last executing test programs: 14.877313881s ago: executing program 0 (id=449): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) bind$inet(r7, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r8, @ANYRES64=r0], 0x0) 11.975245667s ago: executing program 3 (id=455): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x3ffd81, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_submit(0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000510000/0x3000)=nil, 0x3000, 0xd, 0x80010, r7, 0xa4850000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="b4030000100033060000000000000000fe880000000000000000000000000101ac1414000000000000000000000000004e22000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="ac141441000000000000000000000000000004d5330000000000000000000000000000000000000000800000000000005a91000000000000080000000000000004000000000000000400000000000000730000000000000009000000000000000100000000000000070000000000000000000000080000000002000000000000010000000100000003000000090000000500000025bd7000073500000a000200400000000000000008001d0000080000ec0002"], 0x3b4}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x800) 9.550442743s ago: executing program 2 (id=460): r0 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000580)="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", 0x1d4, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',='], 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r1, 0x7b, 0xbc}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'michael_mic-generic\x00'}}, &(0x7f00000001c0)="0e9d2f509f366942e23f4f4e288b5681fa7b55a4cf1aa56448e649534ef36718ca9688cbea7f509fc883be4b462333be399b8f7151222cfb20fe7f00a2eab968ab52f6fbdbb181fd654223e01b0bded3c1bb5df61d398fe4ba2f2c49653b465909cf580a0cda351c38d784d53c6e9cf521180ad921a0b39aaec485", &(0x7f00000004c0)=""/188) 9.165723927s ago: executing program 3 (id=462): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de9", 0x24}], 0x2}], 0x1, 0x40800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 8.565221493s ago: executing program 2 (id=464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xd8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0xde, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "2180f482fcdc"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x6, 0xf7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x2, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x80, 0x4}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x4, 0x2, 0xb, 0x40, 0x3}, 0x34, &(0x7f0000000200)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x2, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "79cf8326f9eefbb584fb922dbee43ecc"}]}, 0x4, [{0xf0, &(0x7f0000000240)=@string={0xf0, 0x3, "21b720ca82e7b072d0ac927b20fd1cf87ec9d04110308b5c22a628725d788faf7be535c3fd266a02e1bf3b28cfc69648da978d0f7a9524e9198dcabe80b3909977b4788675c0f4b1dad1ec89b8d9f6ef0af35ec9f6f2b06a104fdb1a3e3a36b8280c31dfb00152aa9b4f93a9f0623f14d4188b2a4aebefc0e67e05f13972c2abf2e97610a224ffa81d5c2cb0621fa5eba3ea697371aefb6307933ced3b7300544514bbdf246a54787e55b2576dc96fe2c886f29386c9c2ed0048d1a36b976c0109671b05781fc36780cc899ce5df71a5db3261eda773f8550c4f2a4b33af32bfbd843c70edb90a731c6b167c2765"}}, {0xb3, &(0x7f0000000340)=@string={0xb3, 0x3, "0309e351f8448d61c7a0fb4f814dd93c5fcf7cf215b9e5a361ddee8dadf2d7d86b6be291bf59092b7bff1039be2355945b898dc7a4b91c8bd46ce44fea70a72ce2a9367a94142d21e559d1745aeda3664f3ebe7c7d1a3597059af0835357e0d9360a87a7fba3817a887cb25e2d8dc7d4553daaa8bebdd581010a9480026115830904f5986335df66da49282540d850b2f701eb8ad82bc365745a8da87a1d61150afe4b7b51dc7f219abb306728c3ad76ea"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2801}}, {0xb0, &(0x7f0000000440)=@string={0xb0, 0x3, "062a53ca1f4527f59f2a8510943228f02cf803ad818a86fa6d7cffab392396827b34eaadac639bf38ed2ec92d15f39a20dccd8c5d9257bbefcb1bb7125acf254f8ff5e51ae7bae6a5aff5ad74046abbb902c218cb554951e7626bfb7f104054eea25f2d0470e384111202dd8457ea3779f611d6a2c536da321ba2c1b5ab83cd1e2d134e11b28afaf959dfa87154c04c36e766bd7d2f9dbec66918efda50b52c06f10719ff97dfca2bb4a1764de58"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7f, 0x0, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x250, 0xc7, 0x2, 0xb2}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x0, 0xe3, 0x8, 0xc9c282520823a14a, 0x5}, 0x20, &(0x7f0000000580)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "53d1c30a11a04bc2af70e5774f0aeafc"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x4, 0x6}]}, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x810}}, {0xa, &(0x7f0000000640)=@string={0xa, 0x3, "167ce3e3153eaf79"}}, {0x70, &(0x7f0000000680)=@string={0x70, 0x3, "fdacbf57cf328ab992714c6dc1e7efbab5c3ca85b4a2147982b7aa030ca745566107153b5ea23eb59eeb09a4efd9fdfb1dd6ab3e7fff08ccf21272efa1d79d51858cd3dead39f077b31785f490f9e8ac83c85526d61697653670b9fb0770559778291bb21515f87b30e3f75271a4"}}, {0x31, &(0x7f0000000700)=@string={0x31, 0x3, "546060d67ab5fa9b4cb4208f0c995825572de8f36e20d29f9b39ae248589966970b371edd7da849d0e6f516ec045e4"}}, {0x84, &(0x7f0000000740)=@string={0x84, 0x3, "87c4a13f997885ff1d6a3186b90bec3b43ffed5be35a6172ae707b29f7c7fe162c969c308d5f48736be20a23425ee3fbeeb7bb207d408d2226d8f5be5b364d7de14a21c376d4c1faf1abe35ba4ef45fa001993e0a6b780328a7933f7e544853233e7103782e1d1337f9c2d6a3a7ea1290313a6e24121e20abc6f0507ba8638fb207a"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$printer(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x20, 0x21, 0x94, {0x94, 0x30, "3edb5440fb5049f7aa64eaac0cea97d7d438d71e37afd40b42d5fd7c1f50597742c7261e0c510e6def1895a568331f79798b38589a1a8a7b75250757b89cb86827371e359a7390f6be0580ed99a2d7e998e60e0944c94a0b69dbfd0872bfa0589db95ebade71c7ce1f51fb1c6f9f5e0f9dc03b56a9c0280bb6bd0db9df5971810e50dc6cfc7f50e63f4fbdbe276a4c714b65"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000a00)={0x20, 0x15, 0x43, "f8f1b62d2cd4f0a4293dd3d81dff74e9ba659c965da0dafaf380f254ce6cccab47973bf862fab2467a5edc543759e72e9856f53df9b08345914119f6ec3855360d0736"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b00)={0x20, 0x0, 0x4e, {0x4c, "f6688f5b9cbe31d50487f1428bbd88d6cd97a1afada2adea65dc7f7fa93a1011cd2ddabfa299255f6b6a88d1e5967606e15fc5d4474aeae0374932f78af0a3c1f322e771cf40a974db64cfda"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 8.552983163s ago: executing program 0 (id=466): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0xffffffff, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.35257411s ago: executing program 4 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f73a00001000010400080000c78f055caa94", @ANYRES32=0x0, @ANYBLOB="00000000000000002700128009000100697069700000000018000280040013000800030000000000050004000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0xd}, 0x0) 7.991264838s ago: executing program 3 (id=468): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x40010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@remote}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.821406662s ago: executing program 4 (id=469): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newchain={0x2c, 0x64, 0x8, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x9, 0x27299c8023e5b7ad}, {0x2, 0x4}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x9}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6}, {0x0, 0xf}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) r12 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigqueueinfo(r12, 0x21, &(0x7f00000002c0)={0xb, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x19, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r13, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x400000, 0x5], [0x9000, 0x0, 0x0, 0x80], [0x0, 0xfffffffffffffffd, 0x2, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r14, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r15}) close_range(r2, 0xffffffffffffffff, 0x0) 6.15204153s ago: executing program 2 (id=471): r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x20082) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r2}) (async) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0x6, 0x1, "1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000400)=0x7, 0x4) (async, rerun: 32) recvmsg(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000002100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x87, 0x1, 0x8}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xa1, 0x0, @void}}}}}}}, 0x0) (async) read$char_usb(r4, &(0x7f0000000880)=""/187, 0xbb) 6.085229351s ago: executing program 0 (id=472): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x7fffffffffffffff, 0x2000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffff8, 0x800) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000140)={0x7fff, 0x3529}) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x9, 0x3, 0xd0}) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) (async) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000240)) (async) r5 = socket$kcm(0x29, 0x0, 0x0) (async) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) write$UHID_CREATE2(r3, &(0x7f0000000280)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x96, 0x7, 0x1, 0xffffffff, 0x9, 0x7e, "cf13a3216e26ca32eda81f2eabb3d9ff12ee73f8765f8d271efd373f29915654ed1a2081161fe8477e31877f4af61426f3115deeac7fdd71e03afdaf96326960c2d2318fa5132b314de2e3b995bc75ef3fa4f58c41b0b21b7f3afee2c2e8354def1fd1cb8e871e081453f15c98116268ca3c20fd856079e72be71706855f8d368483dd389444f7225fb587851c7e38303ddbeeafe3e9"}}, 0x1ae) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000440)=@arm64={0xff, 0x7, 0x2, '\x00', 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000480)={0x10000, 0x0, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) read$FUSE(r3, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000002580)={@un=@abs={0x1, 0x0, 0x4e24}, {&(0x7f0000002500)=""/1, 0x1}, &(0x7f0000002540), 0x5}, 0xa0) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000002640)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) r8 = syz_mount_image$fuse(&(0x7f0000002680), &(0x7f00000026c0)='./file0/file0\x00', 0x218001, &(0x7f0000002700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x91}}, {@max_read={'max_read', 0x3d, 0x5f}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}]}}, 0x1, 0x0, &(0x7f0000002840)="bbf790d8") (async) statx(r3, &(0x7f00000028c0)='./file0\x00', 0x100, 0x7ff, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r8, &(0x7f0000002880)='./file0\x00', r6, r9, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000002a00)=0x3, 0x4) (async) getsockopt$inet_mreqn(r3, 0x0, 0x5da2356ffd1cd7b6, &(0x7f0000002a80)={@loopback, @broadcast, 0x0}, &(0x7f0000002ac0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)=@deltfilter={0x64, 0x2d, 0x720, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xd, 0x159307543c4847f9}, {0x3, 0x10}, {0xa, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}, @TCA_RATE={0x6, 0x5, {0x9d, 0xf8}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xaeeb}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4490}, 0x40) (async) mknod$loop(&(0x7f0000002c00)='./file0/file0\x00', 0x2000, 0x1) (async) sendto$inet(r3, &(0x7f0000002c40)="b3aac1c0561a0bf97d1b6e668cb3ef992b91f0138c40f1b5deaead25bbb96f2449c23f587bdbebd3534ee54202311abf22a755879200c118497f39ca512982c452bd11aee847266743f7d94e37b3227e46da8ea9457665e6e1911c15d8cd43661ec968f14ca392144e57b0b30454171cc141ab7b950c9803e94ab1a4fd2560f0d8260aca7d30db8af37c459c0886eac90feaa7d7e453a47e886950180cb75efd78de9341fc6590a9", 0xa8, 0x200408f1, &(0x7f0000002d00)={0x2, 0x4e24, @loopback}, 0x10) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_RESIZE(r11, 0x50009403, &(0x7f0000002d40)={{r5}, {@void, @max}}) 6.023505265s ago: executing program 1 (id=473): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8001, {0x0, 0x0, 0x0, r5, {0xfff9, 0x7}, {0x0, 0xfffb}, {0x1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008884) io_uring_setup(0x177f, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4180, 0x0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f00000000c0)={0x0, 0x101, "931736ae137bd6c470257e9e1c84a8f741921ae9a316c537af4d75d4b60af9d7", 0xd093, 0xfffffffe, 0x3, 0x31515571, 0x20c}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = eventfd2(0x40004, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000040)={0x4, r11}) ioctl$KVM_HYPERV_EVENTFD(r10, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0xcf, 0x0, 0x0, 0xd, 0xfa, 0x6, 0x9, 0x3, 0x9, 0xd, 0x8, 0x6, 0x29, 0x7}, 0xe) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.676878191s ago: executing program 0 (id=474): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40004) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @sliced={0x9c1f, [0x400, 0x7, 0x0, 0x1, 0x8, 0x0, 0xffff, 0x1, 0x8, 0xfba9, 0xc, 0x9, 0x3, 0x1, 0x6, 0x4, 0xc, 0x6, 0x800, 0x1, 0x4, 0x87, 0x7, 0xb9, 0x1, 0x2, 0x3, 0x9, 0x989, 0x80, 0x3, 0x7ff, 0x10, 0x7, 0x0, 0x1, 0x9, 0x7, 0x2, 0xf0ec, 0xe, 0x7, 0x0, 0x1, 0x6, 0x5, 0x8, 0x1000], 0x5}}, 0xfffffffd}) 5.083614304s ago: executing program 1 (id=475): r0 = syz_io_uring_setup(0x460, &(0x7f0000000100)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) r4 = mq_open(&(0x7f0000000340)=':\x00', 0x40, 0x1a, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0xcbc6, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x9851, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) socket$packet(0x11, 0x3, 0x300) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) move_pages(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000000c0), 0x2) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) semget(0x0, 0x2, 0x108) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xffffff86}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x3}, 0x0) 5.079282657s ago: executing program 3 (id=476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b70200000200000085000000aa000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.7116777s ago: executing program 3 (id=477): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "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"}) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r1, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="001101ff000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b00)={0x20, 0x7, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0xa, 0x300) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x49, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x13, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x13, 0x0, @opaque="c4e349a5c7407bebfbb0bc"}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1fe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20236c0000006c23015eaf297500adf008b221a1b42a8865f73583444067c9f5b84fd0603cb191780948b900e66394306bdfc375630f995d78a9a0b2dfc2b002306a1c43da8a0fe62e12727e063281bf7cbeee755efb768a7d5859111af5a49f753e5aaaf9cf3ae462a6807a3c81fa85919e"], &(0x7f0000000100)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "2152fb61b80838acced2625ebdca06c4740f8304da1ae0dccfa4eae861d5f8183144813f6dcc8af140df9ca4d56c32a777ec3f1b5559bff51530c6e42901a4931087889674c9307f95208f77e8794efaf8f9a7bfdce0fb6b6f97e9f962408703a01e5dc75eb87de655482f446a744b13dd900da96c32bd8a5541643586b0b7ccba825e525f48bd02911a3ff8c2e7ec630cbf037cfe0e5ccf9556ad447f86451fc1fb9a2e"}}}, 0x0) 4.51844194s ago: executing program 4 (id=478): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de9", 0x24}], 0x2}], 0x1, 0x40800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 3.877381574s ago: executing program 0 (id=479): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x2, 0x1, 0x1}, {0x0, 0xf0}, 0xfd, 0xfd}], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x7, 0x7f, {{0x2e, 0x4, 0x3, 0x28, 0xb8, 0x68, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x4f, 0x1, 0x8, [{@multicast2, 0x6}, {@loopback, 0x7}, {@remote, 0xb78e}, {@loopback, 0x401}, {@private=0xa010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x7}, {@empty, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0xb, 0x32, [@empty, @empty]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0xe3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @generic={0x94, 0xb, "28121b80e8aecaf0ef"}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0x11, "a98608c674c0b546d255cc34d18acb"}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xa}, {0x1, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x8001}]}, 0x2c}}, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000340)={0x0, 0xcc4a, 0x1, 0x3, 0x2ca}, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r3, 0x5b32, 0xc72a, 0xc, &(0x7f0000000440)={[0xffff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x200200b5) socket$nl_netfilter(0x10, 0x3, 0xc) 3.713468073s ago: executing program 1 (id=480): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 3.51379826s ago: executing program 1 (id=481): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea01703c0020010000000000000000000000000002ff0200000000000000000000000000012b0a0101"], 0x0) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203", @ANYRESDEC], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) (async) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x50, 0xfffc, 0x560c, {0x803, 0x5d7}, {0xfff8, 0x7}, @period={0x58, 0xe, 0x401, 0x4f, 0xeb4, {0x200, 0x1f4, 0x9, 0x8001}, 0x0, 0x0}}) 3.395812771s ago: executing program 4 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) (async) socket$inet(0x2, 0x3, 0x8) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) (async) fcntl$setlease(r3, 0x400, 0x0) (async) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) (async) 3.273279968s ago: executing program 1 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x5, 0x4, 0x0, 0x2, 0xb49, 0xfffffffffffffff4, 0x8, 0x4a, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x4, 0x5, 0x9fdd, 0x3, 0x1, {0x1, 0x181, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x400, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040010) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100000000000080000000000000000000000f4030000000000000000000a00000708000240000000020900010073797a31", @ANYRES32=r0], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x8, 0x5, '\x00', 0x350}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.306818411s ago: executing program 4 (id=484): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004ac0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[]) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.257965113s ago: executing program 0 (id=485): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x8000000, 0x7480000, 0x2000000000000000, 0xfffffffffffffffe, 0x800000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x6, r5, 0x334, 0x10000, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffff7b}) socket$inet(0x2, 0x3, 0x4) r6 = epoll_create1(0x0) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000700)={0xa0002005}) 1.937402267s ago: executing program 2 (id=486): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80004, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'geneve1\x00', 0x200}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000240)=0x1) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r6 = socket(0xe, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) r7 = open_tree(r5, &(0x7f00000000c0)='.\x00', 0x9801) fchdir(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x77, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$dir(0xffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x183001, 0xad) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 913.026541ms ago: executing program 3 (id=487): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x20, 0x8000, 0xff, 0x1}}) sendmsg(r2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0xeeef0000, 0x18000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x35, &(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x19, 0x2, "af04"}, 0x0, 0x0, 0x0, 0x0}) 822.403718ms ago: executing program 2 (id=488): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2201, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{&(0x7f0000001600)=@can, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)="ba2b5e", 0x3}], 0x1}}], 0x2, 0x844) r5 = socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000100)={0x4, 0x1000, 0x6, 0x8, 0x5, 0x56, 0x1}, &(0x7f0000000140)={0x4000, 0x7, 0x100, 0x6, 0x147, 0x1, 0x7fffffffffffffff, 0x5}, &(0x7f0000000180)={0x5, 0x9, 0xd99, 0xee, 0x81, 0x4000000000, 0xb}, &(0x7f00000001c0)={0x77359400}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r7, r7, 0x1000, 0x5, 0x9}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) 585.311841ms ago: executing program 1 (id=489): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0xa, 0x3, 0x10000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x5, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) unshare(0x42000000) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 428.778948ms ago: executing program 2 (id=490): add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4d40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r0, 0x0, 0x4040) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) 0s ago: executing program 4 (id=491): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/51, 0x33) getdents(r5, 0x0, 0x0) syz_usb_connect(0x3, 0x3c6, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0xfd, 0x4a, 0xf3, 0x10, 0xbb4, 0xa3e, 0xd2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b4, 0x1, 0x7, 0x7, 0x48, 0x3d, [{{0x9, 0x4, 0xe2, 0x81, 0x10, 0x2e, 0x2a, 0x7f, 0x1, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x6b7}}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xc3, 0xf, "31f5"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8d, 0x4, "cedb9c7a6429c1"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0xa, 0x8, "", "e7"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x3, 0x7, "64ef"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x4}]}], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0xf8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xa, 0xa, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x40, 0x3, 0x4, [@generic={0xbf, 0x1, "23b9d4eec495fe40b2f9fbff9444cc14b0f38d14d22f8b8e021b9b495ba221ffc5e94698f48de1717f411527c297af7a4e7299e707e2f3662989b9aa1b628af408a6defb928b4ff672ab19764cd2ee5224b30e920ad4740344e128722c62543c77b8e2e2d0d13d24ec1a337fd7bb4a243da7fb96dfc43afa3941e756ac8d178a41509d137345bfba6056f67a088a24442186225935900599dd2b1cc84397c58537ed49e69e5ded2b7f87d425fb8a33ba12ea3778deeaddeb394ab77458"}, @generic={0xb2, 0x4, "7d3717b398a93224137654994c9320c96ab1b6d862b12616df1424c03f4a808ace247ab06433bde6b87ab77057750e7530cb443f4cedd11bc64a9135977adf230efeff7e483631f59840b36f3745ea8235c5ada024101c1c0429f96ba3b65a84b9d38a50f620969195af6194b7c5f59231acd2b4a426b4af80273131a8cee4846e3e6f88cb1a361d1bd8d94d69d16cd9a8a3f5a4cfee76e77372bd64cf3054c05d066945f0dc149588263ef24d6edea4"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x7f, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x77, 0x2}]}}, {{0x9, 0x5, 0xd, 0x9, 0x3ef, 0x8, 0xbc, 0xe8}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x4, 0x0, 0x4}}, {{0x9, 0x5, 0x6, 0x14, 0x20, 0x40, 0x2, 0x5, [@generic={0x90, 0x9, "81511584d9945788482b832e041794fb9321579502d7e856efa0cf83bbb38722b0f2e403834ceb0885e13938b7b787eb2838e6626c86badb6e69a8d7d7b2dd760fb8262bde5820893e180c1e4c38967df18445ab5985acb8a7962f494c6f43d046494e8348f23b7f80aa1b9bb4a2dcb11e6acd027a3276cef2b97d4ef45f508b8e2b91aff29172ace330aec81969"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x4, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x0, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x397, 0x1f, 0x3, 0x9, [@generic={0x1f, 0x23, "eb87e5adf3c6664d68bc57d63cffa678cacd66181ba3ed2d799419596f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x8, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2b, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0xe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x2}]}}, {{0x9, 0x5, 0x80, 0xd, 0x10, 0xa, 0xa7, 0xfb}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2b, 0x56, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x2, 0x8, 0x1, [@generic={0x20, 0x9, "e89f45509b3d7a641f3523d0a27b3ac6d3a932704c068339d8f7c39561fa"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0xd2, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @generic={0x4f, 0x31, "f806b1cd33f8ded03290930b26f0de054e8adc83ea1b036695010ca60161c3863d17b010748b43f32bbfa5ed89947d3726b5643b64d6bad110ec9835d42e0ae92bf4456383e37a152bb69077f6"}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0xc, 0x8, 0x3, 0x40, 0x4}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x1, [{0x4a, &(0x7f0000000b40)=@string={0x4a, 0x3, "fa5bbc6c60311d2b70a810f3de69d8dbeacff856c00e6643cbcead47c4aef775625a6ebf6b1448864526b32c03bbe0792f94d70d58bd5e1e5aa748680977e43fc33f5d9f505f54fd"}}]}) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x300, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @remote, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x552, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x74d3eb32}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "33acf3024dd2c8a2bfc0ab9aca8d054fcfee328d8ca08923b6e8123de170"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_ID={0x93, 0x3, "749f9dff78264ce6251755750c0dc3a2517de3df9befc2d9537053906dbb2f0d10b708b9f567d2f2de77f9b0b0881fe863cc691259aa7282ef5c811683518578ad6a7b8d99071f2a9a534ea251e75ced10247b6955e95d3bd026599d60b6fea302ff91c23e9220f7f552e592c78b2cede2209fe58ae1248a8c0f55815a6033ff2172c2f2c95b2eb3726f571ea64fe8"}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11d98a5b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x400c884}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff00ec311e2c812fe17aa70dedee41b7ee934f2faba95a6eee043b52a9fc557c029c4eb7f8a8e7ab8c5b730302d4d4b0185f00d80f38e92aec20f0", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280050003000100000005000d000200000008000a00", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): etting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.516347][ T5974] usb usb1-port1: unable to enumerate USB device [ 145.549995][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.571776][ T5995] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.585189][ T5995] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.602749][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.612221][ T5995] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.642874][ T5995] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.655140][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.660967][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.680739][ T5995] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.703784][ T5995] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.723920][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.745191][ T5995] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.759626][ T5995] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.773481][ T5995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.793508][ T5995] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.809288][ T5995] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.819409][ T5995] usb 2-1: Product: syz [ 145.832004][ T5995] usb 2-1: Manufacturer: syz [ 145.838876][ T5995] usb 2-1: SerialNumber: syz [ 145.856243][ T5995] usb 2-1: config 0 descriptor?? [ 145.901243][ T5995] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.905132][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 145.954120][ T43] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 146.003721][ T43] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 146.044840][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.077499][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.108395][ T43] hub 4-1:32.0: bad descriptor, ignoring hub [ 146.115123][ T43] hub 4-1:32.0: probe with driver hub failed with error -5 [ 146.423909][ T24] usb 3-1: USB disconnect, device number 8 [ 146.517604][ T43] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 148.411241][ T6365] tipc: Started in network mode [ 148.434242][ T6365] tipc: Node identity caeca8dfeca4, cluster identity 4711 [ 148.477968][ T6365] tipc: Enabled bearer , priority 0 [ 148.499527][ T6369] syzkaller0: entered promiscuous mode [ 148.523696][ T5956] usb 2-1: USB disconnect, device number 9 [ 148.567313][ T6369] syzkaller0: entered allmulticast mode [ 148.573523][ T5956] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 148.646763][ T5995] usb 4-1: USB disconnect, device number 6 [ 148.698000][ T6374] loop2: detected capacity change from 0 to 7 [ 148.728233][ T6365] tipc: Resetting bearer [ 148.747103][ T6374] Dev loop2: unable to read RDB block 7 [ 148.757545][ T6374] loop2: AHDI p1 p2 p3 [ 148.776386][ T6374] loop2: partition table partially beyond EOD, truncated [ 148.841844][ T6374] loop2: p1 start 1601398130 is beyond EOD, truncated [ 148.967977][ T6374] loop2: p2 start 1702059890 is beyond EOD, truncated [ 149.212788][ T5995] IPVS: starting estimator thread 0... [ 149.253260][ T6362] tipc: Resetting bearer [ 149.306075][ T6388] IPVS: using max 45 ests per chain, 108000 per kthread [ 149.418936][ T6362] tipc: Disabling bearer [ 149.587492][ T5995] tipc: Node number set to 642296031 [ 150.705997][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 150.845548][ T6438] netlink: 52 bytes leftover after parsing attributes in process `syz.1.100'. [ 151.694710][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 151.706580][ T6450] netlink: 31 bytes leftover after parsing attributes in process `syz.1.103'. [ 151.727328][ T6450] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 151.753058][ T6450] netlink: 'syz.1.103': attribute type 2 has an invalid length. [ 151.788035][ T6452] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 151.835790][ T6453] loop8: detected capacity change from 0 to 8 [ 151.876411][ T5928] Dev loop8: unable to read RDB block 8 [ 151.890662][ T5928] loop8: unable to read partition table [ 151.897184][ T6450] netlink: 31 bytes leftover after parsing attributes in process `syz.1.103'. [ 151.925752][ T5928] loop8: partition table beyond EOD, truncated [ 151.967203][ T6453] Dev loop8: unable to read RDB block 8 [ 151.973059][ T6453] loop8: unable to read partition table [ 152.075475][ T6453] loop8: partition table beyond EOD, truncated [ 152.082970][ T6453] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 152.175187][ T5956] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.449095][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 152.529066][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.570460][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.620986][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.641585][ T5956] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 152.663021][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.088550][ T5956] usb 1-1: config 0 descriptor?? [ 153.552520][ T6470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.623012][ T5956] apple 0003:05AC:027A.0002: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 154.399147][ T6491] netlink: 14 bytes leftover after parsing attributes in process `syz.2.109'. [ 154.417027][ T5976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.578780][ T5976] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 154.610470][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.771206][ T5976] usb 5-1: config 0 descriptor?? [ 154.901963][ T5976] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 154.986221][ T5995] usb 1-1: USB disconnect, device number 16 [ 155.134781][ T5956] IPVS: starting estimator thread 0... [ 155.238800][ T6507] IPVS: using max 28 ests per chain, 67200 per kthread [ 155.272483][ T6491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.383796][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.415793][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.524575][ T6491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.573530][ T6491] bond0 (unregistering): Released all slaves [ 155.705163][ T5995] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 155.895132][ T5995] usb 1-1: Using ep0 maxpacket: 16 [ 155.953066][ T5995] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.021011][ T5995] usb 1-1: config 0 has no interface number 0 [ 156.021461][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.293332][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.319900][ T5995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.358548][ T5976] usb 5-1: USB disconnect, device number 8 [ 156.366375][ T5956] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.572696][ T5995] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 156.588203][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.657471][ T5956] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.673054][ T5956] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.690002][ T5995] usb 1-1: Product: syz [ 156.733868][ T5995] usb 1-1: Manufacturer: syz [ 156.741919][ T5956] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.756777][ T5995] usb 1-1: SerialNumber: syz [ 156.803532][ T5956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 156.820769][ T5995] usb 1-1: config 0 descriptor?? [ 156.826699][ T5956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 156.844394][ T5995] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.873025][ T5956] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.903935][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.955410][ T5956] usb 3-1: Product: syz [ 156.960031][ T5956] usb 3-1: Manufacturer: syz [ 156.965560][ T5995] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 157.097854][ T5956] cdc_wdm 3-1:1.0: skipping garbage [ 157.129203][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.147141][ T5956] cdc_wdm 3-1:1.0: skipping garbage [ 157.173495][ T43] usb 1-1: USB disconnect, device number 17 [ 157.271590][ T5956] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 157.297454][ T5956] cdc_wdm 3-1:1.0: Unknown control protocol [ 157.352737][ T6527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.740392][ T5956] usb 3-1: USB disconnect, device number 9 [ 158.202328][ T6539] vivid-004: ================= START STATUS ================= [ 158.234664][ T6539] vivid-004: Radio HW Seek Mode: Bounded [ 158.272655][ T6539] vivid-004: Radio Programmable HW Seek: false [ 158.308305][ T6539] vivid-004: RDS Rx I/O Mode: Block I/O [ 158.313971][ T6539] vivid-004: Generate RBDS Instead of RDS: false [ 158.403989][ T6539] vivid-004: RDS Reception: true [ 158.447320][ T6539] vivid-004: RDS Program Type: 0 inactive [ 158.485752][ T6539] vivid-004: RDS PS Name: inactive [ 158.492177][ T6539] vivid-004: RDS Radio Text: inactive [ 158.505658][ T6539] vivid-004: RDS Traffic Announcement: false inactive [ 158.513290][ T6539] vivid-004: RDS Traffic Program: false inactive [ 158.533236][ T6539] vivid-004: RDS Music: false inactive [ 158.539590][ T6539] vivid-004: ================== END STATUS ================== [ 158.935931][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 158.989032][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 160.217275][ T43] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 160.357497][ T5974] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.400617][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 160.450396][ T43] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.540075][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.575426][ T5974] usb 4-1: Using ep0 maxpacket: 8 [ 160.581297][ T43] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 160.610826][ T5974] usb 4-1: config 9 has an invalid interface number: 98 but max is 0 [ 160.631015][ T5974] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 160.642165][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.679712][ T5974] usb 4-1: config 9 has no interface number 0 [ 160.687346][ T43] usb 5-1: config 0 descriptor?? [ 160.695717][ T6570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.721867][ T5974] usb 4-1: config 9 interface 98 altsetting 0 endpoint 0x3 has invalid maxpacket 53212, setting to 64 [ 160.753747][ T5974] usb 4-1: config 9 interface 98 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.908745][ T5974] usb 4-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=f3.41 [ 160.928762][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.958156][ T5974] usb 4-1: Product: syz [ 160.963138][ T5974] usb 4-1: Manufacturer: syz [ 160.969634][ T5974] usb 4-1: SerialNumber: syz [ 161.126248][ T6570] netlink: 'syz.4.130': attribute type 10 has an invalid length. [ 161.225688][ T43] cypress 0003:04B4:0001.0003: hidraw0: USB HID v1.03 Device [HID 04b4:0001] on usb-dummy_hcd.4-1/input0 [ 161.256775][ T5974] s2255 4-1:9.98: Could not find bulk-in endpoint [ 161.296332][ T5974] Sensoray 2255 driver load failed: 0xfffffff4 [ 161.319768][ T5974] s2255 4-1:9.98: probe with driver s2255 failed with error -12 [ 161.338434][ T5974] usb 4-1: USB disconnect, device number 7 [ 161.419770][ T43] usb 5-1: USB disconnect, device number 9 [ 161.792038][ T6586] fido_id[6586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.022624][ T6591] loop2: detected capacity change from 0 to 7 [ 162.276417][ T6591] Dev loop2: unable to read RDB block 7 [ 162.282951][ T6591] loop2: AHDI p1 p2 p3 [ 162.320217][ T6591] loop2: partition table partially beyond EOD, truncated [ 162.406959][ T6591] loop2: p1 start 1601398130 is beyond EOD, truncated [ 162.416081][ T6591] loop2: p2 start 1702059890 is beyond EOD, truncated [ 162.985362][ T5956] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.994008][ T5995] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.195132][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 163.200767][ T5995] usb 4-1: Using ep0 maxpacket: 16 [ 163.209139][ T5956] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 163.221205][ T5995] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.232540][ T5956] usb 3-1: config 0 has no interface number 0 [ 163.242240][ T5995] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.252895][ T5956] usb 3-1: config 0 interface 89 has no altsetting 0 [ 163.274410][ T5956] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 163.300850][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.316634][ T5995] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.345704][ T5956] usb 3-1: Product: syz [ 163.350496][ T5956] usb 3-1: Manufacturer: syz [ 163.355661][ T5956] usb 3-1: SerialNumber: syz [ 163.363488][ T5995] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.373214][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.383616][ T5995] usb 4-1: Product: syz [ 163.389651][ T5956] usb 3-1: config 0 descriptor?? [ 163.399570][ T5956] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 163.410579][ T5995] usb 4-1: Manufacturer: syz [ 163.420563][ T5956] em28xx 3-1:0.89: Video interface 89 found: bulk [ 163.427778][ T5995] usb 4-1: SerialNumber: syz [ 163.876754][ T5995] usb 4-1: 0:2 : does not exist [ 164.042273][ T5956] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 164.284858][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.304208][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.495342][ T5956] em28xx 3-1:0.89: AC97 command still being executed: not handled properly! [ 164.694896][ T5956] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 164.739163][ T5956] em28xx 3-1:0.89: board has no eeprom [ 164.756284][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.775983][ T921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.815184][ T5956] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 164.833025][ T5956] em28xx 3-1:0.89: analog set to bulk mode. [ 164.841548][ T5995] usb 4-1: USB disconnect, device number 8 [ 164.874532][ T5956] usb 3-1: USB disconnect, device number 10 [ 164.894906][ T5956] em28xx 3-1:0.89: Disconnecting em28xx [ 164.906136][ T5957] em28xx 3-1:0.89: Registering V4L2 extension [ 164.945536][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 164.948931][ T6079] udevd[6079]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.972167][ T43] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 165.018079][ T43] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 165.028959][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 165.186156][ T921] usb 5-1: config index 0 descriptor too short (expected 65297, got 77) [ 165.195141][ T921] usb 5-1: config 0 has too many interfaces: 252, using maximum allowed: 32 [ 165.205371][ T43] usb 2-1: Product: syz [ 165.213338][ T43] usb 2-1: Manufacturer: syz [ 165.218218][ T43] usb 2-1: SerialNumber: syz [ 165.232281][ T921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.291493][ T5957] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 165.309765][ T921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 252 [ 165.317925][ T43] usb 2-1: config 0 descriptor?? [ 165.331772][ T5957] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 165.363092][ T5957] em28xx 3-1:0.89: No AC97 audio processor [ 165.374801][ T921] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.400640][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.442080][ T6632] tipc: Started in network mode [ 165.449427][ T5957] usb 3-1: Decoder not found [ 165.459837][ T921] usb 5-1: Product: syz [ 165.464082][ T921] usb 5-1: Manufacturer: syz [ 165.477571][ T5957] em28xx 3-1:0.89: failed to create media graph [ 165.507435][ T6632] tipc: Node identity 62a711fab2a4, cluster identity 4711 [ 165.548059][ T921] usb 5-1: SerialNumber: syz [ 165.557171][ T5957] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 165.596357][ T6632] tipc: Enabled bearer , priority 0 [ 165.611935][ T5957] em28xx 3-1:0.89: Registering snapshot button... [ 165.620063][ T921] usb 5-1: config 0 descriptor?? [ 165.640732][ T5957] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 165.683057][ T6637] syzkaller0: entered promiscuous mode [ 165.727022][ T5957] em28xx 3-1:0.89: Remote control support is not available for this card. [ 165.731781][ T6637] syzkaller0: entered allmulticast mode [ 165.745278][ T43] usb 2-1: USB disconnect, device number 10 [ 165.830773][ T5956] em28xx 3-1:0.89: Closing input extension [ 165.850498][ T5956] em28xx 3-1:0.89: Deregistering snapshot button [ 166.072789][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 166.083131][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.4.144'. [ 166.102918][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 166.102945][ T31] audit: type=1400 audit(1756017759.605:36): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6620 comm="syz.4.144" [ 166.130439][ T6638] tipc: Resetting bearer [ 166.158037][ T5956] em28xx 3-1:0.89: Freeing device [ 166.207305][ T6638] tipc: Disabling bearer [ 166.550419][ T6646] loop2: detected capacity change from 0 to 7 [ 166.599380][ T6646] Dev loop2: unable to read RDB block 7 [ 166.620567][ T6646] loop2: AHDI p1 p2 p3 [ 166.639686][ T6646] loop2: partition table partially beyond EOD, truncated [ 166.682895][ T6646] loop2: p1 start 1601398130 is beyond EOD, truncated [ 166.737009][ T6646] loop2: p2 start 1702059890 is beyond EOD, truncated [ 167.631731][ T5943] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.886031][ T5943] usb 3-1: config 0 has no interfaces? [ 168.135125][ T5995] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.207167][ T5943] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.221339][ T5956] usb 5-1: USB disconnect, device number 10 [ 168.258097][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.281726][ T5943] usb 3-1: Product: syz [ 168.292768][ T5943] usb 3-1: Manufacturer: syz [ 168.338074][ T5995] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.449628][ T5943] usb 3-1: SerialNumber: syz [ 168.533477][ T5943] usb 3-1: config 0 descriptor?? [ 168.778968][ T5995] usb 4-1: config 0 has no interfaces? [ 168.786270][ T5995] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 168.793975][ T6680] Zero length message leads to an empty skb [ 168.802126][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.817182][ T5995] usb 4-1: config 0 descriptor?? [ 169.119606][ T6673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.156'. [ 169.155133][ T5956] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.321316][ T5956] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.541749][ T5956] usb 5-1: config 1 interface 0 has no altsetting 1 [ 169.620137][ T5976] usb 3-1: USB disconnect, device number 11 [ 169.643526][ T5956] usb 5-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 169.692690][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.735323][ T5956] usb 5-1: Product: syz [ 169.739816][ T5956] usb 5-1: Manufacturer: syz [ 169.744771][ T5956] usb 5-1: SerialNumber: syz [ 170.017399][ T5976] usb 5-1: USB disconnect, device number 11 [ 170.938386][ T5995] usb 4-1: USB disconnect, device number 9 [ 171.592672][ T31] audit: type=1400 audit(1756017765.105:37): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6711 comm="syz.4.164" [ 172.195900][ T5995] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.733550][ T5995] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.752132][ T5995] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.844621][ T5995] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.915900][ T5957] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.999152][ T5995] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.019888][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.037733][ T5995] usb 4-1: Product: syz [ 173.045515][ T5995] usb 4-1: Manufacturer: syz [ 173.050455][ T5995] usb 4-1: SerialNumber: syz [ 173.103451][ T5995] hub 4-1:1.0: bad descriptor, ignoring hub [ 173.114241][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.145167][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.158847][ T5995] hub 4-1:1.0: probe with driver hub failed with error -5 [ 173.237402][ T5957] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.248071][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.309830][ T5957] usb 3-1: SerialNumber: syz [ 173.319280][ T5995] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.097597][ T5957] usb 3-1: invalid UAC_HEADER (v1) [ 174.260673][ T5957] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 174.362568][ T5957] usb 3-1: USB disconnect, device number 12 [ 174.539303][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.676832][ T6754] usb usb8: usbfs: process 6754 (syz.1.172) did not claim interface 0 before use [ 175.085302][ T5957] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.270272][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 175.291279][ T5957] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 175.373383][ T5957] usb 3-1: config 2 has no interface number 0 [ 175.819483][ T5956] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 175.828095][ T5957] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 175.958953][ T5957] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.106372][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.187123][ T5956] usb 1-1: config 0 has no interfaces? [ 176.193044][ T5956] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 176.216448][ T5957] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 176.235457][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.265453][ T5957] usb 3-1: Product: syz [ 176.300410][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.316748][ T5957] usb 3-1: Manufacturer: syz [ 176.334543][ T5957] usb 3-1: SerialNumber: syz [ 176.356989][ T5956] usb 1-1: config 0 descriptor?? [ 176.482841][ T5957] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 176.595270][ T5957] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 177.252788][ T5995] usb 4-1: USB disconnect, device number 10 [ 177.293734][ T5995] usblp0: removed [ 177.989727][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 178.041264][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 178.146325][ T5943] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 178.526811][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 178.765531][ T5943] usb 4-1: config 3 has an invalid interface number: 28 but max is 1 [ 178.797554][ T5943] usb 4-1: config 3 has an invalid interface number: 58 but max is 1 [ 178.868435][ T5943] usb 4-1: config 3 has an invalid interface number: 65 but max is 1 [ 178.897412][ T5943] usb 4-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 178.953222][ T6775] syz.0.173 (6775): drop_caches: 2 [ 178.971298][ T5943] usb 4-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 178.993934][ T5943] usb 4-1: config 3 has no interface number 0 [ 179.008906][ T5943] usb 4-1: config 3 has no interface number 1 [ 179.089611][ T5943] usb 4-1: config 3 has no interface number 2 [ 179.125291][ T5943] usb 4-1: config 3 interface 28 altsetting 0 endpoint 0xF has invalid maxpacket 26371, setting to 1024 [ 179.210558][ T5943] usb 4-1: config 3 interface 28 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 179.286999][ T6779] syz.0.173 (6779): drop_caches: 2 [ 179.301748][ T5943] usb 4-1: too many endpoints for config 3 interface 58 altsetting 226: 62, using maximum allowed: 30 [ 179.369462][ T5943] usb 4-1: config 3 interface 58 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 179.458601][ T5957] usb 1-1: USB disconnect, device number 18 [ 179.492098][ T5943] usb 4-1: config 3 interface 65 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 179.533291][ T5943] usb 4-1: config 3 interface 58 has no altsetting 0 [ 179.705233][ T5943] usb 4-1: config 3 interface 65 has no altsetting 0 [ 179.739580][ T5995] usb 3-1: USB disconnect, device number 13 [ 179.763157][ T5943] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=45.a1 [ 179.793990][ T5995] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 179.796860][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.868715][ T5995] kobil_sct 3-1:2.45: device disconnected [ 179.883017][ T5943] usb 4-1: Product: Э [ 179.899102][ T5943] usb 4-1: Manufacturer: Ђ [ 180.001017][ T5943] usb 4-1: SerialNumber: Ј [ 180.115463][ T5957] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 180.317379][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.361149][ T5943] usb 4-1: USB disconnect, device number 11 [ 180.378775][ T5957] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.443328][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.520566][ T5957] usb 1-1: config 0 descriptor?? [ 180.572922][ T5957] pwc: Askey VC010 type 2 USB webcam detected. [ 180.695176][ T5976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 180.924164][ T5976] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 181.050451][ T5976] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.153725][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.163304][ T5943] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 181.256241][ T5976] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.335252][ T5943] usb 3-1: device descriptor read/64, error -71 [ 181.466928][ T5976] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 181.538558][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.677035][ T5943] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.815214][ T5943] usb 3-1: device descriptor read/64, error -71 [ 181.936222][ T5943] usb usb3-port1: attempt power cycle [ 182.395239][ T5943] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.461925][ T5943] usb 3-1: device descriptor read/8, error -71 [ 182.716607][ T5943] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.763921][ T5943] usb 3-1: device descriptor read/8, error -71 [ 182.886014][ T5943] usb usb3-port1: unable to enumerate USB device [ 182.898225][ T6804] delete_channel: no stack [ 182.928049][ T5957] pwc: recv_control_msg error -71 req 02 val 2b00 [ 182.974631][ T5957] pwc: recv_control_msg error -71 req 02 val 2700 [ 183.019968][ T5957] pwc: recv_control_msg error -71 req 02 val 2c00 [ 183.050659][ T5957] pwc: recv_control_msg error -71 req 04 val 1000 [ 183.088653][ T5957] pwc: recv_control_msg error -71 req 04 val 1300 [ 183.157260][ T5957] pwc: recv_control_msg error -71 req 04 val 1400 [ 183.199749][ T5957] pwc: recv_control_msg error -71 req 02 val 2000 [ 183.219158][ T5957] pwc: recv_control_msg error -71 req 02 val 2100 [ 183.300913][ T5957] pwc: recv_control_msg error -71 req 04 val 1500 [ 183.366680][ T5957] pwc: recv_control_msg error -71 req 02 val 2500 [ 183.390385][ T5957] pwc: recv_control_msg error -71 req 02 val 2400 [ 183.425211][ T5957] pwc: recv_control_msg error -71 req 02 val 2600 [ 183.459434][ T5957] pwc: recv_control_msg error -71 req 02 val 2900 [ 183.483784][ T5956] usb 2-1: USB disconnect, device number 11 [ 183.523450][ T5957] pwc: recv_control_msg error -71 req 02 val 2800 [ 183.535545][ T5957] pwc: recv_control_msg error -71 req 04 val 1100 [ 183.559640][ T5957] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.632750][ T5957] pwc: Registered as video103. [ 183.750204][ T5957] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 183.884171][ T5957] usb 1-1: USB disconnect, device number 19 [ 183.935191][ T5943] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.140149][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.218709][ T5943] usb 2-1: config 0 has no interfaces? [ 184.235140][ T5943] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 184.403987][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 184.414859][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.441581][ T6863] : entered promiscuous mode [ 184.495144][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.530122][ T5943] usb 2-1: config 0 descriptor?? [ 184.536365][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.192'. [ 185.082019][ T5936] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.379828][ T5936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.432012][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.507977][ T5936] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 185.537683][ T5936] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.555253][ T5974] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.565554][ T5936] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.580698][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.596582][ T5936] usb 4-1: SerialNumber: syz [ 185.736312][ T6885] syz.1.190 (6885): drop_caches: 2 [ 185.762392][ T5974] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.786615][ T5974] usb 5-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 185.919187][ T5936] usb 4-1: 0:2 : does not exist [ 185.937683][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.954002][ T5936] usb 4-1: unit 5 not found! [ 185.977963][ T6886] syz.1.190 (6886): drop_caches: 2 [ 186.031764][ T5936] usb 4-1: USB disconnect, device number 12 [ 186.076336][ T5974] usb 5-1: Product: syz [ 186.109769][ T5974] usb 5-1: Manufacturer: syz [ 186.252464][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.278509][ T5974] usb 5-1: SerialNumber: syz [ 186.415936][ T5936] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 186.585215][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 186.614129][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.699334][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 186.811767][ T5936] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 186.827151][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.849085][ T5936] usb 4-1: Product: syz [ 186.871710][ T5936] usb 4-1: Manufacturer: syz [ 186.898217][ T5936] usb 4-1: SerialNumber: syz [ 186.924438][ T5936] usb 4-1: config 0 descriptor?? [ 187.105857][ T5957] usb 2-1: USB disconnect, device number 12 [ 187.143093][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.155449][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.252265][ T6902] xt_policy: too many policy elements [ 187.268299][ T5936] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 187.361753][ T5936] usb 4-1: USB disconnect, device number 13 [ 187.660716][ T6912] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 187.790083][ T6912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.100737][ T5974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.162443][ T5974] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 188.188619][ T5974] usb 5-1: USB disconnect, device number 12 [ 188.288695][ T6918] bond1: (slave veth3): Enslaving as an active interface with a down link [ 188.289043][ T6922] warning: `syz.0.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.311687][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.503698][ T6939] bridge1: entered promiscuous mode [ 189.517343][ T6945] loop4: detected capacity change from 0 to 1 [ 189.546795][ T6939] bridge1: entered allmulticast mode [ 189.574922][ T6945] Dev loop4: unable to read RDB block 1 [ 189.584150][ T6945] loop4: unable to read partition table [ 189.597182][ T6945] loop4: partition table beyond EOD, truncated [ 189.630246][ T6945] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 189.911380][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.205'. [ 191.205132][ T5956] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 191.256020][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 191.437735][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.474423][ T5956] usb 4-1: config 0 has no interfaces? [ 191.535380][ T5956] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 191.603063][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.705803][ T5956] usb 4-1: config 0 descriptor?? [ 191.909861][ T6991] vivid-000: disconnect [ 191.928823][ T6991] vivid-000: reconnect [ 192.092181][ T6997] loop2: detected capacity change from 0 to 7 [ 192.158242][ T5928] Dev loop2: unable to read RDB block 7 [ 192.185198][ T5928] loop2: AHDI p1 p2 p3 [ 192.215094][ T5928] loop2: partition table partially beyond EOD, truncated [ 192.244014][ T5928] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.453377][ T5928] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.480514][ T6997] Dev loop2: unable to read RDB block 7 [ 192.487284][ T6997] loop2: AHDI p1 p2 p3 [ 192.496606][ T6997] loop2: partition table partially beyond EOD, truncated [ 192.514377][ T6997] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.531732][ T6997] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.575215][ T5956] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 192.886134][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 192.900601][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.932649][ T5956] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 192.962256][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.091099][ T5956] usb 3-1: config 0 descriptor?? [ 193.821560][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 193.830647][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.875385][ T5956] usb 3-1: USB disconnect, device number 18 [ 194.007570][ T5957] usb 4-1: USB disconnect, device number 14 [ 194.129052][ T7019] mZ`Ԁ@: entered promiscuous mode [ 194.185200][ T7023] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 194.304165][ T7023] binder: 7021:7023 unknown command 0 [ 194.327495][ T7023] binder: 7021:7023 ioctl c0306201 200000000080 returned -22 [ 194.456888][ T5974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.647736][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.684258][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.684295][ T5974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.692324][ T5974] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.692363][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.698574][ T5974] usb 5-1: config 0 descriptor?? [ 194.851766][ T5943] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.032062][ T7036] tty tty2: ldisc open failed (-12), clearing slot 1 [ 195.055350][ T5943] usb 1-1: device descriptor read/64, error -71 [ 195.135125][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 195.285705][ T5974] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 195.315164][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 195.322990][ T43] usb 3-1: config index 0 descriptor too short (expected 46935, got 18) [ 195.349351][ T5974] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.363071][ T5943] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.375573][ T43] usb 3-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 195.385572][ T5957] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.431553][ T43] usb 3-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 195.445477][ T43] usb 3-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 195.470885][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 195.535570][ T5943] usb 1-1: device descriptor read/64, error -71 [ 195.635075][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.644761][ T43] usb 3-1: Product: syz [ 195.649678][ T43] usb 3-1: Manufacturer: syz [ 195.654739][ T43] usb 3-1: SerialNumber: syz [ 195.661315][ T5943] usb usb1-port1: attempt power cycle [ 195.695291][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 195.703378][ T5957] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 195.721595][ T5957] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 195.743638][ T5957] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 195.802968][ T5957] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 195.833437][ T5957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.855101][ T5957] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 195.867782][ T5957] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 196.017472][ T5957] usb 2-1: Product: syz [ 196.050234][ T5957] usb 2-1: Manufacturer: syz [ 196.078565][ T5957] usb 2-1: SerialNumber: syz [ 196.115122][ T5943] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 196.137827][ T5943] usb 1-1: device descriptor read/8, error -71 [ 196.141608][ T5957] usb 2-1: config 0 descriptor?? [ 196.172885][ T5957] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 196.194139][ T5957] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 196.265281][ T5957] usb 3-1: USB disconnect, device number 19 [ 196.385718][ T5943] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 196.450660][ T5943] usb 1-1: device descriptor read/8, error -71 [ 196.539748][ T5957] usb 2-1: USB disconnect, device number 13 [ 196.575460][ T5943] usb usb1-port1: unable to enumerate USB device [ 196.596464][ T5957] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 196.799059][ T5943] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 197.729425][ T7072] binder: 7071:7072 ioctl c0306201 2000000001c0 returned -22 [ 198.602046][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 198.705993][ T7085] batman_adv: batadv0: Adding interface: ipvlan2 [ 198.712890][ T7085] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.769010][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.788588][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.805302][ T7085] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 198.885147][ T5943] usb 5-1: device descriptor read/64, error -71 [ 198.948701][ T7094] netlink: 'syz.0.235': attribute type 12 has an invalid length. [ 199.037235][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 199.155162][ T5943] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 199.349669][ T5943] usb 5-1: device reset changed ep0 maxpacket size! [ 199.389873][ T24] usb 5-1: USB disconnect, device number 13 [ 199.595784][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 199.655175][ T5943] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.755055][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 199.763242][ T24] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 199.773767][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.804327][ T24] usb 5-1: config 0 descriptor?? [ 199.817019][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 199.837966][ T24] as10x_usb: device has been detected [ 199.847492][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 199.871511][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 199.902842][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.947947][ T5943] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.960726][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.979928][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 199.990462][ T5943] usb 2-1: Product: syz [ 199.996678][ T5943] usb 2-1: Manufacturer: syz [ 200.003655][ T5943] usb 2-1: SerialNumber: syz [ 200.023699][ T5943] usb 2-1: config 0 descriptor?? [ 200.037410][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.050849][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.069667][ T24] as10x_usb: error during firmware upload part1 [ 200.079187][ T5943] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 200.095802][ T24] Registered device nBox DVB-T Dongle [ 200.097892][ T5943] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 200.113827][ T24] usb 5-1: USB disconnect, device number 14 [ 200.139034][ T24] Unregistered device nBox DVB-T Dongle [ 200.140663][ T24] as10x_usb: device has been disconnected [ 200.747497][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.754015][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.761182][ T5943] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 200.792128][ T5943] em28xx 2-1:0.0: Config register raw data: 0x00 [ 201.946323][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 201.955173][ T5957] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 202.130172][ T5957] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 202.149289][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.204132][ T5957] usb 5-1: Product: syz [ 202.205829][ T43] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.209463][ T5957] usb 5-1: Manufacturer: syz [ 202.293997][ T5957] usb 5-1: SerialNumber: syz [ 202.295026][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.383345][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.451414][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.474021][ T7127] fuse: Invalid rootmode [ 202.494133][ T7127] capability: warning: `syz.3.244' uses 32-bit capabilities (legacy support in use) [ 202.571623][ T43] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.594751][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.609506][ T43] usb 1-1: Product: syz [ 202.614217][ T43] usb 1-1: Manufacturer: syz [ 202.635201][ T5943] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 202.655453][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 202.663626][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 202.680677][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 202.708651][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 202.798080][ T5943] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 202.808085][ T5943] usb 3-1: config 0 has no interface number 0 [ 202.820702][ T5943] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 202.839609][ T5943] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 202.855501][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.874900][ T5943] usb 3-1: Product: syz [ 202.905266][ T5943] usb 3-1: Manufacturer: syz [ 202.910161][ T5943] usb 3-1: SerialNumber: syz [ 202.984489][ T5943] usb 3-1: config 0 descriptor?? [ 202.996780][ T7125] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 203.025280][ T5943] usb-storage 3-1:0.20: USB Mass Storage device detected [ 203.103355][ T5943] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 203.219975][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 203.235720][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.266319][ T5956] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 203.367453][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.475210][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 203.482504][ T5956] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 203.520704][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.533009][ T5943] scsi host1: usb-storage 3-1:0.20 [ 203.562228][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.566434][ T5943] usb 3-1: USB disconnect, device number 20 [ 203.587283][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.616055][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.627842][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.644528][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.692597][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 203.707882][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.738966][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.740310][ T3094] usb 1-1: USB disconnect, device number 24 [ 203.765469][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.782300][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.794909][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.811331][ T5957] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 203.821585][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.837756][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 203.855265][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 203.864453][ T5957] usb 5-1: USB disconnect, device number 15 [ 203.872325][ T5956] usb 4-1: SerialNumber: syz [ 203.921728][ T5956] usb 4-1: config 0 descriptor?? [ 203.957713][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 204.012103][ T43] usb 2-1: USB disconnect, device number 14 [ 204.020582][ T43] em28xx 2-1:0.0: Disconnecting em28xx [ 204.037100][ T43] em28xx 2-1:0.0: Freeing device [ 204.113575][ T7146] dlm: non-version read from control device 8224 [ 204.125420][ T7146] dlm: non-version read from control device 8224 [ 204.169643][ T5219] bcm5974 4-1:0.0: could not read from device [ 204.229232][ T5219] bcm5974 4-1:0.0: could not read from device [ 204.236282][ T5956] usb 4-1: USB disconnect, device number 15 [ 204.712137][ T3094] IPVS: starting estimator thread 0... [ 204.931011][ T7160] IPVS: using max 47 ests per chain, 112800 per kthread [ 205.119080][ T5943] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.297330][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.314283][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.476216][ T5943] usb 5-1: config 1 interface 1 has no altsetting 0 [ 205.644065][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.654700][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.663009][ T5943] usb 5-1: Product: syz [ 205.672855][ T5943] usb 5-1: Manufacturer: syz [ 205.678697][ T5943] usb 5-1: SerialNumber: syz [ 205.778083][ T5943] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 205.786868][ T5943] cdc_mbim 5-1:1.0: bind() failure [ 205.885546][ T5995] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.027695][ T5943] usb 5-1: USB disconnect, device number 16 [ 206.345157][ T5995] usb 4-1: Using ep0 maxpacket: 8 [ 206.406120][ T5995] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 206.430441][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.459963][ T5995] usb 4-1: Product: syz [ 206.464407][ T5995] usb 4-1: Manufacturer: syz [ 206.501636][ T5995] usb 4-1: SerialNumber: syz [ 206.556485][ T5995] usb 4-1: config 0 descriptor?? [ 206.695269][ T5957] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.845263][ T5957] usb 5-1: device descriptor read/64, error -71 [ 207.085205][ T5957] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.225307][ T5957] usb 5-1: device descriptor read/64, error -71 [ 207.345590][ T5957] usb usb5-port1: attempt power cycle [ 207.683508][ T7196] IPv6: NLM_F_REPLACE set, but no existing node found! [ 207.696044][ T5957] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.763677][ T5957] usb 5-1: device descriptor read/8, error -71 [ 208.026514][ T5957] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 208.056369][ T5957] usb 5-1: device descriptor read/8, error -71 [ 208.165638][ T5957] usb usb5-port1: unable to enumerate USB device [ 208.323657][ T5995] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 208.353691][ T5995] gspca_sunplus: reg_w_riv err -71 [ 208.369472][ T5995] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 208.405328][ T5995] usb 4-1: USB disconnect, device number 16 [ 208.441513][ T7209] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 208.487007][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.516698][ T7209] bond0: (slave team0): Enslaving as an active interface with an up link [ 209.674557][ T7227] netlink: 56 bytes leftover after parsing attributes in process `syz.0.266'. [ 210.041047][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.786893][ T24] usb 2-1: device descriptor read/64, error -71 [ 210.900462][ T3094] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 211.035115][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.075359][ T3094] usb 5-1: Using ep0 maxpacket: 8 [ 211.089050][ T3094] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 211.105305][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.123962][ T3094] usb 5-1: Product: syz [ 211.139817][ T3094] usb 5-1: Manufacturer: syz [ 211.149256][ T3094] usb 5-1: SerialNumber: syz [ 211.185404][ T24] usb 2-1: device descriptor read/64, error -71 [ 211.220741][ T3094] usb 5-1: config 0 descriptor?? [ 211.309932][ T24] usb usb2-port1: attempt power cycle [ 211.434491][ T3094] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.723576][ T3094] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 211.739128][ T3094] usb 5-1: USB disconnect, device number 21 [ 211.785071][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.686839][ T24] usb 2-1: device descriptor read/8, error -71 [ 213.275235][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 213.465109][ T24] usb 2-1: config index 0 descriptor too short (expected 72, got 66) [ 213.513221][ T24] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 213.738835][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 213.873792][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.219636][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.308796][ T24] usb 2-1: Product: syz [ 214.313257][ T24] usb 2-1: Manufacturer: syz [ 214.335076][ T24] usb 2-1: SerialNumber: syz [ 214.411949][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.632628][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.292695][ T5957] usb 2-1: USB disconnect, device number 18 [ 215.558533][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.609787][ T7275] tipc: Started in network mode [ 215.614807][ T7275] tipc: Node identity 061bbfdfea8, cluster identity 4711 [ 215.635830][ T7275] tipc: Enabled bearer , priority 0 [ 215.672022][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 215.715787][ T43] ath9k_htc: Failed to initialize the device [ 215.728752][ T7275] tipc: Resetting bearer [ 215.740267][ T5957] usb 2-1: ath9k_htc: USB layer deinitialized [ 215.886261][ T7274] tipc: Disabling bearer [ 215.982475][ T7280] bridge: RTM_NEWNEIGH with invalid ether address [ 216.016336][ T7287] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 216.095270][ T5943] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 216.148491][ T7289] macvtap1: entered promiscuous mode [ 216.181832][ T7289] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 216.210768][ T7289] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 216.275225][ T5943] usb 5-1: device descriptor read/64, error -71 [ 216.290327][ T7287] syz_tun: entered promiscuous mode [ 216.530380][ T5943] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 216.575828][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 216.738496][ T5943] usb 5-1: device descriptor read/64, error -71 [ 216.790422][ T24] usb 2-1: config 0 has no interfaces? [ 216.825280][ T24] usb 2-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 216.841207][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.857491][ T5943] usb usb5-port1: attempt power cycle [ 216.866610][ T24] usb 2-1: Product: syz [ 216.895086][ T24] usb 2-1: Manufacturer: syz [ 216.899901][ T24] usb 2-1: SerialNumber: syz [ 217.095889][ T24] usb 2-1: config 0 descriptor?? [ 217.348373][ T5943] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 217.365208][ T7297] bond_slave_1: entered promiscuous mode [ 217.380006][ T7292] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 217.391138][ T7297] bond_slave_1: left promiscuous mode [ 217.406522][ T5943] usb 5-1: device descriptor read/8, error -71 [ 217.423366][ T7292] netlink: 'syz.1.285': attribute type 8 has an invalid length. [ 217.855796][ T7292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.285'. [ 217.888831][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.925051][ T5943] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 217.975394][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.986614][ T5943] usb 5-1: device descriptor read/8, error -71 [ 218.079375][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.103464][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.111979][ T5943] usb usb5-port1: unable to enumerate USB device [ 218.515154][ T5956] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.675268][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 218.683680][ T5956] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 218.702611][ T5956] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 218.838035][ T5956] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 218.923489][ T5956] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 218.991855][ T5956] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 219.273205][ T5974] usb 2-1: USB disconnect, device number 19 [ 219.365205][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.403285][ T5956] usb 4-1: Product: syz [ 219.414523][ T5956] usb 4-1: Manufacturer: syz [ 219.440268][ T5956] usb 4-1: SerialNumber: syz [ 219.528941][ T5956] hso 4-1:6.0: Can't find BULK OUT endpoint [ 219.768271][ T5974] usb 4-1: USB disconnect, device number 17 [ 220.193124][ T7325] syz.2.293 (7325): drop_caches: 2 [ 220.228882][ T7330] syz.2.293 (7330): drop_caches: 2 [ 220.855634][ T5974] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 220.995374][ T5957] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.036932][ T5974] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 221.073774][ T5974] usb 1-1: config 0 has no interface number 0 [ 221.104251][ T5974] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 221.150057][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.188143][ T5974] usb 1-1: Product: syz [ 221.225076][ T5974] usb 1-1: Manufacturer: syz [ 221.240503][ T5974] usb 1-1: SerialNumber: syz [ 221.757870][ T5974] usb 1-1: config 0 descriptor?? [ 221.766103][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 221.775014][ T5957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.795845][ T5957] usb 4-1: config 248 has an invalid interface number: 242 but max is 0 [ 221.804836][ T5957] usb 4-1: config 248 has no interface number 0 [ 221.811392][ T5957] usb 4-1: config 248 interface 242 has no altsetting 0 [ 221.869852][ T5957] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 221.904003][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.919166][ T5957] usb 4-1: Product: 랖訌䣵웵粆Ꞑ [ 221.925836][ T5957] usb 4-1: SerialNumber: Ј [ 222.217835][ T5974] usb 1-1: Firmware: major: 154, minor: 51, hardware type: ATUSB (1) [ 222.429936][ T5974] usb 1-1: failed to fetch extended address, random address set [ 222.593415][ T31] audit: type=1326 audit(1756017816.065:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 222.675458][ T31] audit: type=1326 audit(1756017816.065:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 222.725402][ T5974] usb 1-1: USB disconnect, device number 25 [ 222.805092][ T31] audit: type=1326 audit(1756017816.065:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 222.892252][ T31] audit: type=1326 audit(1756017816.065:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 222.924584][ T5957] quatech2 4-1:248.242: Quatech 2nd gen USB to Serial Driver converter detected [ 222.952366][ T31] audit: type=1326 audit(1756017816.065:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 222.978416][ T5957] usb 4-1: qt2_attach - failed to power on unit: -71 [ 223.000745][ T5957] quatech2 4-1:248.242: probe with driver quatech2 failed with error -71 [ 223.022731][ T5957] usb 4-1: USB disconnect, device number 18 [ 223.032934][ T31] audit: type=1326 audit(1756017816.065:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 223.058279][ T31] audit: type=1326 audit(1756017816.065:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 223.395252][ T31] audit: type=1326 audit(1756017816.065:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 223.484530][ T31] audit: type=1326 audit(1756017816.065:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 223.608251][ T31] audit: type=1326 audit(1756017816.065:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 223.664068][ T7365] usb usb8: usbfs: process 7365 (syz.0.305) did not claim interface 0 before use [ 226.547522][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.558408][ T7392] team0: Port device batadv1 added [ 228.139052][ T7407] netlink: 188 bytes leftover after parsing attributes in process `syz.1.315'. [ 228.401184][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 228.407514][ T5884] Bluetooth: hci2: command 0x0406 tx timeout [ 228.418102][ T5884] Bluetooth: hci4: command 0x0405 tx timeout [ 228.419441][ T5881] Bluetooth: hci0: command 0x0406 tx timeout [ 228.425813][ T5884] Bluetooth: hci3: command 0x0406 tx timeout [ 229.202477][ T7416] netlink: 'syz.0.312': attribute type 11 has an invalid length. [ 229.775494][ T7427] usb usb8: usbfs: process 7427 (syz.1.318) did not claim interface 0 before use [ 231.516243][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 231.705472][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 231.730639][ T43] usb 5-1: config 0 has no interfaces? [ 231.743727][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.755397][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.763853][ T43] usb 5-1: Product: syz [ 231.810894][ T43] usb 5-1: Manufacturer: syz [ 231.832082][ T43] usb 5-1: SerialNumber: syz [ 231.872437][ T43] usb 5-1: config 0 descriptor?? [ 234.455250][ T5995] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 234.655439][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.705559][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.749662][ T5995] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 234.795451][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.880080][ T5995] usb 3-1: config 0 descriptor?? [ 235.374181][ T921] usb 5-1: USB disconnect, device number 26 [ 236.048200][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 236.048223][ T31] audit: type=1326 audit(1756017829.535:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.048920][ T7493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.054683][ T31] audit: type=1326 audit(1756017829.585:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.054731][ T31] audit: type=1326 audit(1756017829.585:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.276814][ T31] audit: type=1326 audit(1756017829.585:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.351031][ T31] audit: type=1326 audit(1756017829.675:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.411254][ T31] audit: type=1326 audit(1756017829.675:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 236.832177][ T31] audit: type=1326 audit(1756017829.685:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 237.036830][ T31] audit: type=1326 audit(1756017829.755:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 237.139835][ T31] audit: type=1326 audit(1756017829.755:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 237.166963][ T31] audit: type=1326 audit(1756017829.755:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x7ffc0000 [ 237.194361][ T7506] fuse: Bad value for 'fd' [ 237.905117][ T921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 237.945244][ T5943] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 238.007931][ T5995] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71 [ 238.096875][ T5943] usb 2-1: device descriptor read/64, error -71 [ 238.125173][ T921] usb 4-1: Using ep0 maxpacket: 8 [ 238.133495][ T921] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 238.208915][ T921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.287436][ T5995] usb 3-1: USB disconnect, device number 21 [ 238.307890][ T921] usb 4-1: config 0 descriptor?? [ 238.390411][ T5943] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 238.400578][ T7525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.340'. [ 238.545287][ T5943] usb 2-1: device descriptor read/64, error -71 [ 238.591894][ T921] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 238.665674][ T5943] usb usb2-port1: attempt power cycle [ 239.005338][ T5943] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 239.040286][ T5943] usb 2-1: device descriptor read/8, error -71 [ 239.285067][ T5943] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 239.308453][ T5943] usb 2-1: device descriptor read/8, error -71 [ 239.415635][ T5943] usb usb2-port1: unable to enumerate USB device [ 239.984456][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.344'. [ 241.128227][ T921] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.189770][ T921] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 241.262599][ T921] asix 4-1:0.0: probe with driver asix failed with error -71 [ 241.311343][ T921] usb 4-1: USB disconnect, device number 19 [ 241.804176][ T3094] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 242.062159][ T5943] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 242.187752][ T3094] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.205583][ T3094] usb 2-1: config 0 has no interfaces? [ 242.215781][ T3094] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 242.226699][ T3094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.248150][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.264621][ T5943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.280849][ T3094] usb 2-1: config 0 descriptor?? [ 242.313318][ T5943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.325791][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.419012][ T5943] usb 1-1: Product: syz [ 242.429607][ T5943] usb 1-1: Manufacturer: syz [ 242.434482][ T5943] usb 1-1: SerialNumber: syz [ 242.838061][ T5943] usb 1-1: 0:2 : does not exist [ 242.879697][ T5943] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 242.998892][ T5943] usb 1-1: USB disconnect, device number 26 [ 243.009355][ T7577] syz.1.348 (7577): drop_caches: 2 [ 243.190649][ T7578] syz.1.348 (7578): drop_caches: 2 [ 243.202038][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.428612][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'. [ 243.450766][ T7584] loop2: detected capacity change from 0 to 7 [ 243.482023][ T5928] Dev loop2: unable to read RDB block 7 [ 243.497818][ T5928] loop2: AHDI p1 p2 p3 [ 243.512452][ T5928] loop2: partition table partially beyond EOD, truncated [ 243.535926][ T5928] loop2: p1 start 1601398130 is beyond EOD, truncated [ 243.554329][ T5928] loop2: p2 start 1702059890 is beyond EOD, truncated [ 243.578506][ T7584] Dev loop2: unable to read RDB block 7 [ 243.613628][ T7584] loop2: AHDI p1 p2 p3 [ 243.655406][ T7584] loop2: partition table partially beyond EOD, truncated [ 243.693475][ T7584] loop2: p1 start 1601398130 is beyond EOD, truncated [ 243.704651][ T7584] loop2: p2 start 1702059890 is beyond EOD, truncated [ 244.645678][ T5943] usb 2-1: USB disconnect, device number 24 [ 245.720251][ T7620] loop8: detected capacity change from 0 to 8 [ 245.739122][ T7620] Dev loop8: unable to read RDB block 8 [ 245.764200][ T7620] loop8: unable to read partition table [ 245.791324][ T7620] loop8: partition table beyond EOD, truncated [ 245.805093][ T7620] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 246.255219][ T5957] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 246.430514][ T7633] loop2: detected capacity change from 0 to 7 [ 246.443658][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 246.450332][ T7633] Dev loop2: unable to read RDB block 7 [ 246.451024][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.483298][ T7633] loop2: AHDI p1 p2 p3 [ 246.485065][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.502374][ T7633] loop2: partition table partially beyond EOD, truncated [ 246.515132][ T5943] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 246.519346][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.526542][ T7633] loop2: p1 start 1601398130 is beyond EOD, truncated [ 246.548106][ T7633] loop2: p2 start 1702059890 is beyond EOD, truncated [ 246.574909][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.591676][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.620527][ T5957] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.642799][ T5957] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.676583][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 246.685113][ T5957] usb 1-1: Manufacturer: syz [ 246.714399][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.720092][ T5957] usb 1-1: config 0 descriptor?? [ 246.749335][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.759997][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.779019][ T7636] tipc: Started in network mode [ 246.784171][ T7636] tipc: Node identity 5e7e3531fe5a, cluster identity 4711 [ 246.828858][ T5943] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 246.862492][ T7636] tipc: Enabled bearer , priority 0 [ 246.869703][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.886571][ T5943] usb 5-1: config 0 descriptor?? [ 246.911698][ T5943] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 246.977955][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.004620][ T7635] tipc: Disabling bearer [ 247.063927][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.126904][ T7631] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.146724][ T6540] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.161206][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.182458][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.210021][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.345166][ T5943] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.370013][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.414423][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.443017][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.462535][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.475165][ T5957] rc_core: IR keymap rc-hauppauge not found [ 247.481165][ T5957] Registered IR keymap rc-empty [ 247.526292][ T5219] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 247.539698][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.544680][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.559503][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 247.580284][ T5943] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 247.585179][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.597934][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.601130][ T5943] usb 3-1: config 0 has no interface number 0 [ 247.644201][ T5943] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 247.701866][ T5957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 247.740447][ T5943] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 247.763512][ T43] usb 5-1: USB disconnect, device number 27 [ 247.767346][ T5957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 247.793618][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.822421][ T5943] usb 3-1: Product: syz [ 247.848407][ T5943] usb 3-1: Manufacturer: syz [ 247.854807][ T5943] usb 3-1: SerialNumber: syz [ 247.893109][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.896129][ T5943] usb 3-1: config 0 descriptor?? [ 247.936759][ T7642] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 247.968230][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.015563][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.109531][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.177832][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.239799][ T7663] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 248.749523][ T5943] net1080 3-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 6a:27:33:00:db:5e [ 249.195370][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.215180][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.246564][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.265144][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.613702][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.689800][ T5957] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 249.715129][ T5957] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 250.341673][ T7680] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 250.400082][ T5956] usb 3-1: USB disconnect, device number 22 [ 250.431065][ T5956] net1080 3-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 250.738750][ T7680] bond1: entered promiscuous mode [ 250.744461][ T7680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.855549][ T5957] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 251.087530][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.152191][ T5957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.194624][ T5957] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.228976][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 251.258678][ T5995] usb 1-1: USB disconnect, device number 27 [ 251.283300][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 251.348547][ T5957] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.383249][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.392071][ T5956] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 251.460646][ T7683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 251.491109][ T5957] hub 5-1:1.0: bad descriptor, ignoring hub [ 251.516067][ T5957] hub 5-1:1.0: probe with driver hub failed with error -5 [ 251.540213][ T5957] cdc_wdm 5-1:1.0: skipping garbage [ 251.560357][ T5957] cdc_wdm 5-1:1.0: skipping garbage [ 251.575595][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 251.606071][ T5957] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 251.612427][ T5957] cdc_wdm 5-1:1.0: Unknown control protocol [ 251.621297][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.651701][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.685631][ T7696] loop8: detected capacity change from 0 to 8 [ 251.710297][ T7696] Dev loop8: unable to read RDB block 8 [ 251.711935][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.720604][ T7696] loop8: unable to read partition table [ 251.733897][ T5956] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.749791][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.759406][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 251.789696][ T7696] loop8: partition table beyond EOD, truncated [ 251.790098][ T7683] usb usb8: usbfs: process 7683 (syz.4.376) did not claim interface 4 before use [ 251.810013][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.817834][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.825941][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.833087][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.840123][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.846994][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.850828][ T7683] bond1: (slave dummy0): making interface the new active one [ 251.855043][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.863997][ T7683] dummy0: entered promiscuous mode [ 251.868882][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.870208][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.877044][ T5956] usb 3-1: config 0 descriptor?? [ 251.881519][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.889347][ T7696] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 251.905102][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.917174][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.930376][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.937343][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.944500][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.951454][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.958617][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.965730][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 251.972726][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 251.979769][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.051121][ T7683] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 252.397379][ T5943] usb 5-1: USB disconnect, device number 28 [ 252.462529][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x2 [ 252.507626][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.527941][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.538824][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.547891][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.560840][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.565055][ T24] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 252.570405][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.585469][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.592863][ T5956] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 252.615364][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 252.643022][ T5956] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input14 [ 252.760128][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 252.766185][ T5956] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 252.791567][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 252.822351][ T5956] usb 3-1: USB disconnect, device number 23 [ 252.823482][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.884126][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.921934][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 252.938898][ T24] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 252.983532][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.054636][ T43] usb 2-1: config 0 descriptor?? [ 253.074168][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 253.074193][ T31] audit: type=1326 audit(1756017846.605:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7729 comm="syz.4.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f201ad8ebe9 code=0x0 [ 253.155330][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 253.162128][ T24] usb usb4-port1: attempt power cycle [ 253.203347][ T7725] fido_id[7725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 253.494579][ T43] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 253.525196][ T24] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 253.581174][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 253.630760][ T7738] program syz.2.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.679909][ T43] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 253.735422][ T24] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 253.776025][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 253.794061][ T24] usb usb4-port1: unable to enumerate USB device [ 253.880201][ T43] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 253.925462][ T43] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 253.994669][ T43] ft260 0003:0403:6030.0007: failed to retrieve status: -5 [ 254.196704][ T43] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 254.369956][ T43] usb 2-1: USB disconnect, device number 25 [ 254.502733][ T31] audit: type=1326 audit(1756017848.035:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.0.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26dc78ebe9 code=0x0 [ 254.578532][ T7751] loop8: detected capacity change from 0 to 8 [ 254.590777][ T7751] Dev loop8: unable to read RDB block 8 [ 254.597270][ T7751] loop8: unable to read partition table [ 254.603411][ T7751] loop8: partition table beyond EOD, truncated [ 254.623559][ T7751] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 255.371663][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 255.444146][ T7760] vivid-000: ================= START STATUS ================= [ 255.453894][ T7760] vivid-000: Test Pattern: 75% Colorbar [ 255.463430][ T7760] vivid-000: Fill Percentage of Frame: 100 [ 255.471132][ T7760] vivid-000: Horizontal Movement: No Movement [ 255.478107][ T7760] vivid-000: Vertical Movement: No Movement [ 255.484630][ T7760] vivid-000: OSD Text Mode: All [ 255.490076][ T7760] vivid-000: Show Border: true [ 255.499350][ T7760] vivid-000: Show Square: false [ 255.504912][ T7760] vivid-000: Sensor Flipped Horizontally: false [ 255.516487][ T7760] vivid-000: Sensor Flipped Vertically: false [ 255.525011][ T7760] vivid-000: Insert SAV Code in Image: false [ 255.532547][ T7760] vivid-000: Insert EAV Code in Image: false [ 255.550518][ T7760] vivid-000: Insert Video Guard Band: false [ 255.557285][ T7760] vivid-000: Reduced Framerate: false [ 255.565549][ T7760] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 255.575025][ T7760] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 255.597454][ T7760] vivid-000: Enable Capture Cropping: true [ 255.604619][ T7760] vivid-000: Enable Capture Composing: true [ 255.615116][ T7760] vivid-000: Enable Capture Scaler: true [ 255.643667][ T7760] vivid-000: Timestamp Source: End of Frame [ 255.650743][ T7760] vivid-000: Colorspace: sRGB [ 255.658394][ T7760] vivid-000: Transfer Function: Default [ 255.664515][ T7760] vivid-000: Y'CbCr Encoding: Default [ 255.671235][ T7760] vivid-000: HSV Encoding: Hue 0-179 [ 255.678818][ T7760] vivid-000: Quantization: Default [ 255.689401][ T7760] vivid-000: Apply Alpha To Red Only: false [ 255.719430][ T7760] vivid-000: Standard Aspect Ratio: 4x3 [ 255.767368][ T7760] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 255.863709][ T7760] vivid-000: DV Timings: 640x480p59 inactive [ 255.971606][ T7760] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 256.047453][ T7760] vivid-000: Maximum EDID Blocks: 2 [ 256.061185][ T7760] vivid-000: Limited RGB Range (16-235): false [ 256.079229][ T7760] vivid-000: Rx RGB Quantization Range: Automatic [ 256.087390][ T7760] vivid-000: Power Present: 0x00000001 [ 256.103608][ T7760] tpg source WxH: 320x180 (R'G'B) [ 256.110388][ T7760] tpg field: 1 [ 256.117445][ T7760] tpg crop: (0,0)/320x180 [ 256.123231][ T7760] tpg compose: (0,0)/320x180 [ 256.129391][ T7760] tpg colorspace: 8 [ 256.134130][ T7760] tpg transfer function: 0/0 [ 256.140708][ T7760] tpg quantization: 0/0 [ 256.148404][ T7760] tpg RGB range: 0/2 [ 256.194747][ T7760] vivid-000: ================== END STATUS ================== [ 257.256596][ T5957] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 257.424071][ T7785] futex_wake_op: syz.2.399 tries to shift op by -1; fix this program [ 257.585240][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 257.614125][ T5957] usb 5-1: config 32 has an invalid interface number: 32 but max is 0 [ 257.641729][ T5957] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 257.698109][ T5957] usb 5-1: config 32 has no interface number 0 [ 257.736238][ T5957] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 257.758259][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.801566][ T5957] hub 5-1:32.32: bad descriptor, ignoring hub [ 257.838048][ T5957] hub 5-1:32.32: probe with driver hub failed with error -5 [ 257.865787][ T7792] loop8: detected capacity change from 0 to 8 [ 257.900303][ T7792] Dev loop8: unable to read RDB block 8 [ 257.934620][ T7792] loop8: unable to read partition table [ 257.982319][ T7792] loop8: partition table beyond EOD, truncated [ 258.034156][ T7792] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 258.291947][ T5957] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 258.693086][ T31] audit: type=1326 audit(1756017852.225:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 258.747353][ T7817] syz.3.408 uses obsolete (PF_INET,SOCK_PACKET) [ 258.894628][ T31] audit: type=1326 audit(1756017852.225:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.029365][ T31] audit: type=1326 audit(1756017852.225:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.169124][ T31] audit: type=1326 audit(1756017852.225:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.291864][ T31] audit: type=1326 audit(1756017852.225:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.501160][ T31] audit: type=1326 audit(1756017852.225:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.562023][ T7831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 259.718933][ T31] audit: type=1326 audit(1756017852.225:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.826855][ T31] audit: type=1326 audit(1756017852.225:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 259.915983][ T5956] usb 5-1: USB disconnect, device number 29 [ 259.975095][ T31] audit: type=1326 audit(1756017852.255:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 260.069979][ T31] audit: type=1326 audit(1756017852.275:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcefe58ebe9 code=0x7ffc0000 [ 260.222104][ T7843] loop8: detected capacity change from 0 to 8 [ 260.255903][ T5928] Dev loop8: unable to read RDB block 8 [ 260.269990][ T5928] loop8: unable to read partition table [ 260.283713][ T7844] ptrace attach of "./syz-executor exec"[5888] was attempted by ""[7844] [ 260.336212][ T5928] loop8: partition table beyond EOD, truncated [ 260.356632][ T7843] Dev loop8: unable to read RDB block 8 [ 260.366187][ T7843] loop8: unable to read partition table [ 260.395705][ T7843] loop8: partition table beyond EOD, truncated [ 260.425091][ T5956] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 260.435171][ T7843] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 260.555205][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 260.847155][ T5956] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 260.859912][ T24] usb 1-1: config 1 interface 0 altsetting 219 bulk endpoint 0x1 has invalid maxpacket 1023 [ 260.882053][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.913081][ T24] usb 1-1: config 1 interface 0 altsetting 219 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.925391][ T5956] usb 5-1: Product: syz [ 260.933897][ T5956] usb 5-1: Manufacturer: syz [ 260.939937][ T5956] usb 5-1: SerialNumber: syz [ 260.960966][ T5956] usb 5-1: config 0 descriptor?? [ 261.075103][ T5957] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 261.150821][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 261.372837][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 261.393211][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.417594][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.434021][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.434293][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.444660][ T24] usb 1-1: Product: syz [ 261.503976][ T24] usb 1-1: Manufacturer: Т [ 261.534585][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.536342][ T24] usb 1-1: SerialNumber: syz [ 261.581448][ T5957] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 261.619889][ T7844] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 262.196030][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.215574][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.276807][ T7844] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 262.312397][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.425928][ T5957] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.499948][ T5957] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.530436][ T5957] usb 4-1: Manufacturer: syz [ 262.593117][ T5957] usb 4-1: config 0 descriptor?? [ 263.051441][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.073444][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.105299][ T5957] rc_core: IR keymap rc-hauppauge not found [ 263.112528][ T5957] Registered IR keymap rc-empty [ 263.127324][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.167522][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.216813][ T5957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 263.331071][ T5957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 263.361130][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.425449][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.465863][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.625615][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.747227][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.805604][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.827381][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.856281][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.875435][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.895166][ T921] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 263.903208][ T5957] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.940929][ T5957] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.045745][ T5957] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 264.056525][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 264.072954][ T921] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 264.082315][ T921] usb 3-1: config 2 has no interface number 0 [ 264.113494][ T921] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 264.115726][ T7841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.137811][ T7841] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 264.139203][ T921] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.222186][ T921] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 264.232690][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.263982][ T7841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.309208][ T921] usb 3-1: Product: syz [ 264.351811][ T921] usb 3-1: Manufacturer: syz [ 264.375843][ T24] usb 1-1: USB disconnect, device number 29 [ 264.408693][ T7841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 264.449712][ T921] usb 3-1: SerialNumber: syz [ 264.502710][ T7841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.543221][ T7841] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 264.554849][ T921] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 264.591233][ T921] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 264.690523][ T7841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.697327][ T7841] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 264.851111][ T7841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.970088][ T7841] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 265.105852][ T5956] usb 5-1: f81604_read: reg: 200f failed: -ETIMEDOUT [ 265.495758][ T24] usb 5-1: USB disconnect, device number 30 [ 265.550617][ T24] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 265.650104][ T3094] usb 4-1: USB disconnect, device number 24 [ 265.733996][ T5529] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 265.775608][ T921] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 265.805313][ T5974] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 265.828369][ T5529] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 265.964440][ T24] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 265.990896][ T921] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 266.096467][ T921] usb 2-1: config 0 has no interface number 0 [ 266.148972][ T5974] usb 1-1: config 0 has no interfaces? [ 266.169115][ T5974] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 266.182275][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.184475][ T921] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 266.231851][ T5974] usb 1-1: Product: syz [ 266.248307][ T5974] usb 1-1: Manufacturer: syz [ 266.267163][ T5974] usb 1-1: SerialNumber: syz [ 266.333303][ T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.347446][ T5974] usb 1-1: config 0 descriptor?? [ 266.418528][ T921] usb 2-1: Product: syz [ 266.430034][ T5974] hid (null): unknown global tag 0xd [ 266.445142][ T921] usb 2-1: Manufacturer: syz [ 266.450972][ T5974] hid (null): unknown global tag 0xe [ 266.484216][ T921] usb 2-1: SerialNumber: syz [ 266.527149][ T921] usb 2-1: config 0 descriptor?? [ 266.534709][ T5974] hid-generic 0002:58157D2C:0006.0008: reserved main item tag 0xe [ 266.579108][ T5974] hid-generic 0002:58157D2C:0006.0008: unknown main item tag 0x2 [ 266.671373][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.682565][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.757424][ T3094] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 266.785457][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 266.847845][ T5974] hid-generic 0002:58157D2C:0006.0008: unknown main item tag 0x3 [ 267.074532][ T3094] usb 4-1: Using ep0 maxpacket: 16 [ 267.339655][ T5974] hid-generic 0002:58157D2C:0006.0008: reserved main item tag 0xd [ 267.359838][ T3094] usb 4-1: config 6 has an invalid interface number: 171 but max is 0 [ 267.405487][ T5974] hid-generic 0002:58157D2C:0006.0008: unknown global tag 0xd [ 267.421125][ T3094] usb 4-1: config 6 has no interface number 0 [ 267.436399][ T3094] usb 4-1: config 6 interface 171 has no altsetting 0 [ 267.443464][ T5974] hid-generic 0002:58157D2C:0006.0008: item 0 0 1 13 parsing failed [ 267.466851][ T3094] usb 4-1: New USB device found, idVendor=1b75, idProduct=a200, bcdDevice=be.1a [ 267.480362][ T5974] hid-generic 0002:58157D2C:0006.0008: probe with driver hid-generic failed with error -22 [ 267.501704][ T3094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.627487][ T3094] usb 4-1: Product: ᣜ毕率ㆬ忚룩覱愉뉞獅⨉砯掺夿旪ၑᴃ鉣М仼鮛㉌娞啜ᩢ늼ᇼ溹뾾ᆌ篊芑䀞곩䥿끽䋑᐀牭ﴶ귦亝㵇힇܌벜웲⑐ἴ딻竄ᓩ᠍㇍ၬ皴兌邫઄ꋛ烒⅂춑碞 [ 267.733169][ T3094] usb 4-1: Manufacturer: 屻駏墳䥔⬹Ƚ奧瀘颞丁檜᭦伥㧭Ɦ흹誼ꜞ蓳䯡ᄟs㭨겧騬⧮︔㙫枞鉭⌑ｾ굚ಅ㘻╭뢧ˮ屄䠧톙洓䜡ꔋ轙⬨ଃ㜶䲙꣚㢟դ㘛豓顰硴ꚯ稲볓궤禎ƹ鸳酌Ⲕ隶嵮ꗱ뎟펺뇓ᆈ古开蟜搹厐뺶澢ꆁ㝓視詗嶴퍆摼꺧￢﹗䂸逶髊▿ঃ䖖䔧 [ 267.937930][ T3094] usb 4-1: SerialNumber: 㡕㯋形壘酈ᡌ笟咑괂闗戣䌠﹈徍颻蛼♠园ﱵ屼כּᚴ䂅뎭㶪옎阑訴휎썯妿䋠쑹搯욁ꨢ껚Ќ債念탙꧐뭋뷀ַﾱ賙 [ 268.203816][ T7908] netlink: 'syz.4.425': attribute type 15 has an invalid length. [ 268.212689][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 268.298349][ T3094] usb 4-1: USB disconnect, device number 25 [ 268.590541][ T5956] usb 3-1: USB disconnect, device number 24 [ 268.618746][ T5956] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 268.660357][ T5956] kobil_sct 3-1:2.45: device disconnected [ 269.235086][ T5956] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 269.272480][ T921] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 269.318515][ T921] usb 2-1: No valid video chain found. [ 269.375153][ T921] usb 2-1: USB disconnect, device number 26 [ 269.436732][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.485659][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.590343][ T5956] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 269.619066][ T5943] usb 1-1: USB disconnect, device number 30 [ 269.725306][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.807966][ T5956] usb 3-1: config 0 descriptor?? [ 269.903453][ T5956] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 269.950794][ T5956] usb 3-1: No valid video chain found. [ 270.020180][ T3094] usb 3-1: USB disconnect, device number 25 [ 270.222294][ T5943] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.290622][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.335541][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.468494][ T5943] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 270.489581][ T5943] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 270.527787][ T5956] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 270.542687][ T7946] binder: 7930:7946 ioctl c0306201 200000000480 returned -14 [ 270.565172][ T7946] trusted_key: encrypted_key: key user:syz not found [ 270.714354][ T5943] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.756092][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.011152][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 271.102954][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.144373][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.275588][ T5943] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 271.395127][ T5956] usb 4-1: device descriptor read/64, error -71 [ 271.425124][ T5943] usb 3-1: device descriptor read/64, error -71 [ 271.431860][ T3094] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 271.605302][ T3094] usb 5-1: Using ep0 maxpacket: 16 [ 271.616930][ T3094] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.633919][ T3094] usb 5-1: config 0 has no interface number 0 [ 271.657816][ T3094] usb 5-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 271.685161][ T5943] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 271.711565][ T3094] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 271.739504][ T3094] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 271.759169][ T3094] usb 5-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 271.799841][ T3094] usb 5-1: config 0 interface 41 has no altsetting 0 [ 271.823568][ T3094] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.858197][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.872332][ T5943] usb 3-1: device descriptor read/64, error -71 [ 271.885158][ T5956] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 271.894085][ T3094] usb 5-1: Product: syz [ 271.899718][ T3094] usb 5-1: Manufacturer: syz [ 271.914499][ T3094] usb 5-1: SerialNumber: syz [ 271.930961][ T3094] usb 5-1: config 0 descriptor?? [ 271.943089][ T7960] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 271.951553][ T7960] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 272.005756][ T5943] usb usb3-port1: attempt power cycle [ 272.055290][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 272.066512][ T5956] usb 4-1: no configurations [ 272.072778][ T5956] usb 4-1: can't read configurations, error -22 [ 272.091497][ T5956] usb usb4-port1: attempt power cycle [ 272.160843][ T7960] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 272.186025][ T7960] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 272.365568][ T5943] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 272.397317][ T5943] usb 3-1: device descriptor read/8, error -71 [ 272.436412][ T5956] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 272.465859][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 272.474757][ T5956] usb 4-1: no configurations [ 272.482989][ T5956] usb 4-1: can't read configurations, error -22 [ 272.530455][ T3094] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 272.581202][ T3094] usb 5-1: USB disconnect, device number 31 [ 272.638789][ T5956] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 272.675227][ T5943] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 272.688178][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 272.697246][ T5956] usb 4-1: no configurations [ 272.706115][ T5956] usb 4-1: can't read configurations, error -22 [ 272.718814][ T5943] usb 3-1: device descriptor read/8, error -71 [ 272.726161][ T5956] usb usb4-port1: unable to enumerate USB device [ 272.768168][ T43] usb 1-1: USB disconnect, device number 31 [ 272.835883][ T5943] usb usb3-port1: unable to enumerate USB device [ 273.642812][ T5936] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 273.962961][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.977518][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.996101][ T5936] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 274.007811][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.022071][ T5936] usb 5-1: config 0 descriptor?? [ 274.672091][ T5936] usbhid 5-1:0.0: can't add hid device: -32 [ 274.772885][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 275.246468][ T8014] syzkaller1: entered promiscuous mode [ 275.344216][ T8014] syzkaller1: entered allmulticast mode [ 275.515266][ T5936] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 275.795208][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 275.853476][ T5936] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 275.893439][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.927643][ T5936] usb 4-1: config 0 descriptor?? [ 276.421957][ T5936] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 276.467768][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.947020][ T8034] usb usb8: usbfs: process 8034 (syz.2.451) did not claim interface 0 before use [ 276.995060][ T5956] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 277.027902][ T5936] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.046049][ T5936] usb 4-1: media controller created [ 277.074814][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.208165][ T5956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.219051][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.500330][ T921] usb 5-1: USB disconnect, device number 32 [ 277.555329][ T5936] az6027: usb out operation failed. (-71) [ 277.562724][ T5956] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.586195][ T5936] az6027: usb out operation failed. (-71) [ 277.592420][ T5936] stb0899_attach: Driver disabled by Kconfig [ 277.605041][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.622474][ T5956] usb 1-1: SerialNumber: syz [ 277.685455][ T5936] az6027: no front-end attached [ 277.685455][ T5936] [ 277.896067][ T5936] az6027: usb out operation failed. (-71) [ 277.907568][ T5936] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 277.924636][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 278.178541][ T5936] dvb-usb: schedule remote query interval to 400 msecs. [ 278.198447][ T5936] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.261755][ T5936] usb 4-1: USB disconnect, device number 30 [ 278.660144][ T5936] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.710422][ T8057] usb usb8: usbfs: process 8057 (syz.3.455) did not claim interface 0 before use [ 280.900816][ T5956] usb 1-1: 0:2 : does not exist [ 281.011552][ T5956] usb 1-1: USB disconnect, device number 32 [ 281.230422][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.465403][ T8080] sit1: entered allmulticast mode [ 282.051394][ T3094] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 282.225195][ T3094] usb 3-1: Using ep0 maxpacket: 16 [ 282.234221][ T3094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.285828][ T3094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.312781][ T3094] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 282.325154][ T3094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.347487][ T3094] usb 3-1: config 0 descriptor?? [ 282.562769][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.583954][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.851200][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.888745][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.913450][ T3094] sony 0003:1430:474C.0009: unknown main item tag 0x0 [ 282.934162][ T3094] sony 0003:1430:474C.0009: unknown main item tag 0x0 [ 283.012997][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 283.065883][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 283.205459][ T3094] sony 0003:1430:474C.0009: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 283.351157][ T3094] sony 0003:1430:474C.0009: failed to claim input [ 283.400125][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 283.496298][ T3094] usb 3-1: USB disconnect, device number 30 [ 283.523459][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 284.395777][ T8112] fido_id[8112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 284.768702][ T3094] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 284.985253][ T3094] usb 3-1: device descriptor read/64, error -71 [ 285.225380][ T3094] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 285.475254][ T3094] usb 3-1: device descriptor read/64, error -71 [ 285.585930][ T3094] usb usb3-port1: attempt power cycle [ 285.875212][ T43] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 285.925393][ T3094] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 285.976116][ T3094] usb 3-1: device descriptor read/8, error -71 [ 286.037834][ T43] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 286.050145][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.127621][ T43] usb 4-1: config 0 descriptor?? [ 286.146801][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 286.245322][ T3094] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 286.276105][ T3094] usb 3-1: device descriptor read/8, error -71 [ 286.378956][ T8141] bond0: (slave team0): Releasing backup interface [ 286.386404][ T3094] usb usb3-port1: unable to enumerate USB device [ 286.443006][ T8150] program syz.3.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.472486][ T8141] bridge_slave_0: left allmulticast mode [ 286.503009][ T8152] netlink: 'syz.3.477': attribute type 11 has an invalid length. [ 286.532791][ T8141] bridge_slave_0: left promiscuous mode [ 286.614461][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.663455][ T8141] bridge_slave_1: left allmulticast mode [ 286.708374][ T8141] bridge_slave_1: left promiscuous mode [ 286.742007][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.805292][ T8141] bond0: (slave bond_slave_0): Releasing backup interface [ 286.873255][ T8141] bond0: (slave bond_slave_1): Releasing backup interface [ 286.970200][ T8141] team0: Port device team_slave_0 removed [ 287.068922][ T8141] team0: Port device team_slave_1 removed [ 287.099411][ T43] gp8psk: usb in 138 operation failed. [ 287.112699][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 287.113593][ T8141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.125392][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 287.870978][ T8141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.187185][ T8141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.249928][ T8141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.535363][ T5976] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 288.709879][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.737984][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.768110][ T5976] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.784031][ T3094] usb 4-1: USB disconnect, device number 31 [ 288.814756][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.841791][ T5976] usb 5-1: config 0 descriptor?? [ 289.071086][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.109353][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.430382][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.447216][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.556512][ T5976] usbhid 5-1:0.0: can't add hid device: -71 [ 289.562642][ T5976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.606543][ T8180] delete_channel: no stack [ 289.710314][ T5976] usb 5-1: USB disconnect, device number 33 [ 289.785190][ T5956] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 289.995194][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 290.021096][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 290.050985][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.068822][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.270550][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.281146][ T5956] usb 4-1: Product: syz [ 290.312911][ T5956] usb 4-1: Manufacturer: syz [ 290.358298][ T5956] usb 4-1: SerialNumber: syz [ 290.481480][ T5956] usb 4-1: config 0 descriptor?? [ 290.535371][ T5956] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 290.563346][ T5956] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 290.885097][ T5995] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.135922][ T8212] page: refcount:515 mapcount:0 mapping:ffff8880567c9150 index:0x200 pfn:0x69400 [ 291.146571][ T8212] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 291.155660][ T8212] aops:hugetlbfs_aops ino:4d9b dentry name(?):"anon_hugepage" [ 291.163872][ T8212] flags: 0xfff000000000c5(locked|waiters|referenced|head|node=0|zone=1|lastcpupid=0x7ff) [ 291.173800][ T8212] page_type: f4(hugetlb) [ 291.178241][ T8212] raw: 00fff000000000c5 ffffea0008eb0008 ffffea0001a00008 ffff8880567c9150 [ 291.187145][ T8212] raw: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 291.195934][ T8212] head: 00fff000000000c5 ffffea0008eb0008 ffffea0001a00008 ffff8880567c9150 [ 291.205317][ T8212] head: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 291.214347][ T8212] head: 00fff00000000009 ffffea0001a50001 0000000000000000 0000000000000000 [ 291.223209][ T8212] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 291.232596][ T8212] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 291.240160][ T8212] page_owner tracks the page as allocated [ 291.246842][ T8212] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6125, tgid 6124 (syz.1.38), ts 127869201232, free_ts 99792471118 [ 291.267928][ T8212] post_alloc_hook+0x240/0x2a0 [ 291.273104][ T8212] get_page_from_freelist+0x21e4/0x22c0 [ 291.279229][ T8212] __alloc_frozen_pages_noprof+0x181/0x370 [ 291.285627][ T8212] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 291.291491][ T8212] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 291.297772][ T8212] alloc_surplus_hugetlb_folio+0x103/0x430 [ 291.303990][ T8212] alloc_hugetlb_folio+0xb1a/0x16a0 [ 291.309217][ T8212] hugetlb_fault+0x1dc2/0x2970 [ 291.314211][ T8212] handle_mm_fault+0x740/0x8e0 [ 291.319100][ T8212] __get_user_pages+0x1699/0x2ce0 [ 291.324474][ T8212] populate_vma_page_range+0x29f/0x3a0 [ 291.330343][ T8212] __mm_populate+0x24c/0x380 [ 291.335285][ T8212] vm_mmap_pgoff+0x387/0x4d0 [ 291.340134][ T8212] ksys_mmap_pgoff+0x587/0x760 [ 291.345194][ T8212] do_syscall_64+0xfa/0x3b0 [ 291.350118][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.356237][ T8212] page last free pid 5852 tgid 5852 stack trace: [ 291.362863][ T8212] free_unref_folios+0xdbd/0x1520 [ 291.368209][ T8212] folios_put_refs+0x559/0x640 [ 291.372992][ T8212] free_pages_and_swap_cache+0x277/0x520 [ 291.378661][ T8212] tlb_flush_mmu+0x3a0/0x680 [ 291.383548][ T8212] tlb_finish_mmu+0xc3/0x1d0 [ 291.388623][ T8212] vms_clear_ptes+0x42c/0x540 [ 291.393533][ T8212] vms_complete_munmap_vmas+0x206/0x8a0 [ 291.399227][ T8212] do_vmi_align_munmap+0x358/0x420 [ 291.404358][ T8212] do_vmi_munmap+0x253/0x2e0 [ 291.409740][ T8212] __vm_munmap+0x23b/0x3d0 [ 291.414176][ T8212] __x64_sys_munmap+0x60/0x70 [ 291.418965][ T8212] do_syscall_64+0xfa/0x3b0 [ 291.423942][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.430564][ T8212] ------------[ cut here ]------------ [ 291.436603][ T8212] kernel BUG at mm/filemap.c:154! [ 291.441858][ T8212] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 291.448884][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(full) [ 291.458730][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.469360][ T8212] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 291.475956][ T8212] Code: a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 43 f6 31 ff 90 0f 0b e8 ab a5 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 2c f6 31 ff 90 <0f> 0b e8 94 a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 15 f6 31 ff [ 291.497026][ T8212] RSP: 0018:ffffc9000de9ee20 EFLAGS: 00010046 [ 291.503935][ T8212] RAX: aa1ba25df58e6b00 RBX: ffffea0001a50000 RCX: aa1ba25df58e6b00 [ 291.512931][ T8212] RDX: 0000000000000005 RSI: ffffffff8dba6c8e RDI: ffff888025619e00 [ 291.521833][ T8212] RBP: 0000000000000001 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 291.530295][ T8212] R10: dffffc0000000000 R11: ffffed10170e484b R12: 0000000000000040 [ 291.538984][ T8212] R13: 1ffffd400034a000 R14: 1ffffd400034a001 R15: ffffea0001a50008 [ 291.547327][ T8212] FS: 00007fd2998596c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 291.556507][ T8212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.563400][ T8212] CR2: 00002000000543f0 CR3: 000000007ced6000 CR4: 00000000003526f0 [ 291.573099][ T8212] Call Trace: [ 291.576567][ T8212] [ 291.579713][ T8212] __filemap_remove_folio+0xc3/0x500 [ 291.585255][ T8212] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.590990][ T8212] ? __pfx___filemap_remove_folio+0x10/0x10 [ 291.597255][ T8212] ? _raw_spin_lock_irq+0xae/0xf0 [ 291.602493][ T8212] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 291.608177][ T8212] filemap_remove_folio+0xe6/0x1f0 [ 291.613615][ T8212] remove_inode_hugepages+0x594/0x1100 [ 291.619539][ T8212] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 291.625653][ T8212] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 291.631917][ T8212] ? up_write+0x1c4/0x420 [ 291.636636][ T8212] hugetlbfs_fallocate+0xbc7/0x1100 [ 291.642444][ T8212] ? aa_file_perm+0x13a/0x1550 [ 291.647347][ T8212] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 291.653113][ T8212] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 291.659515][ T8212] vfs_fallocate+0x669/0x7e0 [ 291.664592][ T8212] ? __pfx_vfs_fallocate+0x10/0x10 [ 291.670240][ T8212] madvise_vma_behavior+0x3254/0x3af0 [ 291.676260][ T8212] ? __lock_acquire+0xab9/0xd20 [ 291.681481][ T8212] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 291.687585][ T8212] ? finish_task_switch+0x266/0x950 [ 291.692834][ T8212] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.698320][ T8212] ? finish_task_switch+0x266/0x950 [ 291.703627][ T8212] ? rcu_is_watching+0x15/0xb0 [ 291.708577][ T8212] ? trace_sched_exit_tp+0x36/0x110 [ 291.714910][ T8212] ? __schedule+0x17ae/0x4cc0 [ 291.720155][ T8212] ? mas_prev_slot+0xb31/0xbb0 [ 291.725193][ T8212] ? find_vma_prev+0xfc/0x170 [ 291.730001][ T8212] ? __pfx_find_vma_prev+0x10/0x10 [ 291.735506][ T8212] ? futex_unqueue+0x22/0x240 [ 291.740518][ T8212] ? __futex_wait+0x34f/0x3e0 [ 291.745258][ T8212] madvise_walk_vmas+0x51c/0xa30 [ 291.750651][ T8212] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 291.756872][ T8212] ? blk_start_plug+0x6f/0x1b0 [ 291.761967][ T8212] madvise_do_behavior+0x38e/0x550 [ 291.767234][ T8212] ? __pfx_madvise_do_behavior+0x10/0x10 [ 291.773213][ T8212] ? down_read+0x1ad/0x2e0 [ 291.778049][ T8212] do_madvise+0x1bc/0x270 [ 291.782458][ T8212] ? __pfx_do_madvise+0x10/0x10 [ 291.787604][ T8212] ? __se_sys_futex+0x36f/0x400 [ 291.792736][ T8212] ? rcu_is_watching+0x15/0xb0 [ 291.797957][ T8212] __x64_sys_madvise+0xa7/0xc0 [ 291.802832][ T8212] do_syscall_64+0xfa/0x3b0 [ 291.807357][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.813750][ T8212] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.819996][ T8212] ? clear_bhb_loop+0x60/0xb0 [ 291.825072][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.831104][ T8212] RIP: 0033:0x7fd29898ebe9 [ 291.836139][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.856561][ T8212] RSP: 002b:00007fd299859038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 291.865347][ T8212] RAX: ffffffffffffffda RBX: 00007fd298bb6180 RCX: 00007fd29898ebe9 [ 291.873642][ T8212] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 291.882013][ T8212] RBP: 00007fd298a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.890192][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.898662][ T8212] R13: 00007fd298bb6218 R14: 00007fd298bb6180 R15: 00007fd298cdfa28 [ 291.906950][ T8212] [ 291.910193][ T8212] Modules linked in: [ 291.914243][ T8212] ---[ end trace 0000000000000000 ]--- [ 291.919704][ T8212] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 291.926325][ T8212] Code: a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 43 f6 31 ff 90 0f 0b e8 ab a5 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 2c f6 31 ff 90 <0f> 0b e8 94 a5 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 15 f6 31 ff [ 291.947816][ T8212] RSP: 0018:ffffc9000de9ee20 EFLAGS: 00010046 [ 291.954274][ T8212] RAX: aa1ba25df58e6b00 RBX: ffffea0001a50000 RCX: aa1ba25df58e6b00 [ 291.962753][ T8212] RDX: 0000000000000005 RSI: ffffffff8dba6c8e RDI: ffff888025619e00 [ 291.971603][ T8212] RBP: 0000000000000001 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 291.979800][ T8212] R10: dffffc0000000000 R11: ffffed10170e484b R12: 0000000000000040 [ 291.987960][ T8212] R13: 1ffffd400034a000 R14: 1ffffd400034a001 R15: ffffea0001a50008 [ 291.996253][ T8212] FS: 00007fd2998596c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 292.005741][ T8212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.012626][ T8212] CR2: 00002000000543f0 CR3: 000000007ced6000 CR4: 00000000003526f0 [ 292.021103][ T8212] Kernel panic - not syncing: Fatal exception [ 292.028115][ T8212] Kernel Offset: disabled [ 292.032577][ T8212] Rebooting in 86400 seconds..