][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.150021][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.203921][ T5104] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 668.211824][ T5158] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 668.229484][ T5104] usb 3-1: USB disconnect, device number 96 [ 668.236087][ T5158] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 668.294700][ T5158] usb 1-1: USB disconnect, device number 118 [ 668.313915][T10448] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 668.375462][T10448] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 668.415886][T14672] sctp: [Deprecated]: syz.3.2227 (pid 14672) Use of int in max_burst socket option deprecated. [ 668.415886][T14672] Use struct sctp_assoc_value instead [ 668.432001][T10448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.457346][T10448] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 668.469340][T10448] usb 2-1: No valid video chain found. [ 668.681039][ T5156] usb 2-1: USB disconnect, device number 94 [ 668.847271][ T8] vhci_hcd: vhci_device speed not set [ 668.893844][T10448] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 669.091239][T10448] usb 4-1: Using ep0 maxpacket: 32 [ 669.115486][T10448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.138025][T10448] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 669.175936][T10448] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 669.202243][T10448] usb 4-1: Product: syz [ 669.232192][T10448] usb 4-1: config 0 descriptor?? [ 669.373443][T14685] sctp: [Deprecated]: syz.2.2230 (pid 14685) Use of int in max_burst socket option deprecated. [ 669.373443][T14685] Use struct sctp_assoc_value instead [ 669.701212][ T5104] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 669.912478][ T5104] usb 5-1: Using ep0 maxpacket: 16 [ 669.944921][ T5104] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 669.970574][ T5104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.022368][ T5104] usb 5-1: Product: syz [ 670.047669][ T5104] usb 5-1: Manufacturer: syz [ 670.066631][ T5104] usb 5-1: SerialNumber: syz [ 670.095474][ T5104] usb 5-1: config 0 descriptor?? [ 670.129296][ T5104] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 670.329440][ T5104] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 670.673909][T14701] sctp: [Deprecated]: syz.1.2235 (pid 14701) Use of int in max_burst socket option deprecated. [ 670.673909][T14701] Use struct sctp_assoc_value instead [ 671.237108][T14689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.240580][T10448] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 671.288791][T10448] usb 4-1: USB disconnect, device number 122 [ 671.294301][T14689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.404449][ T5104] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 671.601278][ T5158] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 671.642011][ T5104] usb 2-1: Using ep0 maxpacket: 32 [ 671.670396][ T5104] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.714000][ T5104] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 671.740658][ T5104] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 671.784082][ T5104] usb 2-1: Product: syz [ 671.814808][ T5158] usb 1-1: unable to get BOS descriptor or descriptor too short [ 671.828633][ T5104] usb 2-1: config 0 descriptor?? [ 671.842382][ T5158] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 671.884840][ T5158] usb 1-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 671.906733][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.919259][ T5158] usb 1-1: Manufacturer: 鞶蓁₏핂㭜㗏砧퐛ᓐ䷚ৈ㽖儋浭憀蚖퐔箠霙㇩ꙵ떮門䴽줾⤆⁖养䤛쩠놄ᕭ슻ꅾ딃燥Ɡ맸 [ 671.934818][ T5158] usb 1-1: SerialNumber: ࡡ [ 672.185419][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.198559][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.235730][ T5158] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 672.274144][ T5158] usb 1-1: USB disconnect, device number 119 [ 672.513580][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 672.636374][ T5158] usb 5-1: USB disconnect, device number 106 [ 672.816519][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 673.382862][ T5104] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 673.426337][ T5104] usb 2-1: USB disconnect, device number 95 [ 674.256858][T14771] sctp: [Deprecated]: syz.1.2254 (pid 14771) Use of int in max_burst socket option deprecated. [ 674.256858][T14771] Use struct sctp_assoc_value instead [ 674.411334][ T8] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 674.456802][ T29] audit: type=1400 audit(1721128739.368:415): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=14778 comm="syz.0.2258" [ 674.552115][ T929] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 674.633599][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 674.655788][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 674.672213][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.683596][ T8] usb 4-1: Product: syz [ 674.689166][ T8] usb 4-1: Manufacturer: syz [ 674.699561][ T5156] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 674.717592][ T8] usb 4-1: SerialNumber: syz [ 674.747299][ T8] usb 4-1: config 0 descriptor?? [ 674.765259][ T929] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 674.765294][ T8] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 674.782038][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.837492][ T929] usb 5-1: config 0 descriptor?? [ 674.905327][ T5104] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 674.921681][ T5156] usb 2-1: Using ep0 maxpacket: 32 [ 674.939753][ T5156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.949187][T14788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.991945][ T8] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 675.009388][ T5156] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 675.037360][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 675.050682][T14789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.051669][ T5156] usb 2-1: Product: syz [ 675.103577][ T5104] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.122577][ T5156] usb 2-1: config 0 descriptor?? [ 675.147726][T14788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 675.162960][ T5104] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 675.175240][ T5104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.186417][ T5104] usb 3-1: Product: Э [ 675.190587][ T5104] usb 3-1: Manufacturer: 藝劸덐 [ 675.191863][T14789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.215208][ T5104] usb 3-1: SerialNumber: syz [ 675.374141][ T929] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 675.418603][ T929] usb 5-1: USB disconnect, device number 107 [ 675.769218][ T5104] usbhid 3-1:1.0: can't add hid device: -71 [ 675.784310][ T5104] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 675.797312][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.817459][ T5104] usb 3-1: USB disconnect, device number 97 [ 675.824063][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.801410][T13877] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 676.996920][ T5156] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 677.002544][T13877] usb 3-1: Using ep0 maxpacket: 32 [ 677.033585][T13877] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 677.056749][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.089690][ T5156] usb 2-1: USB disconnect, device number 96 [ 677.118568][T13877] usb 3-1: config 0 descriptor?? [ 677.226394][T13877] ath10k_warn: 6 callbacks suppressed [ 677.229892][T13877] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 677.260594][T10448] usb 4-1: USB disconnect, device number 123 [ 677.532935][T13877] usb 3-1: USB disconnect, device number 98 [ 677.560320][ T2404] usb 3-1: Failed to submit usb control message: -71 [ 677.587161][ T2404] usb 3-1: unable to send the bmi data to the device: -71 [ 677.607591][ T2404] usb 3-1: unable to get target info from device [ 677.624051][ T2404] usb 3-1: could not get target info (-71) [ 677.640264][ T2404] usb 3-1: could not probe fw (-71) [ 677.676036][T14831] ======================================================= [ 677.676036][T14831] WARNING: The mand mount option has been deprecated and [ 677.676036][T14831] and is ignored by this kernel. Remove the mand [ 677.676036][T14831] option from the mount to silence this warning. [ 677.676036][T14831] ======================================================= [ 677.710999][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.780508][T14833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.940897][T14833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.967959][T14833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2273'. [ 678.004831][T14833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.202810][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 678.271185][T10448] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 678.331323][ T8] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 678.341638][T14841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.471485][T10448] usb 1-1: Using ep0 maxpacket: 32 [ 678.481275][T10448] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 678.490736][T10448] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 678.507435][T10448] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.526476][T10448] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 678.541955][T10448] usb 1-1: config 1 has no interface number 0 [ 678.548441][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 678.559892][T10448] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 678.571064][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.589648][T10448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.614105][ T8] usb 5-1: config 0 descriptor?? [ 678.653660][T10448] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 678.798913][ T4494] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 678.850565][T10448] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 678.865465][T10448] snd_usb_pod 1-1:1.1: invalid control EP [ 678.881840][T10448] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 678.888730][T10448] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 678.900683][T10448] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 679.061293][ T5104] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 679.120142][ T8] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 679.169515][ T8] usb 5-1: USB disconnect, device number 108 [ 679.282610][ T5104] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 679.302182][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.349654][ T5104] usb 4-1: config 0 descriptor?? [ 679.837540][T14847] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 679.876441][T14847] PKCS7: Only support pkcs7_signedData type [ 679.911391][ T5104] hackrf 4-1:0.0: Board ID: 00 [ 679.916234][ T5104] hackrf 4-1:0.0: Firmware version: [ 679.939762][ T5104] hackrf 4-1:0.0: Registered as swradio16 [ 679.971466][ T5104] hackrf 4-1:0.0: Registered as swradio17 [ 680.010506][ T5104] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 680.172534][ T929] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 680.299622][ T8] usb 4-1: USB disconnect, device number 124 [ 680.401814][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 680.431724][ T929] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 680.466124][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.493037][ T929] usb 3-1: Product: syz [ 680.505182][ T929] usb 3-1: Manufacturer: syz [ 680.514695][ T929] usb 3-1: SerialNumber: syz [ 680.532809][ T929] usb 3-1: config 0 descriptor?? [ 680.562166][ T929] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 680.761036][ T929] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 681.429370][ T5156] usb 1-1: USB disconnect, device number 120 [ 681.535211][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.592186][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.990086][T14883] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 682.008697][T14883] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 682.032576][T14883] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 682.051542][T14883] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 682.081901][T14883] netlink: 'syz.1.2284': attribute type 29 has an invalid length. [ 682.168996][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.358438][T14891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.440746][T14891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.481731][T14891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2289'. [ 682.519947][T14891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.755806][T14899] sctp: [Deprecated]: syz.0.2291 (pid 14899) Use of int in max_burst socket option deprecated. [ 682.755806][T14899] Use struct sctp_assoc_value instead [ 682.786804][ T8] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 682.814666][ T5156] usb 3-1: USB disconnect, device number 99 [ 682.845451][ T4494] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 682.856287][ T4494] Bluetooth: hci1: Injecting HCI hardware error event [ 682.865671][ T4494] Bluetooth: hci1: hardware error 0x00 [ 682.993231][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 683.002627][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.017555][ T8] usb 4-1: config 0 descriptor?? [ 683.381327][T13877] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 683.430534][T14895] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 683.439492][T14895] PKCS7: Only support pkcs7_signedData type [ 683.458449][ T8] hackrf 4-1:0.0: Board ID: 00 [ 683.466025][ T8] hackrf 4-1:0.0: Firmware version: [ 683.472176][ T5156] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 683.508566][ T8] hackrf 4-1:0.0: Registered as swradio16 [ 683.537625][ T8] hackrf 4-1:0.0: Registered as swradio17 [ 683.545517][ T8] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 683.581213][T13877] usb 1-1: Using ep0 maxpacket: 32 [ 683.591223][T10448] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 683.669858][T13877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.691555][ T5156] usb 3-1: Using ep0 maxpacket: 32 [ 683.692377][T13877] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 683.720703][ T5156] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 225, changing to 11 [ 683.726226][T13877] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 683.733351][ T8] usb 4-1: USB disconnect, device number 125 [ 683.763413][ T5156] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25982, setting to 1024 [ 683.793102][T10448] usb 2-1: Using ep0 maxpacket: 32 [ 683.809251][T10448] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 683.821729][ T5156] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.837350][T13877] usb 1-1: Product: syz [ 683.837528][T10448] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 683.899420][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.900628][T13877] usb 1-1: config 0 descriptor?? [ 683.916990][T10448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.939978][T10448] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 683.957517][T14905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 683.978600][ T5156] hub 3-1:4.0: USB hub found [ 683.988022][T10448] usb 2-1: config 1 has no interface number 0 [ 683.996683][T10448] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 684.015248][T10448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.078061][T10448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 684.133198][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 825 [ 684.274960][T10448] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 684.293363][T14920] input: syz0 as /devices/virtual/input/input47 [ 684.300773][ T5156] hub 3-1:4.0: 2 ports detected [ 684.317667][T10448] snd_usb_pod 2-1:1.1: invalid control EP [ 684.337473][T10448] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 684.365618][T10448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 684.402033][T10448] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 684.507232][ T5156] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 684.539679][ T5156] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 684.662210][ T5156] usb 3-1: USB disconnect, device number 100 [ 684.921863][ T4494] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 685.898932][T13877] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 685.930579][T13877] usb 1-1: USB disconnect, device number 121 [ 686.258254][ T29] audit: type=1804 audit(1721128751.158:416): pid=14944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2304" name="/" dev="pidfs" ino=15242 res=1 errno=0 [ 686.365289][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.371826][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.840137][ T29] audit: type=1400 audit(1721128751.748:417): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14955 comm="syz.0.2308" [ 687.068247][T13877] usb 2-1: USB disconnect, device number 97 [ 687.271278][ T929] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 687.464290][ T929] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 687.501334][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.535162][ T929] usb 1-1: config 0 descriptor?? [ 687.712454][T14964] input: syz0 as /devices/virtual/input/input48 [ 687.994086][T14959] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 688.009242][T14959] PKCS7: Only support pkcs7_signedData type [ 688.026673][T14987] unknown channel width for channel at 909000KHz? [ 688.033233][ T929] hackrf 1-1:0.0: Board ID: 00 [ 688.033262][ T929] hackrf 1-1:0.0: Firmware version: [ 688.051599][T13877] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 688.061757][ T929] hackrf 1-1:0.0: Registered as swradio16 [ 688.073881][ T929] hackrf 1-1:0.0: Registered as swradio17 [ 688.081836][ T929] hackrf 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 688.094108][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'. [ 688.243020][T13877] usb 4-1: Using ep0 maxpacket: 16 [ 688.275520][T13877] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 688.305287][T13877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.347085][ T5104] usb 1-1: USB disconnect, device number 122 [ 688.361256][T13877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.452926][T13877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 688.466736][T13877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 688.480028][T13877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.493446][T13877] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 688.508337][T13877] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 688.524902][T13877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.535485][T13877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 688.546697][T13877] usb 4-1: SerialNumber: syz [ 688.567350][T13877] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 688.835352][ T29] audit: type=1326 audit(1721128753.748:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.2.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf85b75bd9 code=0x7fc00000 [ 689.273323][T10448] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 689.487637][T10448] usb 2-1: Using ep0 maxpacket: 32 [ 689.505445][T10448] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 689.518343][T10448] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 689.528825][T10448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.549301][T10448] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 689.579860][T10448] usb 2-1: config 1 has no interface number 0 [ 689.589654][T10448] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 689.614915][T10448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.616313][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 689.684102][T10448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 689.849001][T10448] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 689.858053][T10448] snd_usb_pod 2-1:1.1: invalid control EP [ 689.873480][T10448] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 689.893179][T10448] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 689.907567][T10448] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 689.908648][T15013] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 689.922756][T15013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 689.983517][ T29] audit: type=1326 audit(1721128754.888:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf85b75bd9 code=0x7ffc0000 [ 689.987575][T15013] vhci_hcd vhci_hcd.0: Device attached [ 690.067001][ T29] audit: type=1326 audit(1721128754.898:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf85b75bd9 code=0x7ffc0000 [ 690.147375][ T29] audit: type=1326 audit(1721128754.938:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf85b74610 code=0x7ffc0000 [ 690.169339][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.181290][T13877] vhci_hcd: vhci_device speed not set [ 690.245908][ T29] audit: type=1326 audit(1721128754.938:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf85b757db code=0x7ffc0000 [ 690.267334][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.273633][T13877] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 690.395627][T10453] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 690.397823][ T29] audit: type=1326 audit(1721128754.938:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf85b757db code=0x7ffc0000 [ 690.489339][ T29] audit: type=1326 audit(1721128754.968:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf85b757db code=0x7ffc0000 [ 690.549181][ T29] audit: type=1326 audit(1721128755.008:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf85b757db code=0x7ffc0000 [ 690.616841][T10453] usb 3-1: Using ep0 maxpacket: 32 [ 690.643696][T10453] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 690.657082][T10453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.691014][T10453] usb 3-1: config 0 descriptor?? [ 690.724063][T10453] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 690.754256][T10453] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 690.770761][T10453] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 690.793435][ T5104] usb 4-1: USB disconnect, device number 126 [ 690.801276][ T929] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 690.927936][T15017] netlink: 8 bytes leftover after parsing attributes in process `'. [ 690.937249][T15014] vhci_hcd: connection reset by peer [ 690.957158][ T13] vhci_hcd: stop threads [ 690.968111][ T5158] usb 3-1: USB disconnect, device number 101 [ 690.977869][ T13] vhci_hcd: release socket [ 690.995227][ T13] vhci_hcd: disconnect device [ 691.011179][ T929] usb 1-1: Using ep0 maxpacket: 32 [ 691.018738][ T929] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10 [ 691.040673][ T929] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1178, setting to 1024 [ 691.074997][ T929] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 691.098932][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.123726][T15024] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 691.133803][ T929] hub 1-1:4.0: USB hub found [ 691.333437][ T929] hub 1-1:4.0: 2 ports detected [ 691.343118][ T929] hub 1-1:4.0: insufficient power available to use all downstream ports [ 691.534974][ T929] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 691.553916][ T929] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 691.603302][T15027] input: syz0 as /devices/virtual/input/input49 [ 691.623653][ T929] usb 1-1: USB disconnect, device number 123 [ 691.961853][T15038] x_tables: duplicate underflow at hook 2 [ 691.971311][T15034] team0: Device gtp0 is of different type [ 692.053258][T10453] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 692.167845][T15042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.313166][T10453] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.364869][T10453] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 692.381279][T10453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.399879][T10453] usb 3-1: Product: Э [ 692.409307][ T5158] usb 2-1: USB disconnect, device number 98 [ 692.410861][T10453] usb 3-1: Manufacturer: 藝劸덐 [ 692.427627][T10453] usb 3-1: SerialNumber: syz [ 692.560061][T15054] sctp: [Deprecated]: syz.3.2335 (pid 15054) Use of int in max_burst socket option deprecated. [ 692.560061][T15054] Use struct sctp_assoc_value instead [ 692.701275][T15059] sctp: [Deprecated]: syz.1.2336 (pid 15059) Use of int in max_burst socket option deprecated. [ 692.701275][T15059] Use struct sctp_assoc_value instead [ 692.891388][ T929] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 692.961020][T10453] usbhid 3-1:1.0: can't add hid device: -71 [ 692.986475][T10453] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 693.067689][T10453] usb 3-1: USB disconnect, device number 102 [ 693.102253][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 693.126201][ T929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.162019][ T929] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 693.173687][ T929] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 693.182638][ T929] usb 4-1: Product: syz [ 693.192317][ T929] usb 4-1: config 0 descriptor?? [ 693.281560][ T5104] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 693.301384][ T5158] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 693.502447][ T5104] usb 5-1: Using ep0 maxpacket: 32 [ 693.517720][ T5158] usb 2-1: Using ep0 maxpacket: 32 [ 693.532061][ T5104] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 693.561982][ T5158] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.575606][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.607963][ T5158] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 693.627128][ T5104] usb 5-1: config 0 descriptor?? [ 693.640400][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 693.676294][ T5158] usb 2-1: Product: syz [ 693.688632][ T5104] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 693.718359][ T5158] usb 2-1: config 0 descriptor?? [ 693.817994][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 693.828697][T15083] sctp: [Deprecated]: syz.2.2340 (pid 15083) Use of int in max_burst socket option deprecated. [ 693.828697][T15083] Use struct sctp_assoc_value instead [ 694.074394][T15087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 694.080990][T15087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 694.116116][T15087] vhci_hcd vhci_hcd.0: Device attached [ 694.372982][ T5104] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 694.394197][ T25] vhci_hcd: vhci_device speed not set [ 694.458001][ T2404] usb 5-1: Failed to submit usb control message: -71 [ 694.470825][ T46] usb 5-1: USB disconnect, device number 109 [ 694.494453][ T25] usb 9-1: new full-speed USB device number 4 using vhci_hcd [ 694.513013][ T2404] usb 5-1: unable to send the bmi data to the device: -71 [ 694.552581][ T2404] usb 5-1: unable to get target info from device [ 694.565980][ T2404] usb 5-1: could not get target info (-71) [ 694.581775][ T5104] usb 3-1: Using ep0 maxpacket: 32 [ 694.600699][ T5104] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.628161][ T2404] usb 5-1: could not probe fw (-71) [ 694.637935][ T5104] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 694.701640][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 694.714321][ T5104] usb 3-1: Product: syz [ 694.756579][ T5104] usb 3-1: config 0 descriptor?? [ 695.106770][T15088] vhci_hcd: connection reset by peer [ 695.126166][ T2844] vhci_hcd: stop threads [ 695.133287][ T2844] vhci_hcd: release socket [ 695.148454][ T2844] vhci_hcd: disconnect device [ 695.403197][T13877] vhci_hcd: vhci_device speed not set [ 696.163968][T15096] tipc: Started in network mode [ 696.188646][T15096] tipc: Node identity , cluster identity 2 [ 696.411753][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 697.071683][ T5156] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 697.260647][ T5156] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 697.269848][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.291964][ T5156] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 697.324223][ T8] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 697.511249][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 697.528569][ T8] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 697.538412][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.558863][ T8] usb 1-1: config 0 descriptor?? [ 697.607350][ T8] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 697.773969][ T5156] gp8psk: usb in 128 operation failed. [ 697.821978][ T5156] gp8psk: usb in 137 operation failed. [ 697.827529][ T5156] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 697.858624][ T5156] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 697.899857][ T5156] usb 5-1: USB disconnect, device number 110 [ 698.118669][T10448] usb 1-1: USB disconnect, device number 124 [ 698.122629][ T2844] usb 1-1: Failed to submit usb control message: -71 [ 698.132329][ T2844] usb 1-1: unable to send the bmi data to the device: -71 [ 698.139626][ T2844] usb 1-1: unable to get target info from device [ 698.146611][ T2844] usb 1-1: could not get target info (-71) [ 698.152694][ T2844] usb 1-1: could not probe fw (-71) [ 698.289483][ T929] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 698.855501][ T5158] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 699.082724][T10448] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 699.273187][T10448] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.303529][T10448] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 699.314879][T10448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.328996][T10448] usb 5-1: Product: Э [ 699.334729][T10448] usb 5-1: Manufacturer: 藝劸덐 [ 699.339904][T10448] usb 5-1: SerialNumber: syz [ 699.642604][ T25] vhci_hcd: vhci_device speed not set [ 699.799503][T10448] usbhid 5-1:1.0: can't add hid device: -71 [ 699.804953][ T5104] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 699.812373][T10448] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 699.842321][T10448] usb 5-1: USB disconnect, device number 111 [ 700.408837][ T5104] usb 4-1: USB disconnect, device number 127 [ 700.607121][ T8] usb 2-1: USB disconnect, device number 99 [ 700.672831][T10453] usb 3-1: USB disconnect, device number 103 [ 700.802858][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 700.814494][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 700.814509][ T29] audit: type=1326 audit(1721128765.728:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 700.851974][T15143] delete_channel: no stack [ 700.874439][ T29] audit: type=1326 audit(1721128765.758:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 700.951017][ T29] audit: type=1326 audit(1721128765.758:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.007129][ T29] audit: type=1326 audit(1721128765.758:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.037037][ T29] audit: type=1326 audit(1721128765.758:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.061787][ T29] audit: type=1326 audit(1721128765.758:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.084067][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.091025][ T5104] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 701.147197][ T29] audit: type=1326 audit(1721128765.758:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.177319][ T29] audit: type=1326 audit(1721128765.768:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.199721][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.215570][ T29] audit: type=1326 audit(1721128765.768:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.271231][ T5104] usb 4-1: Using ep0 maxpacket: 16 [ 701.278671][ T5104] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 701.286567][ T5104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.292812][T15148] tipc: Started in network mode [ 701.304082][T15148] tipc: Node identity , cluster identity 2 [ 701.308781][ T5104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.310107][ T29] audit: type=1326 audit(1721128765.768:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.4.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x7ffc0000 [ 701.348608][ T5104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 701.353692][T10453] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 701.388960][ T5104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 701.410367][ T5104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 701.425847][ T5104] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 701.440281][ T5104] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 701.461805][T10448] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 701.498982][ T5104] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.510907][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 701.521418][ T5104] usb 4-1: SerialNumber: syz [ 701.556231][ T5104] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 701.631477][T10453] usb 5-1: Using ep0 maxpacket: 16 [ 701.644816][T10453] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 701.644855][T10453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.644881][T10453] usb 5-1: Product: syz [ 701.644900][T10453] usb 5-1: Manufacturer: syz [ 701.644918][T10453] usb 5-1: SerialNumber: syz [ 701.648259][T10453] usb 5-1: config 0 descriptor?? [ 701.702295][T10453] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 701.743360][T10448] usb 2-1: unable to get BOS descriptor or descriptor too short [ 701.745801][T10448] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 701.748771][T10448] usb 2-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 701.748807][T10448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.748831][T10448] usb 2-1: Product: Д [ 701.748874][T10448] usb 2-1: SerialNumber: ࡡ [ 702.022736][T10453] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 702.031495][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.052166][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.166574][T10448] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 702.206527][T10448] usb 2-1: USB disconnect, device number 100 [ 702.592008][ T5104] usb 5-1: USB disconnect, device number 112 [ 702.712543][T15178] sctp: [Deprecated]: syz.2.2364 (pid 15178) Use of int in max_burst socket option deprecated. [ 702.712543][T15178] Use struct sctp_assoc_value instead [ 703.191196][ T5156] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 703.421359][ T5156] usb 3-1: Using ep0 maxpacket: 32 [ 703.464934][ T5156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.502781][ T5156] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 703.562608][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 703.651272][ T5156] usb 3-1: Product: syz [ 703.693360][ T5156] usb 3-1: config 0 descriptor?? [ 704.123629][T15195] sctp: [Deprecated]: syz.0.2367 (pid 15195) Use of int in max_burst socket option deprecated. [ 704.123629][T15195] Use struct sctp_assoc_value instead [ 704.325222][ T5158] usb 4-1: USB disconnect, device number 2 [ 704.721559][T10453] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 704.828615][T15207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2372'. [ 704.951291][T10453] usb 1-1: Using ep0 maxpacket: 32 [ 704.993961][T10453] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.077225][T10453] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 705.137147][T10453] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 705.152116][ T5158] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 705.155930][T10453] usb 1-1: Product: syz [ 705.194148][T10453] usb 1-1: config 0 descriptor?? [ 705.376534][ T5158] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 705.454718][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.484507][ T5158] usb 2-1: config 0 descriptor?? [ 705.699899][ T5156] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 705.779216][ T5156] usb 3-1: USB disconnect, device number 104 [ 706.140556][ T5158] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 706.196617][ T5158] usb 2-1: USB disconnect, device number 101 [ 706.413352][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2374'. [ 706.905209][T15234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.946331][T10453] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 706.965616][T10453] usb 1-1: USB disconnect, device number 125 [ 706.992681][ T5104] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 707.064860][T15234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.142442][T15234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2379'. [ 707.221191][ T5104] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 707.221808][T15234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.296765][ T5104] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.309780][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 707.323021][ T5104] usb 3-1: SerialNumber: syz [ 707.610874][T15250] sctp: [Deprecated]: syz.0.2383 (pid 15250) Use of int in max_burst socket option deprecated. [ 707.610874][T15250] Use struct sctp_assoc_value instead [ 708.071207][ T5158] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 708.220721][ T5104] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 708.239713][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 708.262011][ T5104] usb 3-1: USB disconnect, device number 105 [ 708.276107][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 708.307611][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.358569][ T5158] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 708.384934][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 708.397535][T15264] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2387'. [ 708.398519][ T5158] usb 1-1: Product: syz [ 708.419670][ T5158] usb 1-1: config 0 descriptor?? [ 708.929054][T15275] sctp: [Deprecated]: syz.4.2388 (pid 15275) Use of int in max_burst socket option deprecated. [ 708.929054][T15275] Use struct sctp_assoc_value instead [ 709.235760][T15283] sctp: [Deprecated]: syz.2.2389 (pid 15283) Use of int in max_burst socket option deprecated. [ 709.235760][T15283] Use struct sctp_assoc_value instead [ 710.464890][ T5158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 710.510737][ T5158] usb 1-1: USB disconnect, device number 126 [ 710.770812][T15322] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 710.842928][T15311] netlink: 'syz.1.2396': attribute type 1 has an invalid length. [ 710.861006][T15311] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.2396'. [ 711.051771][ T5158] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 711.263592][ T5158] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 711.298517][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.333504][ T5158] usb 4-1: config 0 descriptor?? [ 711.345288][ T5158] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 711.778253][ T5158] cpia1 4-1:0.0: unexpected state after lo power cmd: 8a [ 711.994885][T10453] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 712.201930][ T5158] gspca_cpia1: usb_control_msg 02, error -71 [ 712.211357][T10453] usb 3-1: Using ep0 maxpacket: 32 [ 712.222046][ T5158] gspca_cpia1: usb_control_msg 05, error -71 [ 712.224757][T10453] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 712.228073][ T5158] cpia1 4-1:0.0: unexpected systemstate: 8a [ 712.252452][T10453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.289677][T10453] usb 3-1: config 0 descriptor?? [ 712.301556][ T5158] usb 4-1: USB disconnect, device number 3 [ 712.358485][T10453] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 712.653810][ T25] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 712.891306][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 712.941010][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.015821][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 713.073442][T15357] sctp: [Deprecated]: syz.0.2409 (pid 15357) Use of int in max_burst socket option deprecated. [ 713.073442][T15357] Use struct sctp_assoc_value instead [ 713.076898][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 713.107813][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.127274][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.142794][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.415756][T15365] sctp: [Deprecated]: syz.3.2410 (pid 15365) Use of int in max_burst socket option deprecated. [ 713.415756][T15365] Use struct sctp_assoc_value instead [ 713.416273][T10448] usb 3-1: USB disconnect, device number 106 [ 713.442078][ T1102] usb 3-1: Failed to submit usb control message: -71 [ 713.460455][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 713.477392][ T1102] usb 3-1: unable to send the bmi data to the device: -71 [ 713.487817][ T25] usbtmc 2-1:16.0: can't read capabilities [ 713.494223][ T1102] usb 3-1: unable to get target info from device [ 713.516334][ T1102] usb 3-1: could not get target info (-71) [ 713.543189][ T1102] usb 3-1: could not probe fw (-71) [ 713.624324][ T5158] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 713.811348][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 713.844849][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.861180][ T5104] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 713.887476][ T5158] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 713.902704][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 713.916268][ T5158] usb 1-1: Product: syz [ 713.926683][ T5158] usb 1-1: config 0 descriptor?? [ 714.046564][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 714.057255][ T5104] usb 4-1: Using ep0 maxpacket: 32 [ 714.066177][ T5104] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.086393][ T5104] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 714.096255][ T5104] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 714.105903][ T5104] usb 4-1: Product: syz [ 714.125912][ T5104] usb 4-1: config 0 descriptor?? [ 714.303020][T10448] usb 2-1: USB disconnect, device number 102 [ 715.121301][ T929] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 715.337415][ T929] usb 3-1: New USB device found, idVendor=0499, idProduct=105d, bcdDevice=9a.0f [ 715.371460][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.457757][ T929] usb 3-1: config 0 descriptor?? [ 715.567288][ T929] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 715.655107][ T5158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 715.700999][ T5158] usb 1-1: USB disconnect, device number 127 [ 715.728465][T15382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.757053][ T5174] udevd[5174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.793770][T15382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.819566][ T929] usb 3-1: USB disconnect, device number 107 [ 716.213096][ T5104] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 716.290046][ T5104] usb 4-1: USB disconnect, device number 4 [ 716.391325][ T5158] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 716.603408][ T5158] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.645513][ T5158] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 716.665228][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.682834][ T5158] usb 2-1: Product: Э [ 716.687146][ T5158] usb 2-1: Manufacturer: 藝劸덐 [ 716.701149][ T5158] usb 2-1: SerialNumber: syz [ 716.857337][T15413] sctp: [Deprecated]: syz.4.2423 (pid 15413) Use of int in max_burst socket option deprecated. [ 716.857337][T15413] Use struct sctp_assoc_value instead [ 717.358768][ T5158] usbhid 2-1:1.0: can't add hid device: -71 [ 717.379777][ T5158] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 717.416733][ T5158] usb 2-1: USB disconnect, device number 103 [ 717.710162][T15429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2424'. [ 717.817865][T15431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 718.095740][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 718.391231][T10448] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 718.621321][T10448] usb 5-1: Using ep0 maxpacket: 32 [ 718.639437][T10448] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 718.669019][T10448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.723368][T10448] usb 5-1: config 0 descriptor?? [ 718.744635][T15452] sctp: [Deprecated]: syz.0.2430 (pid 15452) Use of int in max_burst socket option deprecated. [ 718.744635][T15452] Use struct sctp_assoc_value instead [ 718.785240][T10448] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 719.078410][ T5104] usb 5-1: USB disconnect, device number 113 [ 719.094254][ T61] usb 5-1: Failed to submit usb control message: -71 [ 719.124904][ T61] usb 5-1: unable to send the bmi data to the device: -71 [ 719.190543][ T61] usb 5-1: unable to get target info from device [ 719.222364][ T61] usb 5-1: could not get target info (-71) [ 719.243611][ T61] usb 5-1: could not probe fw (-71) [ 719.471811][ T5158] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 719.708378][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 719.748688][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.778873][ T5158] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 719.857214][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 719.884595][ T5158] usb 1-1: Product: syz [ 719.927673][ T5158] usb 1-1: config 0 descriptor?? [ 720.606083][T15508] sctp: [Deprecated]: syz.3.2443 (pid 15508) Use of int in max_burst socket option deprecated. [ 720.606083][T15508] Use struct sctp_assoc_value instead [ 721.042430][T13875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 721.291286][T13875] usb 4-1: Using ep0 maxpacket: 32 [ 721.308360][T13875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.350737][T13875] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 721.381477][T13875] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 721.401033][T13875] usb 4-1: Product: syz [ 721.422052][T13875] usb 4-1: config 0 descriptor?? [ 721.452811][T15518] x_tables: duplicate underflow at hook 3 [ 721.481915][ T5104] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 721.677975][ T5104] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 721.773217][ T5158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 721.800586][ T5104] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.818119][ T5158] usb 1-1: USB disconnect, device number 2 [ 721.831377][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 721.856701][ T5104] usb 5-1: SerialNumber: syz [ 722.439543][T15534] team0: entered promiscuous mode [ 722.469836][T15534] team_slave_0: entered promiscuous mode [ 722.493221][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 722.506857][T15534] team_slave_1: entered promiscuous mode [ 722.555367][T15534] team0: left promiscuous mode [ 722.582576][T15534] team_slave_0: left promiscuous mode [ 722.604980][T15535] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2451'. [ 722.623570][T15534] team_slave_1: left promiscuous mode [ 722.986359][ T5104] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 723.040341][ T5104] usb 5-1: USB disconnect, device number 114 [ 723.458246][T13875] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 723.533519][T13875] usb 4-1: USB disconnect, device number 5 [ 723.908025][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'. [ 724.073836][T13875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 724.262735][T13875] usb 4-1: Using ep0 maxpacket: 32 [ 724.287296][T13875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.337768][T13875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 724.370883][T13875] usb 4-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 724.405390][T13875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.426962][T15565] sctp: [Deprecated]: syz.1.2462 (pid 15565) Use of int in max_burst socket option deprecated. [ 724.426962][T15565] Use struct sctp_assoc_value instead [ 724.445136][T13875] usb 4-1: Product: syz [ 724.453782][T13875] usb 4-1: Manufacturer: syz [ 724.463965][T13875] usb 4-1: SerialNumber: syz [ 724.480511][T13875] usb 4-1: config 0 descriptor?? [ 724.829880][ T5104] usb 4-1: USB disconnect, device number 6 [ 725.078182][T15578] [U] [ 725.081428][T15578] [U] [ 725.084165][T15578] [U] [ 725.086897][T15578] [U] [ 725.110993][T15578] [U] [ 725.113766][T15578] [U] [ 725.116497][T15578] [U] [ 725.119317][T15578] [U] [ 725.124793][T15578] [U] [ 725.127553][T15578] [U] [ 725.130280][T15578] [U] [ 725.251251][T13875] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 725.451304][T13875] usb 2-1: Using ep0 maxpacket: 32 [ 725.468661][T13875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.489267][T13875] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 725.536597][T13875] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 725.578885][T13875] usb 2-1: Product: syz [ 725.597205][T13875] usb 2-1: config 0 descriptor?? [ 725.779396][T15573] [U] [ 725.911342][ T5158] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 726.103584][ T5158] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 726.139633][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.153275][T10453] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 726.172058][ T5158] usb 1-1: config 0 descriptor?? [ 726.404169][T10453] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 726.457426][T10453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.487443][T10453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.513680][T10453] usb 4-1: SerialNumber: syz [ 726.708672][T15597] vxlan0: entered promiscuous mode [ 727.020766][ T5158] usb 1-1: Cannot read MAC address [ 727.046580][ T5158] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 727.270699][T13875] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 727.306861][T13875] usb 2-1: USB disconnect, device number 104 [ 727.541647][T10453] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 727.583358][T10453] usb 4-1: USB disconnect, device number 7 [ 727.616852][T15613] FAULT_INJECTION: forcing a failure. [ 727.616852][T15613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.644351][T15613] CPU: 0 PID: 15613 Comm: syz.1.2474 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 727.654210][T15613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 727.664300][T15613] Call Trace: [ 727.667596][T15613] [ 727.670529][T15613] dump_stack_lvl+0x241/0x360 [ 727.675260][T15613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.680462][T15613] ? __pfx__printk+0x10/0x10 [ 727.685055][T15613] ? __pfx_lock_release+0x10/0x10 [ 727.690093][T15613] should_fail_ex+0x3b0/0x4e0 [ 727.694786][T15613] _copy_from_user+0x2f/0xe0 [ 727.699394][T15613] copy_msghdr_from_user+0xae/0x680 [ 727.704604][T15613] ? __pfx___might_resched+0x10/0x10 [ 727.709904][T15613] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 727.715820][T15613] ? __might_fault+0xaa/0x120 [ 727.720502][T15613] do_recvmmsg+0x40f/0xae0 [ 727.724929][T15613] ? __pfx_lock_release+0x10/0x10 [ 727.729974][T15613] ? __pfx_do_recvmmsg+0x10/0x10 [ 727.734939][T15613] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 727.740847][T15613] ? ksys_write+0x23e/0x2c0 [ 727.745377][T15613] ? __pfx_lock_release+0x10/0x10 [ 727.750464][T15613] ? vfs_write+0x7c4/0xc90 [ 727.754932][T15613] ? __mutex_unlock_slowpath+0x21d/0x750 [ 727.760621][T15613] ? __fget_files+0x3f6/0x470 [ 727.765358][T15613] __x64_sys_recvmmsg+0x199/0x250 [ 727.770427][T15613] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 727.776015][T15613] ? do_syscall_64+0x100/0x230 [ 727.780820][T15613] ? do_syscall_64+0xb6/0x230 [ 727.785532][T15613] do_syscall_64+0xf3/0x230 [ 727.790072][T15613] ? clear_bhb_loop+0x35/0x90 [ 727.794792][T15613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.800725][T15613] RIP: 0033:0x7f40d2775bd9 [ 727.805185][T15613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.824832][T15613] RSP: 002b:00007f40d34a2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 727.833297][T15613] RAX: ffffffffffffffda RBX: 00007f40d2903f60 RCX: 00007f40d2775bd9 [ 727.841312][T15613] RDX: 0400000000000284 RSI: 0000000020000040 RDI: 0000000000000003 [ 727.849322][T15613] RBP: 00007f40d34a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 727.857334][T15613] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 727.865348][T15613] R13: 000000000000000b R14: 00007f40d2903f60 R15: 00007f40d2a2fa78 [ 727.873371][T15613] [ 728.060736][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 728.262447][T10448] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 728.331369][T13875] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 728.473326][T10448] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 728.490198][T10448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.510770][T10448] usb 3-1: config 0 descriptor?? [ 728.519249][T10448] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 728.521364][T13875] usb 5-1: Using ep0 maxpacket: 32 [ 728.534357][T13875] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 728.543961][T13875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.557186][T13875] usb 5-1: config 0 descriptor?? [ 728.573557][T13875] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 728.711283][ T929] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 728.725867][ T5158] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 728.826990][ T1102] usb 5-1: Failed to submit usb control message: -71 [ 728.829826][T13875] usb 5-1: USB disconnect, device number 115 [ 728.838027][ T1102] usb 5-1: unable to send the bmi data to the device: -71 [ 728.854397][ T1102] usb 5-1: unable to get target info from device [ 728.862005][ T1102] usb 5-1: could not get target info (-71) [ 728.867870][ T1102] usb 5-1: could not probe fw (-71) [ 728.892362][ T5158] usb 4-1: device descriptor read/64, error -71 [ 728.921758][ T929] usb 2-1: Using ep0 maxpacket: 16 [ 728.941538][ T929] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 728.952105][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.960235][ T929] usb 2-1: Product: syz [ 728.966800][ T929] usb 2-1: Manufacturer: syz [ 728.971531][ T929] usb 2-1: SerialNumber: syz [ 728.979707][ T929] usb 2-1: config 0 descriptor?? [ 728.988910][ T929] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 729.167399][ T5158] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 729.194362][ T929] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 729.324987][ T5158] usb 4-1: device descriptor read/64, error -71 [ 729.410292][ T5156] usb 1-1: USB disconnect, device number 3 [ 729.461006][ T5158] usb usb4-port1: attempt power cycle [ 729.835548][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.861462][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.900891][ T5158] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 729.962030][ T5158] usb 4-1: device descriptor read/8, error -71 [ 730.058879][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'. [ 730.242244][ T5158] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 730.259553][T15660] netlink: 'syz.2.2479': attribute type 4 has an invalid length. [ 730.322278][ T5158] usb 4-1: device descriptor read/8, error -71 [ 730.447548][ T5158] usb usb4-port1: unable to enumerate USB device [ 730.461485][T10448] gspca_pac7311: reg_w() failed index 0x29, value 0x53, error -110 [ 730.492093][T10448] pac7311 3-1:0.0: probe with driver pac7311 failed with error -110 [ 731.352463][ T784] usb 3-1: USB disconnect, device number 108 [ 731.483881][T10448] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 731.517189][ T5156] usb 2-1: USB disconnect, device number 105 [ 731.703338][T10448] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 731.731216][T10448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.765604][T10448] usb 1-1: config 0 descriptor?? [ 731.980302][T15699] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 732.016496][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2502'. [ 732.731036][T10448] usb 1-1: Cannot read MAC address [ 732.736799][T10448] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 733.071242][T10448] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 733.101221][T13875] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 733.236245][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'. [ 733.292950][T10448] usb 2-1: Using ep0 maxpacket: 32 [ 733.294367][T13875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.305645][T10448] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 733.312025][T13875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.327368][T10448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.330898][T13875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 733.358824][T13875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.360531][T10448] usb 2-1: config 0 descriptor?? [ 733.373595][T13875] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.389045][T13875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.433770][T13875] usb 5-1: config 0 descriptor?? [ 733.656942][T15753] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2518'. [ 733.851829][T13875] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 733.874616][T13875] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 733.896153][T13875] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 734.713754][ T5156] usb 1-1: USB disconnect, device number 4 [ 734.782060][T10448] usb 2-1: string descriptor 0 read error: -71 [ 734.809617][T10448] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 734.846316][ T4535] bcm5974 2-1:0.0: could not read from device [ 734.871882][T13875] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 734.875308][ T4535] bcm5974 2-1:0.0: could not read from device [ 734.911706][T10448] usb 2-1: USB disconnect, device number 106 [ 735.061165][T13875] usb 3-1: Using ep0 maxpacket: 16 [ 735.100784][T13875] usb 3-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 735.121200][T13875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 136, changing to 11 [ 735.134922][T13875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024 [ 735.146215][T13875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 735.160714][T13875] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 735.170078][T13875] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 735.178191][T13875] usb 3-1: Manufacturer: syz [ 735.193804][T13875] usb 3-1: config 0 descriptor?? [ 735.951597][T10453] usb 5-1: USB disconnect, device number 116 [ 736.104135][ T929] usb 3-1: USB disconnect, device number 109 [ 736.255534][T15794] netlink: 'syz.1.2533': attribute type 3 has an invalid length. [ 737.333884][T15818] sctp: [Deprecated]: syz.2.2539 (pid 15818) Use of int in max_burst socket option deprecated. [ 737.333884][T15818] Use struct sctp_assoc_value instead [ 737.743850][T15829] FAULT_INJECTION: forcing a failure. [ 737.743850][T15829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.811637][T15829] CPU: 1 PID: 15829 Comm: syz.3.2544 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 737.821579][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 737.831645][T15829] Call Trace: [ 737.834933][T15829] [ 737.837868][T15829] dump_stack_lvl+0x241/0x360 [ 737.842563][T15829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.847770][T15829] ? __pfx__printk+0x10/0x10 [ 737.852374][T15829] ? snprintf+0xda/0x120 [ 737.856816][T15829] should_fail_ex+0x3b0/0x4e0 [ 737.861516][T15829] _copy_to_user+0x2f/0xb0 [ 737.865943][T15829] simple_read_from_buffer+0xca/0x150 [ 737.871355][T15829] proc_fail_nth_read+0x1e9/0x250 [ 737.876436][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.882030][T15829] ? rw_verify_area+0x520/0x6b0 [ 737.886914][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 737.892477][T15829] vfs_read+0x204/0xbc0 [ 737.896646][T15829] ? __pfx_lock_release+0x10/0x10 [ 737.901690][T15829] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 737.907259][T15829] ? __pfx_vfs_read+0x10/0x10 [ 737.911975][T15829] ? __fget_files+0x29/0x470 [ 737.916584][T15829] ? __fget_files+0x3f6/0x470 [ 737.921303][T15829] ksys_read+0x1a0/0x2c0 [ 737.925579][T15829] ? __pfx_ksys_read+0x10/0x10 [ 737.930363][T15829] ? do_syscall_64+0x100/0x230 [ 737.935151][T15829] ? do_syscall_64+0xb6/0x230 [ 737.939841][T15829] do_syscall_64+0xf3/0x230 [ 737.944355][T15829] ? clear_bhb_loop+0x35/0x90 [ 737.949068][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.954997][T15829] RIP: 0033:0x7efde11746bc [ 737.959423][T15829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 737.979070][T15829] RSP: 002b:00007efde200c040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 737.987528][T15829] RAX: ffffffffffffffda RBX: 00007efde1303f60 RCX: 00007efde11746bc [ 737.995510][T15829] RDX: 000000000000000f RSI: 00007efde200c0b0 RDI: 0000000000000004 [ 738.003495][T15829] RBP: 00007efde200c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 738.011478][T15829] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 738.019458][T15829] R13: 000000000000000b R14: 00007efde1303f60 R15: 00007efde142fa78 [ 738.027468][T15829] [ 738.191215][ T5156] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 738.221328][ T5158] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 738.392012][ T5156] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 738.411313][ T5158] usb 3-1: Using ep0 maxpacket: 32 [ 738.451350][ T5156] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 738.478864][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.510585][ T5158] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.540489][ T5158] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 738.568475][ T5156] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 738.577065][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 738.606744][ T5158] usb 3-1: Product: syz [ 738.611213][ T5156] usb 5-1: No valid video chain found. [ 738.637736][ T5158] usb 3-1: config 0 descriptor?? [ 738.903267][T13875] usb 5-1: USB disconnect, device number 117 [ 739.077490][T15843] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2548'. [ 739.333941][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'. [ 740.183169][T10453] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 740.351399][ T5158] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 740.394855][T15863] bond0: (slave bond_slave_0): Releasing backup interface [ 740.395327][ T5158] usb 3-1: USB disconnect, device number 110 [ 740.420465][T10453] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.495583][T15865] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 740.515934][T10453] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 740.527257][T10453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.535434][T10453] usb 1-1: Product: Э [ 740.539711][T10453] usb 1-1: Manufacturer: 藝劸덐 [ 740.550001][T10453] usb 1-1: SerialNumber: syz [ 740.637109][T15865] team0: Device veth1_vlan failed to register rx_handler [ 740.980983][T15885] FAULT_INJECTION: forcing a failure. [ 740.980983][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 741.021406][T15885] CPU: 1 PID: 15885 Comm: syz.2.2558 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 741.031415][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 741.041515][T15885] Call Trace: [ 741.044852][T15885] [ 741.047828][T15885] dump_stack_lvl+0x241/0x360 [ 741.052583][T15885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.057862][T15885] ? __pfx__printk+0x10/0x10 [ 741.062529][T15885] should_fail_ex+0x3b0/0x4e0 [ 741.067270][T15885] ? __alloc_skb+0x1c3/0x440 [ 741.071912][T15885] should_failslab+0x9/0x20 [ 741.076465][T15885] kmem_cache_alloc_node_noprof+0x71/0x320 [ 741.082326][T15885] ? genl_rcv_msg+0x88c/0xec0 [ 741.087075][T15885] __alloc_skb+0x1c3/0x440 [ 741.091539][T15885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.097665][T15885] ? __pfx___alloc_skb+0x10/0x10 [ 741.102680][T15885] netlink_dump+0x233/0xe50 [ 741.107255][T15885] ? __pfx_netlink_dump+0x10/0x10 [ 741.112354][T15885] ? __asan_memset+0x23/0x50 [ 741.116997][T15885] ? genl_start+0x4a8/0x6d0 [ 741.121595][T15885] __netlink_dump_start+0x59d/0x780 [ 741.126898][T15885] genl_rcv_msg+0x88c/0xec0 [ 741.131450][T15885] ? mark_lock+0x9a/0x350 [ 741.135830][T15885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.141341][T15885] ? __pfx_genl_start+0x10/0x10 [ 741.146238][T15885] ? __pfx_genl_dumpit+0x10/0x10 [ 741.151240][T15885] ? __pfx_genl_done+0x10/0x10 [ 741.156112][T15885] ? __pfx_lock_acquire+0x10/0x10 [ 741.161280][T15885] ? __pfx_batadv_orig_dump+0x10/0x10 [ 741.166725][T15885] ? __pfx___might_resched+0x10/0x10 [ 741.172103][T15885] netlink_rcv_skb+0x1e3/0x430 [ 741.176935][T15885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.182068][T15885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.187421][T15885] ? __netlink_deliver_tap+0x77e/0x7c0 [ 741.192956][T15885] genl_rcv+0x28/0x40 [ 741.197016][T15885] netlink_unicast+0x7ea/0x980 [ 741.201859][T15885] ? __pfx_netlink_unicast+0x10/0x10 [ 741.207194][T15885] ? __virt_addr_valid+0x183/0x530 [ 741.212368][T15885] ? __check_object_size+0x49c/0x900 [ 741.217732][T15885] ? bpf_lsm_netlink_send+0x9/0x10 [ 741.222913][T15885] netlink_sendmsg+0x8db/0xcb0 [ 741.227751][T15885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.233095][T15885] ? __import_iovec+0x536/0x820 [ 741.238011][T15885] ? aa_sock_msg_perm+0x91/0x160 [ 741.243012][T15885] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 741.248345][T15885] ? security_socket_sendmsg+0x87/0xb0 [ 741.253874][T15885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.259190][T15885] __sock_sendmsg+0x221/0x270 [ 741.264026][T15885] ____sys_sendmsg+0x525/0x7d0 [ 741.268864][T15885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.274239][T15885] __sys_sendmsg+0x2b0/0x3a0 [ 741.278898][T15885] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.284170][T15885] ? vfs_write+0x7c4/0xc90 [ 741.288676][T15885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 741.295052][T15885] ? do_syscall_64+0x100/0x230 [ 741.299857][T15885] ? do_syscall_64+0xb6/0x230 [ 741.304579][T15885] do_syscall_64+0xf3/0x230 [ 741.309127][T15885] ? clear_bhb_loop+0x35/0x90 [ 741.313866][T15885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.319849][T15885] RIP: 0033:0x7fbf85b75bd9 [ 741.324334][T15885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.343997][T15885] RSP: 002b:00007fbf855ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.352467][T15885] RAX: ffffffffffffffda RBX: 00007fbf85d03f60 RCX: 00007fbf85b75bd9 [ 741.360498][T15885] RDX: 0000000000000000 RSI: 0000000020004340 RDI: 0000000000000003 [ 741.368525][T15885] RBP: 00007fbf855ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 741.376559][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.384579][T15885] R13: 000000000000000b R14: 00007fbf85d03f60 R15: 00007fbf85e2fa78 [ 741.392615][T15885] [ 741.460499][T10453] usbhid 1-1:1.0: can't add hid device: -71 [ 741.468822][T10453] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 741.497613][T10453] usb 1-1: USB disconnect, device number 5 [ 741.921209][T13877] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 742.111586][T13877] usb 3-1: Using ep0 maxpacket: 32 [ 742.124627][T13877] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 742.144113][T13877] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 742.171484][T13877] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 742.196236][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 742.208811][T13877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 742.254794][T13877] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 742.299187][T13877] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 742.311465][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.374478][T13877] usb 3-1: config 0 descriptor?? [ 742.609017][T13877] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 742.620473][T15925] netlink: 'syz.1.2569': attribute type 4 has an invalid length. [ 742.635289][T13877] usb 3-1: USB disconnect, device number 111 [ 742.654859][T13877] usblp0: removed [ 743.181304][T13877] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 743.229865][T15933] sctp: [Deprecated]: syz.0.2570 (pid 15933) Use of int in max_burst socket option deprecated. [ 743.229865][T15933] Use struct sctp_assoc_value instead [ 743.382652][T13877] usb 3-1: Using ep0 maxpacket: 32 [ 743.413708][T13877] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 743.443359][T13877] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 743.473943][T13877] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 743.511194][T13877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 743.549865][T13877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 743.586657][T13877] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 743.615887][T13877] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 743.638160][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.668981][T13877] usb 3-1: config 0 descriptor?? [ 743.889022][T13877] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 743.991342][ T5158] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 744.192143][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 744.216237][ T5158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.242669][ T5158] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 744.261134][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 744.278368][ T5158] usb 1-1: Product: syz [ 744.293613][ T5158] usb 1-1: config 0 descriptor?? [ 744.813083][T13875] usb 3-1: USB disconnect, device number 112 [ 744.836460][T13875] usblp0: removed [ 745.041502][T13877] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 745.068780][T15967] sctp: [Deprecated]: syz.3.2578 (pid 15967) Use of int in max_burst socket option deprecated. [ 745.068780][T15967] Use struct sctp_assoc_value instead [ 745.097303][T15968] sctp: [Deprecated]: syz.4.2579 (pid 15968) Use of int in max_burst socket option deprecated. [ 745.097303][T15968] Use struct sctp_assoc_value instead [ 745.274768][T13877] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.293844][T13877] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 745.303702][T13877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.314764][T13877] usb 2-1: Product: Э [ 745.319021][T13877] usb 2-1: Manufacturer: 藝劸덐 [ 745.328936][T13877] usb 2-1: SerialNumber: syz [ 745.391263][T13875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 745.411362][ T929] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 745.581421][T13875] usb 4-1: Using ep0 maxpacket: 32 [ 745.631400][ T929] usb 5-1: Using ep0 maxpacket: 32 [ 745.648795][T13875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.675829][ T929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.700521][T13875] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 745.720020][ T929] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 745.735031][T13875] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 745.748392][T13877] usbhid 2-1:1.0: can't add hid device: -71 [ 745.755888][ T929] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 745.771016][T13875] usb 4-1: Product: syz [ 745.775964][T13877] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 745.809059][ T929] usb 5-1: Product: syz [ 745.816129][T13875] usb 4-1: config 0 descriptor?? [ 745.847871][T13877] usb 2-1: USB disconnect, device number 107 [ 745.874614][ T929] usb 5-1: config 0 descriptor?? [ 746.338781][ T5158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 746.403406][ T5158] usb 1-1: USB disconnect, device number 6 [ 747.261299][ T5158] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 747.471463][T13877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 747.494654][ T5158] usb 3-1: unable to get BOS descriptor or descriptor too short [ 747.508280][ T5158] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 747.548443][ T5158] usb 3-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 747.560137][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.569327][ T5158] usb 3-1: Product: Д [ 747.574209][ T5158] usb 3-1: Manufacturer: 鞶蓁₏핂㭜㗏砧퐛ᓐ䷚ৈ㽖儋浭憀蚖퐔箠霙㇩ꙵ떮門䴽줾⤆⁖养䤛쩠놄ᕭ슻 [ 747.590062][ T5158] usb 3-1: SerialNumber: ࡡ [ 747.681447][T13877] usb 1-1: Using ep0 maxpacket: 16 [ 747.694786][T13877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.715834][T13877] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 747.728667][T13877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 747.739995][T13877] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 747.752237][T13877] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 747.766724][T13877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.783094][T13877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.805340][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.812852][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.845010][T15995] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 747.870076][T13877] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 747.904584][T13877] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 747.960007][T15991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.993186][ T929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 748.019142][T15991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.053473][ T929] usb 5-1: USB disconnect, device number 118 [ 748.063872][ T784] usb 1-1: USB disconnect, device number 7 [ 748.158159][T13875] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 748.208531][ T5158] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 748.236045][T13875] usb 4-1: USB disconnect, device number 12 [ 748.260766][ T5158] usb 3-1: USB disconnect, device number 113 [ 748.278414][T16000] FAULT_INJECTION: forcing a failure. [ 748.278414][T16000] name failslab, interval 1, probability 0, space 0, times 0 [ 748.326236][T16000] CPU: 1 PID: 16000 Comm: syz.4.2586 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 748.336114][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 748.346192][T16000] Call Trace: [ 748.349483][T16000] [ 748.352431][T16000] dump_stack_lvl+0x241/0x360 [ 748.357158][T16000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.362372][T16000] ? __pfx__printk+0x10/0x10 [ 748.366998][T16000] ? __pfx___might_resched+0x10/0x10 [ 748.372313][T16000] ? stack_depot_init+0x36/0x140 [ 748.377293][T16000] should_fail_ex+0x3b0/0x4e0 [ 748.382002][T16000] ? __hw_addr_add_ex+0x1a8/0x610 [ 748.387049][T16000] should_failslab+0x9/0x20 [ 748.391578][T16000] kmalloc_trace_noprof+0x6c/0x2c0 [ 748.396738][T16000] __hw_addr_add_ex+0x1a8/0x610 [ 748.401611][T16000] dev_addr_init+0x143/0x230 [ 748.406243][T16000] ? __pfx_dev_addr_init+0x10/0x10 [ 748.411373][T16000] ? rcu_is_watching+0x15/0xb0 [ 748.416157][T16000] ? read_word_at_a_time+0xe/0x20 [ 748.421199][T16000] alloc_netdev_mqs+0x2a7/0xf80 [ 748.426076][T16000] ? __pfx_macsec_setup+0x10/0x10 [ 748.431125][T16000] rtnl_create_link+0x2f9/0xc20 [ 748.436009][T16000] rtnl_newlink+0x1421/0x20a0 [ 748.440703][T16000] ? __kernel_text_address+0xd/0x40 [ 748.445960][T16000] ? rtnl_newlink+0xaa1/0x20a0 [ 748.450788][T16000] ? __pfx_rtnl_newlink+0x10/0x10 [ 748.455826][T16000] ? __pfx___mutex_trylock_common+0x10/0x10 [ 748.461742][T16000] ? rcu_is_watching+0x15/0xb0 [ 748.466606][T16000] ? trace_contention_end+0x3c/0x120 [ 748.471911][T16000] ? __mutex_lock+0x2ef/0xd70 [ 748.476610][T16000] ? __pfx_lock_release+0x10/0x10 [ 748.481662][T16000] ? __pfx_rtnl_newlink+0x10/0x10 [ 748.486704][T16000] rtnetlink_rcv_msg+0x89b/0x1180 [ 748.491745][T16000] ? rtnetlink_rcv_msg+0x208/0x1180 [ 748.496971][T16000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.502451][T16000] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.508451][T16000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.514794][T16000] ? __local_bh_enable_ip+0x168/0x200 [ 748.520182][T16000] ? lockdep_hardirqs_on+0x99/0x150 [ 748.525411][T16000] ? __local_bh_enable_ip+0x168/0x200 [ 748.530799][T16000] ? dev_hard_start_xmit+0x773/0x7e0 [ 748.536106][T16000] ? __dev_queue_xmit+0x2d2/0x3d30 [ 748.541256][T16000] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 748.546999][T16000] ? __dev_queue_xmit+0x2d2/0x3d30 [ 748.552134][T16000] ? __dev_queue_xmit+0x16c9/0x3d30 [ 748.557453][T16000] ? __dev_queue_xmit+0x2d2/0x3d30 [ 748.562591][T16000] ? ref_tracker_free+0x643/0x7e0 [ 748.567639][T16000] netlink_rcv_skb+0x1e3/0x430 [ 748.572417][T16000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 748.577887][T16000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.583199][T16000] ? netlink_deliver_tap+0x2e/0x1b0 [ 748.588411][T16000] netlink_unicast+0x7ea/0x980 [ 748.593203][T16000] ? __pfx_netlink_unicast+0x10/0x10 [ 748.598503][T16000] ? __virt_addr_valid+0x183/0x530 [ 748.603630][T16000] ? __check_object_size+0x49c/0x900 [ 748.608934][T16000] ? bpf_lsm_netlink_send+0x9/0x10 [ 748.614064][T16000] netlink_sendmsg+0x8db/0xcb0 [ 748.618849][T16000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.624274][T16000] ? __import_iovec+0x536/0x820 [ 748.629144][T16000] ? aa_sock_msg_perm+0x91/0x160 [ 748.634108][T16000] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 748.639410][T16000] ? security_socket_sendmsg+0x87/0xb0 [ 748.644918][T16000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.650218][T16000] __sock_sendmsg+0x221/0x270 [ 748.654939][T16000] ____sys_sendmsg+0x525/0x7d0 [ 748.659753][T16000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.665067][T16000] __sys_sendmsg+0x2b0/0x3a0 [ 748.669680][T16000] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.674804][T16000] ? vfs_write+0x7c4/0xc90 [ 748.679267][T16000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.685611][T16000] ? do_syscall_64+0x100/0x230 [ 748.690394][T16000] ? do_syscall_64+0xb6/0x230 [ 748.695086][T16000] do_syscall_64+0xf3/0x230 [ 748.699618][T16000] ? clear_bhb_loop+0x35/0x90 [ 748.704323][T16000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.710252][T16000] RIP: 0033:0x7fb4a6775bd9 [ 748.714678][T16000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.734467][T16000] RSP: 002b:00007fb4a75f5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.742888][T16000] RAX: ffffffffffffffda RBX: 00007fb4a6903f60 RCX: 00007fb4a6775bd9 [ 748.750868][T16000] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000011 [ 748.758845][T16000] RBP: 00007fb4a75f50a0 R08: 0000000000000000 R09: 0000000000000000 [ 748.766822][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.774799][T16000] R13: 000000000000000b R14: 00007fb4a6903f60 R15: 00007fb4a6a2fa78 [ 748.782791][T16000] [ 749.468827][T16017] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2592'. [ 749.487127][T16017] unsupported nla_type 256 [ 749.673055][T16027] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2594'. [ 749.993166][T16034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.358738][T16042] sctp: [Deprecated]: syz.0.2597 (pid 16042) Use of int in max_burst socket option deprecated. [ 750.358738][T16042] Use struct sctp_assoc_value instead [ 750.981295][ T929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 751.232063][ T929] usb 1-1: Using ep0 maxpacket: 32 [ 751.276022][ T929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.341806][ T929] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 751.374453][ T929] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 751.399427][ T929] usb 1-1: Product: syz [ 751.420471][ T929] usb 1-1: config 0 descriptor?? [ 752.631277][T10453] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 752.876188][T10453] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 752.901361][T10453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.929991][T10453] usb 2-1: config 0 descriptor?? [ 753.042786][ T784] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 753.187037][ T929] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 753.233941][ T929] usb 1-1: USB disconnect, device number 8 [ 753.281363][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 753.290232][ T784] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.335568][ T784] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.369840][ T784] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 753.395796][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.445858][ T784] hub 4-1:4.0: USB hub found [ 753.457361][T10453] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 753.513294][T10453] usb 2-1: USB disconnect, device number 108 [ 753.594942][T16107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2614'. [ 753.645766][ T784] hub 4-1:4.0: 2 ports detected [ 753.846701][ T784] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 753.874327][ T784] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 753.942589][ T784] usb 4-1: USB disconnect, device number 13 [ 754.543607][T16130] macsec1: entered allmulticast mode [ 754.549239][T16130] bond0: entered allmulticast mode [ 754.560387][T16130] bond_slave_0: entered allmulticast mode [ 754.566576][ T5156] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 754.582359][T16130] bond_slave_1: entered allmulticast mode [ 754.602522][T16130] bond0: left allmulticast mode [ 754.607471][T16130] bond_slave_0: left allmulticast mode [ 754.613278][T16130] bond_slave_1: left allmulticast mode [ 754.643600][ T784] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 754.783681][ T5156] usb 1-1: Using ep0 maxpacket: 32 [ 754.804895][ T5156] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 754.823505][ T5156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.847397][ T5156] usb 1-1: config 0 descriptor?? [ 754.852927][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 754.862165][ T784] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 754.871651][ T784] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 754.890463][ T784] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.912665][T16135] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 754.913294][ T784] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 754.919217][T16135] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 754.950457][T16135] vhci_hcd vhci_hcd.0: Device attached [ 754.974803][ T784] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 754.999164][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.037616][T16144] sctp: [Deprecated]: syz.3.2623 (pid 16144) Use of int in max_burst socket option deprecated. [ 755.037616][T16144] Use struct sctp_assoc_value instead [ 755.162654][ T929] vhci_hcd: vhci_device speed not set [ 755.244001][ T929] usb 17-1: new full-speed USB device number 4 using vhci_hcd [ 755.421423][T13877] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 755.525825][T16140] vhci_hcd: connection reset by peer [ 755.554933][ T2844] vhci_hcd: stop threads [ 755.599682][ T2844] vhci_hcd: release socket [ 755.612523][ T2844] vhci_hcd: disconnect device [ 755.651956][T13877] usb 4-1: Using ep0 maxpacket: 32 [ 755.663674][T13877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.693631][T13877] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 755.728749][T13877] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 755.753482][T16149] sctp: [Deprecated]: syz.2.2624 (pid 16149) Use of int in max_burst socket option deprecated. [ 755.753482][T16149] Use struct sctp_assoc_value instead [ 755.771188][T13877] usb 4-1: Product: syz [ 755.795182][T13877] usb 4-1: config 0 descriptor?? [ 756.205544][ T5156] usb 1-1: string descriptor 0 read error: -71 [ 756.284306][ T5156] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input51 [ 756.327319][ T4535] bcm5974 1-1:0.0: could not read from device [ 756.352053][ T4535] bcm5974 1-1:0.0: could not read from device [ 756.392620][ T4535] bcm5974 1-1:0.0: could not read from device [ 756.411016][ T5156] usb 1-1: USB disconnect, device number 9 [ 756.711711][T10453] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 756.931180][T10453] usb 3-1: Using ep0 maxpacket: 32 [ 756.964734][T10453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.015251][T10453] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 757.046227][T10453] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 757.075151][T10453] usb 3-1: Product: syz [ 757.111192][T10453] usb 3-1: config 0 descriptor?? [ 757.963676][T16175] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 758.054987][T13877] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 758.112662][T13877] usb 4-1: USB disconnect, device number 14 [ 758.574976][T16186] FAULT_INJECTION: forcing a failure. [ 758.574976][T16186] name failslab, interval 1, probability 0, space 0, times 0 [ 758.631265][T16186] CPU: 0 PID: 16186 Comm: syz.0.2630 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 758.641124][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 758.651221][T16186] Call Trace: [ 758.654558][T16186] [ 758.657563][T16186] dump_stack_lvl+0x241/0x360 [ 758.662383][T16186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.667637][T16186] ? __pfx__printk+0x10/0x10 [ 758.672291][T16186] should_fail_ex+0x3b0/0x4e0 [ 758.677004][T16186] ? ip_setup_cork+0x53f/0x8b0 [ 758.681785][T16186] should_failslab+0x9/0x20 [ 758.686322][T16186] kmalloc_trace_noprof+0x6c/0x2c0 [ 758.691449][T16186] ip_setup_cork+0x53f/0x8b0 [ 758.696145][T16186] ip_append_data+0xff/0x190 [ 758.700832][T16186] ? __pfx_raw_getfrag+0x10/0x10 [ 758.705803][T16186] raw_sendmsg+0x1a53/0x2490 [ 758.710421][T16186] ? raw_sendmsg+0xd04/0x2490 [ 758.715144][T16186] ? __pfx_raw_sendmsg+0x10/0x10 [ 758.720123][T16186] ? __pfx_lock_release+0x10/0x10 [ 758.725190][T16186] ? inet_sendmsg+0x330/0x390 [ 758.729902][T16186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 758.735286][T16186] ? security_socket_sendmsg+0x87/0xb0 [ 758.740762][T16186] __sock_sendmsg+0x1a6/0x270 [ 758.745455][T16186] ____sys_sendmsg+0x525/0x7d0 [ 758.750242][T16186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.755554][T16186] __sys_sendmsg+0x2b0/0x3a0 [ 758.760184][T16186] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.765320][T16186] ? vfs_write+0x7c4/0xc90 [ 758.769802][T16186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 758.776171][T16186] ? do_syscall_64+0x100/0x230 [ 758.780958][T16186] ? do_syscall_64+0xb6/0x230 [ 758.785664][T16186] do_syscall_64+0xf3/0x230 [ 758.790176][T16186] ? clear_bhb_loop+0x35/0x90 [ 758.794863][T16186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.800766][T16186] RIP: 0033:0x7f5a2d175bd9 [ 758.805183][T16186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.824835][T16186] RSP: 002b:00007f5a2de68048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.833369][T16186] RAX: ffffffffffffffda RBX: 00007f5a2d303f60 RCX: 00007f5a2d175bd9 [ 758.841371][T16186] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 758.849394][T16186] RBP: 00007f5a2de680a0 R08: 0000000000000000 R09: 0000000000000000 [ 758.857394][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.865427][T16186] R13: 000000000000000b R14: 00007f5a2d303f60 R15: 00007f5a2d42fa78 [ 758.873439][T16186] [ 759.054842][T10453] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 759.109130][T10453] usb 3-1: USB disconnect, device number 114 [ 759.234475][T16191] bridge0: port 3(gretap0) entered blocking state [ 759.251639][T16191] bridge0: port 3(gretap0) entered disabled state [ 759.258973][T16191] gretap0: entered allmulticast mode [ 759.289690][T10448] usb 2-1: USB disconnect, device number 109 [ 759.336414][T16191] gretap0: entered promiscuous mode [ 759.375983][T16191] bridge0: port 3(gretap0) entered blocking state [ 759.383414][T16191] bridge0: port 3(gretap0) entered forwarding state [ 759.473390][T16192] gretap0: left allmulticast mode [ 759.478502][T16192] gretap0: left promiscuous mode [ 759.512245][T16206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 759.513260][T16192] bridge0: port 3(gretap0) entered disabled state [ 759.518815][T16206] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 759.553160][T16206] vhci_hcd vhci_hcd.0: Device attached [ 759.756961][T10448] vhci_hcd: vhci_device speed not set [ 759.841172][T10448] usb 11-1: new full-speed USB device number 5 using vhci_hcd [ 759.971438][ T8] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 760.182386][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 760.201736][T16208] vhci_hcd: connection reset by peer [ 760.211478][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 760.236475][ T61] vhci_hcd: stop threads [ 760.240786][ T61] vhci_hcd: release socket [ 760.246482][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.265069][ T61] vhci_hcd: disconnect device [ 760.284162][ T8] usb 3-1: config 0 descriptor?? [ 760.364111][ T929] vhci_hcd: vhci_device speed not set [ 760.411306][T16229] sctp: [Deprecated]: syz.0.2639 (pid 16229) Use of int in max_burst socket option deprecated. [ 760.411306][T16229] Use struct sctp_assoc_value instead [ 760.841320][T13875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 761.050827][T13875] usb 1-1: Using ep0 maxpacket: 32 [ 761.136738][T13875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.197738][T13875] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 761.233049][T13875] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 761.256710][T13875] usb 1-1: Product: syz [ 761.277233][T13875] usb 1-1: config 0 descriptor?? [ 761.445778][T16239] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 761.573721][ T8] usb 3-1: string descriptor 0 read error: -71 [ 761.617593][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 761.656065][ T4535] bcm5974 3-1:0.0: could not read from device [ 761.686555][ T4535] bcm5974 3-1:0.0: could not read from device [ 761.722645][ T4535] bcm5974 3-1:0.0: could not read from device [ 761.730845][ T8] usb 3-1: USB disconnect, device number 115 [ 761.775467][ T4535] bcm5974 3-1:0.0: could not read from device [ 762.994685][T13875] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 763.006191][ T5156] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 763.013836][T13875] usb 1-1: USB disconnect, device number 10 [ 763.221396][ T5156] usb 2-1: Using ep0 maxpacket: 32 [ 763.230801][ T5156] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 763.258976][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.311893][ T5156] usb 2-1: config 0 descriptor?? [ 763.354876][ T5156] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 763.658588][ T2844] usb 2-1: Failed to submit usb control message: -71 [ 763.671502][ T8] usb 2-1: USB disconnect, device number 110 [ 763.702773][ T2844] usb 2-1: unable to send the bmi data to the device: -71 [ 763.710124][ T2844] usb 2-1: unable to get target info from device [ 763.768281][ T2844] usb 2-1: could not get target info (-71) [ 763.791245][ T2844] usb 2-1: could not probe fw (-71) [ 764.269764][T16304] FAULT_INJECTION: forcing a failure. [ 764.269764][T16304] name failslab, interval 1, probability 0, space 0, times 0 [ 764.306370][T16304] CPU: 1 PID: 16304 Comm: syz.4.2659 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 764.316281][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 764.326564][T16304] Call Trace: [ 764.329909][T16304] [ 764.332870][T16304] dump_stack_lvl+0x241/0x360 [ 764.337590][T16304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.342833][T16304] ? __pfx__printk+0x10/0x10 [ 764.347479][T16304] should_fail_ex+0x3b0/0x4e0 [ 764.352212][T16304] ? nf_tables_newtable+0x52e/0x1dc0 [ 764.357546][T16304] should_failslab+0x9/0x20 [ 764.362094][T16304] kmalloc_trace_noprof+0x6c/0x2c0 [ 764.367236][T16304] ? nft_pernet+0x23/0x240 [ 764.371703][T16304] nf_tables_newtable+0x52e/0x1dc0 [ 764.376946][T16304] ? nfnl_pernet+0x23/0x240 [ 764.381503][T16304] ? __pfx_nf_tables_newtable+0x10/0x10 [ 764.387101][T16304] ? __nla_parse+0x40/0x60 [ 764.391561][T16304] nfnetlink_rcv+0x1427/0x2a80 [ 764.396377][T16304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 764.402783][T16304] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 764.407966][T16304] ? __dev_queue_xmit+0x2d2/0x3d30 [ 764.413188][T16304] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.418603][T16304] ? skb_clone+0x240/0x390 [ 764.423061][T16304] ? __pfx_lock_release+0x10/0x10 [ 764.428148][T16304] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.433490][T16304] netlink_unicast+0x7ea/0x980 [ 764.438311][T16304] ? __pfx_netlink_unicast+0x10/0x10 [ 764.443638][T16304] ? __virt_addr_valid+0x183/0x530 [ 764.448795][T16304] ? __check_object_size+0x49c/0x900 [ 764.454122][T16304] ? bpf_lsm_netlink_send+0x9/0x10 [ 764.459283][T16304] netlink_sendmsg+0x8db/0xcb0 [ 764.464096][T16304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.469425][T16304] ? __import_iovec+0x536/0x820 [ 764.474486][T16304] ? aa_sock_msg_perm+0x91/0x160 [ 764.479462][T16304] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 764.484815][T16304] ? security_socket_sendmsg+0x87/0xb0 [ 764.490318][T16304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.495646][T16304] __sock_sendmsg+0x221/0x270 [ 764.500378][T16304] ____sys_sendmsg+0x525/0x7d0 [ 764.505215][T16304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.510572][T16304] __sys_sendmsg+0x2b0/0x3a0 [ 764.515218][T16304] ? __pfx___sys_sendmsg+0x10/0x10 [ 764.520397][T16304] ? vfs_write+0x7c4/0xc90 [ 764.524924][T16304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 764.531317][T16304] ? do_syscall_64+0x100/0x230 [ 764.536426][T16304] ? do_syscall_64+0xb6/0x230 [ 764.541158][T16304] do_syscall_64+0xf3/0x230 [ 764.545709][T16304] ? clear_bhb_loop+0x35/0x90 [ 764.550442][T16304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.556459][T16304] RIP: 0033:0x7fb4a6775bd9 [ 764.560920][T16304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.580574][T16304] RSP: 002b:00007fb4a75f5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.589041][T16304] RAX: ffffffffffffffda RBX: 00007fb4a6903f60 RCX: 00007fb4a6775bd9 [ 764.597055][T16304] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 764.605060][T16304] RBP: 00007fb4a75f50a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.613063][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.621075][T16304] R13: 000000000000000b R14: 00007fb4a6903f60 R15: 00007fb4a6a2fa78 [ 764.629114][T16304] [ 764.632312][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.011319][T10448] vhci_hcd: vhci_device speed not set [ 765.091201][T16310] sctp: [Deprecated]: syz.1.2660 (pid 16310) Use of int in max_burst socket option deprecated. [ 765.091201][T16310] Use struct sctp_assoc_value instead [ 765.368099][T16323] input: syz1 as /devices/virtual/input/input53 [ 765.384183][ T784] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 765.397364][T16323] FAULT_INJECTION: forcing a failure. [ 765.397364][T16323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.489691][T16323] CPU: 1 PID: 16323 Comm: syz.3.2665 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 765.499570][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 765.509669][T16323] Call Trace: [ 765.512988][T16323] [ 765.515959][T16323] dump_stack_lvl+0x241/0x360 [ 765.520698][T16323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.525948][T16323] ? __pfx__printk+0x10/0x10 [ 765.530684][T16323] ? snprintf+0xda/0x120 [ 765.534986][T16323] should_fail_ex+0x3b0/0x4e0 [ 765.539990][T16323] _copy_to_user+0x2f/0xb0 [ 765.544456][T16323] simple_read_from_buffer+0xca/0x150 [ 765.549973][T16323] proc_fail_nth_read+0x1e9/0x250 [ 765.555055][T16323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.560671][T16323] ? rw_verify_area+0x520/0x6b0 [ 765.565668][T16323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.571363][T16323] vfs_read+0x204/0xbc0 [ 765.575664][T16323] ? __pfx_lock_release+0x10/0x10 [ 765.580763][T16323] ? __pfx_vfs_read+0x10/0x10 [ 765.585528][T16323] ? __fget_files+0x29/0x470 [ 765.590171][T16323] ? __fget_files+0x3f6/0x470 [ 765.594908][T16323] ksys_read+0x1a0/0x2c0 [ 765.599186][T16323] ? __pfx_ksys_read+0x10/0x10 [ 765.603973][T16323] ? do_syscall_64+0x100/0x230 [ 765.608787][T16323] ? do_syscall_64+0xb6/0x230 [ 765.613481][T16323] do_syscall_64+0xf3/0x230 [ 765.618052][T16323] ? clear_bhb_loop+0x35/0x90 [ 765.622754][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.628661][T16323] RIP: 0033:0x7efde11746bc [ 765.633087][T16323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 765.652716][T16323] RSP: 002b:00007efde200c040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 765.661149][T16323] RAX: ffffffffffffffda RBX: 00007efde1303f60 RCX: 00007efde11746bc [ 765.669159][T16323] RDX: 000000000000000f RSI: 00007efde200c0b0 RDI: 0000000000000005 [ 765.677245][T16323] RBP: 00007efde200c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 765.685227][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.693236][T16323] R13: 000000000000000b R14: 00007efde1303f60 R15: 00007efde142fa78 [ 765.701233][T16323] [ 765.704369][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.741273][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 765.743134][T16326] tipc: Started in network mode [ 765.752460][T16326] tipc: Node identity 4, cluster identity 2 [ 765.758107][ T784] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 765.758791][T16326] tipc: Node number set to 4 [ 765.788906][ T784] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 765.851743][T13877] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 765.871344][ T784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.909112][ T784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 765.941127][ T784] usb 5-1: config 1 has no interface number 0 [ 765.969925][ T784] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 766.000244][ T784] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 766.013201][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.071383][T13877] usb 2-1: Using ep0 maxpacket: 32 [ 766.076170][ T784] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 766.090762][T13877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.155140][T13877] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 766.197542][T13877] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 766.227732][T13877] usb 2-1: Product: syz [ 766.247895][T13877] usb 2-1: config 0 descriptor?? [ 766.301278][ T784] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 766.340688][ T784] snd_usb_pod 5-1:1.1: invalid control EP [ 766.348938][ T784] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 766.386390][ T784] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 766.415866][ T784] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 766.891457][ T929] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 767.091653][ T929] usb 3-1: Using ep0 maxpacket: 32 [ 767.113526][ T929] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 767.149976][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.199641][ T929] usb 3-1: config 0 descriptor?? [ 767.269631][ T929] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 767.542120][ T1102] usb 3-1: Failed to submit usb control message: -71 [ 767.546448][ T929] usb 3-1: USB disconnect, device number 116 [ 767.600513][ T1102] usb 3-1: unable to send the bmi data to the device: -71 [ 767.623696][ T1102] usb 3-1: unable to get target info from device [ 767.637799][ T1102] usb 3-1: could not get target info (-71) [ 767.645115][ T1102] usb 3-1: could not probe fw (-71) [ 767.989730][T13877] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 768.068150][T13877] usb 2-1: USB disconnect, device number 111 [ 768.436077][T16370] sctp: [Deprecated]: syz.0.2676 (pid 16370) Use of int in max_burst socket option deprecated. [ 768.436077][T16370] Use struct sctp_assoc_value instead [ 768.533163][T10453] usb 5-1: USB disconnect, device number 119 [ 768.661204][T13877] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 768.857360][T13877] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 768.889027][T13877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.932479][T13877] usb 2-1: config 0 descriptor?? [ 768.969836][T16386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 768.976416][T16386] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 769.014068][T16386] vhci_hcd vhci_hcd.0: Device attached [ 769.104344][T10453] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 769.291228][ T5156] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 769.298968][T10448] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 769.331190][T10453] usb 1-1: Using ep0 maxpacket: 32 [ 769.343883][T10453] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.362011][T10453] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 769.371826][T16368] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 769.372503][T10453] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 769.386989][T16368] PKCS7: Only support pkcs7_signedData type [ 769.411313][T13877] hackrf 2-1:0.0: Board ID: 00 [ 769.424529][T13877] hackrf 2-1:0.0: Firmware version: [ 769.439413][T13877] hackrf 2-1:0.0: Registered as swradio16 [ 769.449155][T10453] usb 1-1: Product: syz [ 769.450751][T13877] hackrf 2-1:0.0: Registered as swradio17 [ 769.460754][T13877] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 769.476766][T10453] usb 1-1: config 0 descriptor?? [ 769.541911][ T5156] usb 5-1: Using ep0 maxpacket: 32 [ 769.571601][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 769.610778][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.656238][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 769.670586][T13877] usb 2-1: USB disconnect, device number 112 [ 769.707033][ T5156] usb 5-1: string descriptor 0 read error: -22 [ 769.737427][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.753744][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.161693][T16388] vhci_hcd: connection reset by peer [ 770.198711][ T13] vhci_hcd: stop threads [ 770.226160][ T13] vhci_hcd: release socket [ 770.252988][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 770.253018][ T29] audit: type=1326 audit(1721128835.168:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.4.2682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a6775bd9 code=0x0 [ 770.291280][ T13] vhci_hcd: disconnect device [ 770.328774][T13877] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 770.571985][T13877] usb 3-1: Using ep0 maxpacket: 32 [ 770.598751][T13877] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 770.632761][T13877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.694800][T13877] usb 3-1: config 0 descriptor?? [ 770.909852][T16413] sctp: [Deprecated]: syz.3.2687 (pid 16413) Use of int in max_burst socket option deprecated. [ 770.909852][T16413] Use struct sctp_assoc_value instead [ 771.372449][ T929] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 771.393463][T10453] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 771.443984][T10453] usb 1-1: USB disconnect, device number 11 [ 771.543837][ T932] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 771.601179][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 771.624600][ T929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.656848][ T929] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 771.686089][ T929] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 771.694484][ T929] usb 4-1: Product: syz [ 771.712972][ T929] usb 4-1: config 0 descriptor?? [ 771.751876][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 771.771687][ T932] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 771.791195][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.836410][ T932] usb 2-1: config 0 descriptor?? [ 771.885819][ T932] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 771.963925][T13877] usb 3-1: string descriptor 0 read error: -71 [ 771.989208][T13877] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 772.009011][ T4535] bcm5974 3-1:0.0: could not read from device [ 772.018467][ T4535] bcm5974 3-1:0.0: could not read from device [ 772.084781][ T4535] bcm5974 3-1:0.0: could not read from device [ 772.104639][T13877] usb 3-1: USB disconnect, device number 117 [ 772.107064][ T5156] cdc_ncm 5-1:1.0: bind() failure [ 772.211228][ T5156] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 772.259802][ T5156] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 772.307638][ T5156] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 772.387866][ T5156] usb 5-1: USB disconnect, device number 120 [ 772.817904][T10453] usb 2-1: USB disconnect, device number 113 [ 772.818579][ T13] usb 2-1: Failed to submit usb control message: -71 [ 772.881440][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 772.923082][ T13] usb 2-1: unable to get target info from device [ 772.938903][ T13] usb 2-1: could not get target info (-71) [ 772.945920][ T13] usb 2-1: could not probe fw (-71) [ 773.571779][T10453] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 773.763756][ T929] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 773.796495][T10453] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 773.817996][T10453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.835898][ T929] usb 4-1: USB disconnect, device number 15 [ 773.855017][T10453] usb 1-1: config 0 descriptor?? [ 774.291773][T16441] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 774.316978][T16441] PKCS7: Only support pkcs7_signedData type [ 774.345296][T10453] hackrf 1-1:0.0: Board ID: 00 [ 774.350957][T10453] hackrf 1-1:0.0: Firmware version: [ 774.379978][T10453] hackrf 1-1:0.0: Registered as swradio16 [ 774.391393][T10453] hackrf 1-1:0.0: Registered as swradio17 [ 774.397290][T10453] hackrf 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 774.441527][T10448] vhci_hcd: vhci_device speed not set [ 774.559032][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 774.597955][T10453] usb 1-1: USB disconnect, device number 12 [ 774.627196][T16482] sctp: [Deprecated]: syz.3.2707 (pid 16482) Use of int in max_burst socket option deprecated. [ 774.627196][T16482] Use struct sctp_assoc_value instead [ 774.841540][ T929] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 774.921315][ T932] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 774.962372][ T5157] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 775.022809][ T929] usb 5-1: Using ep0 maxpacket: 32 [ 775.047589][ T929] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 775.057076][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.092006][ T929] usb 5-1: config 0 descriptor?? [ 775.129109][ T929] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 775.131808][ T932] usb 2-1: Using ep0 maxpacket: 16 [ 775.191475][ T5157] usb 4-1: Using ep0 maxpacket: 32 [ 775.241896][ T5157] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.254602][ T932] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 775.317761][ T5157] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice=ff.ed [ 775.332270][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.360709][ T5157] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 775.371352][ T932] usb 2-1: Product: syz [ 775.385333][ T932] usb 2-1: Manufacturer: syz [ 775.396676][ T5157] usb 4-1: Product: syz [ 775.400984][ T932] usb 2-1: SerialNumber: syz [ 775.429121][ T932] usb 2-1: config 0 descriptor?? [ 775.434926][ T5157] usb 4-1: config 0 descriptor?? [ 775.464523][ T932] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 775.555174][ T13] usb 5-1: Failed to submit usb control message: -71 [ 775.563140][ T929] usb 5-1: USB disconnect, device number 121 [ 775.587983][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 775.620268][ T13] usb 5-1: unable to get target info from device [ 775.653628][ T13] usb 5-1: could not get target info (-71) [ 775.683481][ T13] usb 5-1: could not probe fw (-71) [ 775.717761][ T932] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 776.476482][T16514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.492719][T16514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.503615][T16515] sctp: [Deprecated]: syz.4.2714 (pid 16515) Use of int in max_burst socket option deprecated. [ 776.503615][T16515] Use struct sctp_assoc_value instead [ 776.521347][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 776.531017][T16509] sctp: [Deprecated]: syz.2.2713 (pid 16509) Use of int in max_burst socket option deprecated. [ 776.531017][T16509] Use struct sctp_assoc_value instead [ 777.051373][T13875] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 777.131212][ T929] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 777.140405][T16521] ------------[ cut here ]------------ [ 777.146748][T16521] WARNING: CPU: 1 PID: 16521 at drivers/gpu/drm/vkms/vkms_crtc.c:100 vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.158669][T16521] Modules linked in: [ 777.162743][T16521] CPU: 1 PID: 16521 Comm: syz.0.2715 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 777.172772][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 777.183090][T16521] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.190447][T16521] Code: 42 80 3c 30 00 74 08 48 89 ef e8 18 21 1a fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6e 58 b4 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 777.210325][T16521] RSP: 0018:ffffc9000a31f6c8 EFLAGS: 00010293 [ 777.216706][T16521] RAX: ffffffff85e205b2 RBX: 000000b4eecc8cd9 RCX: ffff888020b70000 [ 777.225946][T16521] RDX: 0000000000000000 RSI: 000000b4eecc8cd9 RDI: 000000b4eecc8cd9 [ 777.234539][T16521] RBP: ffffc9000a31f860 R08: ffffffff85e2051f R09: 0000000000000000 [ 777.244562][T16521] R10: ffffc9000f888000 R11: ffffffff85e20430 R12: 000000b4eecc8cd9 [ 777.252822][T16521] R13: ffff88801cb6b150 R14: 1ffff92001463f0c R15: ffff88801fb34000 [ 777.260996][T16521] FS: 0000555590541500(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 777.270230][T16521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.277162][T16521] CR2: 00007f5a2d158de0 CR3: 000000006f726000 CR4: 00000000003526f0 [ 777.285405][T16521] Call Trace: [ 777.288823][T16521] [ 777.291933][T16521] ? __warn+0x163/0x4e0 [ 777.296200][T16521] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.302203][T16521] ? report_bug+0x2b3/0x500 [ 777.306988][T16521] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.313004][T16521] ? handle_bug+0x3e/0x70 [ 777.318180][T16521] ? exc_invalid_op+0x1a/0x50 [ 777.323432][T16521] ? asm_exc_invalid_op+0x1a/0x20 [ 777.328675][T16521] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 777.335008][T16521] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 777.340778][T16521] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 777.346716][T16521] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.352633][T16521] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 777.358497][T16521] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 777.364805][T16521] drm_crtc_next_vblank_start+0x22d/0x480 [ 777.370629][T16521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 777.376763][T16521] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 777.383202][T16521] drm_atomic_helper_wait_for_fences+0x277/0x8d0 [ 777.389593][T16521] ? __asan_memcpy+0x40/0x70 [ 777.394345][T16521] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 777.401588][T16521] ? drm_atomic_helper_prepare_planes+0x65f/0xb50 [ 777.408117][T16521] drm_atomic_helper_commit+0x53a/0x9f0 [ 777.413824][T16521] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 777.421159][T16521] drm_atomic_commit+0x2ac/0x310 [ 777.426218][T16521] ? __pfx_drm_atomic_commit+0x10/0x10 [ 777.431889][T16521] ? __pfx___drm_printfn_info+0x10/0x10 [ 777.437544][T16521] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 777.444291][T16521] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 777.450777][T16521] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 777.457721][T16521] ? trace_contention_end+0x3c/0x120 [ 777.463198][T16521] ? __pfx___mutex_lock+0x10/0x10 [ 777.468361][T16521] ? drm_client_dev_restore+0xae/0x270 [ 777.474017][T16521] drm_client_modeset_commit_locked+0xe0/0x520 [ 777.480277][T16521] drm_client_modeset_commit+0x4a/0x70 [ 777.486000][T16521] drm_fb_helper_lastclose+0xbb/0x180 [ 777.491623][T16521] drm_fbdev_generic_client_restore+0x34/0x40 [ 777.497771][T16521] drm_client_dev_restore+0x132/0x270 [ 777.503289][T16521] drm_release+0x47c/0x560 [ 777.507763][T16521] ? __pfx_drm_release+0x10/0x10 [ 777.512859][T16521] __fput+0x24a/0x8a0 [ 777.516955][T16521] task_work_run+0x24f/0x310 [ 777.522326][T16521] ? __pfx_task_work_run+0x10/0x10 [ 777.527499][T16521] ? syscall_exit_to_user_mode+0xa3/0x370 [ 777.533601][T16521] syscall_exit_to_user_mode+0x168/0x370 [ 777.539451][T16521] do_syscall_64+0x100/0x230 [ 777.544731][T16521] ? clear_bhb_loop+0x35/0x90 [ 777.549484][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.555475][T16521] RIP: 0033:0x7f5a2d175bd9 [ 777.559943][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.579680][T16521] RSP: 002b:00007f5a2d42fb58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 777.588261][T16521] RAX: 0000000000000000 RBX: 00000000000bdb48 RCX: 00007f5a2d175bd9 [ 777.596378][T16521] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 777.604469][T16521] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000e2d42fe7f [ 777.612571][T16521] R10: 00007f5a2d000000 R11: 0000000000000246 R12: 00007f5a2d303f6c [ 777.620637][T16521] R13: 0000000000000032 R14: 00007f5a2d305a60 R15: 00007f5a2d303f60 [ 777.629310][T16521] [ 777.632656][T16521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 777.639967][T16521] CPU: 1 PID: 16521 Comm: syz.0.2715 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 777.649821][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 777.659998][T16521] Call Trace: [ 777.663317][T16521] [ 777.666273][T16521] dump_stack_lvl+0x241/0x360 [ 777.670995][T16521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.676232][T16521] ? __pfx__printk+0x10/0x10 [ 777.680880][T16521] ? vscnprintf+0x5d/0x90 [ 777.685262][T16521] panic+0x349/0x860 [ 777.689197][T16521] ? __warn+0x172/0x4e0 [ 777.693400][T16521] ? __pfx_panic+0x10/0x10 [ 777.697899][T16521] __warn+0x346/0x4e0 [ 777.701977][T16521] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.707835][T16521] report_bug+0x2b3/0x500 [ 777.712220][T16521] ? vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.718067][T16521] handle_bug+0x3e/0x70 [ 777.722256][T16521] exc_invalid_op+0x1a/0x50 [ 777.726801][T16521] asm_exc_invalid_op+0x1a/0x20 [ 777.731683][T16521] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0 [ 777.738135][T16521] Code: 42 80 3c 30 00 74 08 48 89 ef e8 18 21 1a fc 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6e 58 b4 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8 [ 777.757788][T16521] RSP: 0018:ffffc9000a31f6c8 EFLAGS: 00010293 [ 777.763907][T16521] RAX: ffffffff85e205b2 RBX: 000000b4eecc8cd9 RCX: ffff888020b70000 [ 777.771916][T16521] RDX: 0000000000000000 RSI: 000000b4eecc8cd9 RDI: 000000b4eecc8cd9 [ 777.779913][T16521] RBP: ffffc9000a31f860 R08: ffffffff85e2051f R09: 0000000000000000 [ 777.787915][T16521] R10: ffffc9000f888000 R11: ffffffff85e20430 R12: 000000b4eecc8cd9 [ 777.795920][T16521] R13: ffff88801cb6b150 R14: 1ffff92001463f0c R15: ffff88801fb34000 [ 777.803941][T16521] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 777.810233][T16521] ? vkms_get_vblank_timestamp+0xef/0x1b0 [ 777.816003][T16521] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 777.821859][T16521] ? vkms_get_vblank_timestamp+0x182/0x1b0 [ 777.827715][T16521] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 777.833925][T16521] drm_crtc_next_vblank_start+0x22d/0x480 [ 777.839715][T16521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 777.845755][T16521] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 777.852048][T16521] drm_atomic_helper_wait_for_fences+0x277/0x8d0 [ 777.858411][T16521] ? __asan_memcpy+0x40/0x70 [ 777.863033][T16521] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 777.869926][T16521] ? drm_atomic_helper_prepare_planes+0x65f/0xb50 [ 777.876389][T16521] drm_atomic_helper_commit+0x53a/0x9f0 [ 777.882067][T16521] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 777.888177][T16521] drm_atomic_commit+0x2ac/0x310 [ 777.893150][T16521] ? __pfx_drm_atomic_commit+0x10/0x10 [ 777.898646][T16521] ? __pfx___drm_printfn_info+0x10/0x10 [ 777.904220][T16521] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 777.910860][T16521] drm_client_modeset_commit_atomic+0x676/0x7e0 [ 777.917158][T16521] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 777.924052][T16521] ? trace_contention_end+0x3c/0x120 [ 777.929380][T16521] ? __pfx___mutex_lock+0x10/0x10 [ 777.934448][T16521] ? drm_client_dev_restore+0xae/0x270 [ 777.939950][T16521] drm_client_modeset_commit_locked+0xe0/0x520 [ 777.946149][T16521] drm_client_modeset_commit+0x4a/0x70 [ 777.951647][T16521] drm_fb_helper_lastclose+0xbb/0x180 [ 777.957051][T16521] drm_fbdev_generic_client_restore+0x34/0x40 [ 777.963161][T16521] drm_client_dev_restore+0x132/0x270 [ 777.968570][T16521] drm_release+0x47c/0x560 [ 777.973022][T16521] ? __pfx_drm_release+0x10/0x10 [ 777.977985][T16521] __fput+0x24a/0x8a0 [ 777.981991][T16521] task_work_run+0x24f/0x310 [ 777.986725][T16521] ? __pfx_task_work_run+0x10/0x10 [ 777.991882][T16521] ? syscall_exit_to_user_mode+0xa3/0x370 [ 777.997639][T16521] syscall_exit_to_user_mode+0x168/0x370 [ 778.003317][T16521] do_syscall_64+0x100/0x230 [ 778.007941][T16521] ? clear_bhb_loop+0x35/0x90 [ 778.012652][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.018579][T16521] RIP: 0033:0x7f5a2d175bd9 [ 778.023011][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.042650][T16521] RSP: 002b:00007f5a2d42fb58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 778.051422][T16521] RAX: 0000000000000000 RBX: 00000000000bdb48 RCX: 00007f5a2d175bd9 [ 778.059443][T16521] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 778.067455][T16521] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000e2d42fe7f [ 778.075718][T16521] R10: 00007f5a2d000000 R11: 0000000000000246 R12: 00007f5a2d303f6c [ 778.083732][T16521] R13: 0000000000000032 R14: 00007f5a2d305a60 R15: 00007f5a2d303f60 [ 778.091758][T16521] [ 778.095154][T16521] Kernel Offset: disabled [ 778.099604][T16521] Rebooting in 86400 seconds..