last executing test programs: 8.347899352s ago: executing program 1 (id=4963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000f8ff07010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087}, 0x90) 8.077281531s ago: executing program 1 (id=4964): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x800000000000000}, 0x20008000) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r7 = socket$kcm(0xa, 0x3, 0x3a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x3c, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x890, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x80]}) 6.837433351s ago: executing program 1 (id=4967): timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x2c, 0x4, 0xffffff13) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201fb0201baca10880c21004719010203010902120001010840030904a004003ad0940c"], &(0x7f0000000a00)={0x0, 0x0, 0x5, 0x0}) 5.882878098s ago: executing program 3 (id=4972): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x133, 0x133, 0x8, [@enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x2}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x3, [{0x3, 0x4, 0x8}, {0x0, 0x3, 0x8}]}, @ptr={0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x2}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x2, 0x2}, {0x2}, {0x7, 0x4}, {0x1, 0x4}, {0x9, 0x5}, {0x4, 0x3}]}, @datasec={0x4, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x2, 0xffffffd9}, {0x5, 0x576efeaa, 0x1}], "25b6f0"}, @struct={0x2, 0x5, 0x0, 0x4, 0x0, 0x8, [{0x6, 0x1, 0x2}, {0xa, 0x1, 0xff}, {0x5, 0x1, 0x600000}, {0xd, 0x1, 0x1858}, {0xb, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x61, 0x5f, 0xd2, 0x0]}}, &(0x7f0000000140)=""/240, 0x154, 0xf0, 0x1, 0x1}, 0x28) r2 = eventfd2(0x0, 0x80400) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x401, r1, &(0x7f0000000440)="320d940bf93303d55959152b6830533968f01a5c7ae765d41bb6dfd2db946972260688f1390ebe419a9ca3905767d584e3501b50684d058e004942931af2a1b1bc5279bb94bb0445a83a478b4a7932c5a36c50973685f362c093fc65848c254fe00faf4062a20b04004e1aa7c11a11f09fc6886078f30a59e7d2a18145f47501d264d6b5859b553aaae156484d6b0b04b58f0a7a01", 0x95, 0x8, 0x0, 0x2, r2}]) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) 5.134503088s ago: executing program 1 (id=4975): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="40c9010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004880}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.085158385s ago: executing program 4 (id=4976): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0xd, 0x4a, "93156ba139aec2a1368cb1ff25f0138b04e69ce5049c8c23c1cba9499d00e6131d733795989889253d9f5ccbecba1d556d688a5a82c42eb44c302fa09580cfa27fc9fe6506e1f1c7df1b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xdd}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x10, 0x368, 0xa0, 0x4, 0x9, 0x81, 0x9, 0x3, 0x101, 0x3, 0x5, 0x6}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xfcec}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x11, 0x1, "f8"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="40612c669300b2fae97d38af18aecd0921b8fa55c81b0cb757641ca5dd269f59863f7c516c278c5676f2fe55674ed8e0e8c99a3a8fbc55bbf4ee878d103dd918535eee4e3b4142700257064264cf79ad35544b0fc06aac4926526ba88b79801e01091ff3533d68b932004983672a5dbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000700)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf6ff) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x2007) 5.032525159s ago: executing program 2 (id=4977): userfaultfd(0x80001) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0x100, 0x9, 0x9, 0xb65, 0x1, 0x8, 0x81, 0x8, 0x1, 0xfffffffa, 0x5, 0x8000, 0x7}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r7, 0x403, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) sendmmsg$sock(r2, &(0x7f0000002380)=[{{&(0x7f0000000140)=@rc={0x1f, @none, 0xa}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="d624745bf23a328c80db9a33585953c90b2b0ef3f2019cf62fcfb1748fa45f79c5e32e11c3fdd8f68278178f29e7a7e3343944", 0x33}, {&(0x7f00000001c0)="8785228d57df0c226aa60340da73be09448eec121f7e5a805df62332598489c292d1dfa66585a561ce60817114d15a7762912f49212caa32801e5276059d5b4afeaa3e5589c469b25cffd9c64269b1c659bc83a6a366b3", 0x57}], 0x2, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000340)="3da9857434d51b34ff534095e48cd5ea8e7bfc236c72cc6522e42b1cea9004a65335050f82c47405458de997d30cd8896d8eb3d53a69d07fe19e3673fcfda16ddbf910f9d18efaad916eee91fd1d6099c74b6d32f4eb540c9607a671350c2c900da880d5be3a0a30", 0x68}, {&(0x7f0000001400)="d827c8c31d2a7f902b83558959a284b6939a719d98849808b32e2a7b9918b7fc0850a0e7bd604d58842af7ba50069e20f6352a7cf5a38b5e5226e7ad199beb3508e80b9750b5e648cd7f0db2d4c3727e11c1f174b02c0b594ede703028d375075bfda098baa6a61ec4049976b82bc87d58bb919819611773d844a1e813a0", 0x7e}, {&(0x7f0000001480)="43d62d3da2e456b0c529ff28262a745c49d868e3db750c729b6e50cd5e18808607b909477f529aec72c52de8", 0x2c}, {&(0x7f00000014c0)="6d2d277c6c115e1c0902d3f53e9b64c141fa4fd078e21b22ce2fcdbe0f7ac03ced08cc6abcce17307679f2aa168ec1435b1dd9bc7458480690d3738fbfeae9ebd4d19b9fc0084219b5d88a1ff550b635da8f45c8cee266bfd390bc095a00d6818bb68e6c74a00a32f5315972f40ac89c1b3b19adc1e78540e5f2f53cab4e61a4", 0x80}, {&(0x7f0000001540)="788f951463e469e4c12b59e34c7e70299c0cff63ca0b46f95e129e512824d996e47b9e861ec19912d6d5e90704ef071db70c5e3c0cf75920ae254fbf22ea570d2ca4", 0x42}, {&(0x7f00000015c0)="972b56812285572a0d35cc085b66ba5780ca988c5f8a980cf6ebcd01599b52c87cc4e481b8662f8ec25df75826e75cd3c2dbc150743ee0ba9fa1b9b0808b772504b44a4f9e3ebec3ea82fbce497fb48b408db3bb09215bdc0bf6e15f1c2d52b4a0f4e21b6ef6a04e92782304db82a23a83ee58e985525320496da741fa1ddebc3b66efa88f122b7fd060a785", 0x8c}, {&(0x7f0000001680)="658627a5", 0x4}, {&(0x7f00000016c0)="7bd3206a94ec1c04e875429704c14ee7e96e54988e18d90354df6c5e01d95492413b9819dd8688bbf77e1274eca3cd1a3df2a1751cdb3fdb034657cfbdf057320054818b9cbaaab57f398846502a147d1d2a4fed9cb30ffb2eb1a217226b7859a09a9e61a5b63ca566f03a22d4b9c7dd4cc8728b3fca8cf2ac2db68ee6a787c1a64e6038b1c1abe6c50d7e6778b1284ac0a0f401821db63fe320488977b8452ae4414fb4d1a8843141abb1330ce924e9463cb83f39745727a93c299d2a037b67bb177f7b1b152f61f28cd0e176c65bb346881fe2241e02018402", 0xda}, {&(0x7f00000017c0)="0b42996afd986ae006e0518f14d6f13f25479ed2d9270276efc14cb7ca2f0093d7ac269399acf7dd14978c580e67591ce38ba69cbccd703b0cce3726b6a50f56143c0e24d77721034be7f034ca585e09186715d59d5972d551dfd1c188528603ab8eb70511c43c14dce381f5b91fe1efb3410e68dae4c7536b9c107453c9454fab2aebffa9e0de591153192d23e2fc89167640f6bbd6b80f679dc1e54ce2305e80082881a384b404cf60a05591969b4f11016a0e25be8ad4bec10fb1d05377c68b507a72e5798be6fdbb3d5da5b95a5f4ca24c2ed4486d6cde06c13e3905d1e23139e40b3194c56bdec800b34167801e4d89d292", 0xf4}], 0xa, &(0x7f0000001980)=[@timestamping={{0x14, 0x1, 0x25, 0xc232}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8cd}}], 0xf0}}, {{&(0x7f0000001ac0)=@can={0x1d, r3}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001b40)="cf583a20ebc6ab882bc40bdd5db6509a25dfce892bb8b9b1488e6aba361e0a01b3cf6ebd8efcee412e92beb936d5716cc24319e8e77be0c4d1318dbce1884478b36f6f8586b6eace079d93145953426ff73215a7f89982e4d5dea9b87c8fd5b33f97229540f8c0cfd32c9a451b2318a08f43aa64e7ac60548ba74401bf90b05b447e7340493a16a4a2da096da4c2d2163ff5f8e9eeffbcdbc6d8a643e7cd36ee23a8836db1785bd98ba90e86ac7d", 0xae}, {&(0x7f0000001c00)="f8d0752e6acf4e28a60e3020f202ff0d305d41f737dad01a97201294b43ef5099abc9d7412893d1690d756b276e22c3847382fe8d685fc81679caa6411b1b4540b1e24749a59aa7dcb9ad18368fa37bdf58785d7e87b12e271d94b6ea18ad7cdd159bf226490a0936d5d75dbf52131a106305d9d01aaf9d68f2d3d945d2181f0741c2688bdfd8218dbb85253e3cd4e80", 0x90}, {&(0x7f0000001cc0)="f64fd5fda85cd72979aef8808582a6953c2cc641e343abb7ecd07545bade234a7251f88bfc3df47f55d601ab051e69e41d927ec37b62e4a056e05f2d7d73c59f1d068e5007ccb5acdba35804c7e18fe893137f664fcdc5081785a02b28930e260dd0fc46f23d199cffbd864556c16a69b993", 0x72}, {&(0x7f0000001d40)="93d1902a3132c1a2f1992506c5051f5f29101d55df7cd6bdce3f0e114bafa05b6a1192f70e3f24f3c4d71a432e6de989b9dc062bfbe34e0b3f087768eda7682dbb4ba8dcf9d61d921d0bd165dc1b78f7079e2c9bd1b37ead39df", 0x5a}, {&(0x7f0000001dc0)="50eae734659988e18d6d55872623bfe9c2db4d05de84a33685e4388f4355af8d99ecac3bb786af0f3ed5796aad8d", 0x2e}, {&(0x7f0000001e00)="4db52e47a1d06e8b937513a4e80c926aeb23ad435ad12d5dc7d8bfa2925ce7b4f106ee21086e3c6b9b2489674e022c02401a67f82a9e5f", 0x37}, {&(0x7f0000001e40)="74dcf7e10cd3ad56391b1b76c74c2270975bad1bfecb5f8195899634201b0b743666159e7ee18703e3e11f5c59f5985d3d3b06bf8fb5d1249bf5962bd471c5dd7956ab617a637de6f5d8edb342d2c1054d5580d2661991c6a42ad0ad063bc155310f884928ef517b64d8b654c9247e19ecaec51aff0933c130fc", 0x7a}], 0x7, &(0x7f0000001f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5cb}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x2d3}}], 0x48}}, {{&(0x7f0000001fc0)=@nl=@kern={0x10, 0x0, 0x0, 0x400}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002040)="d778d3ff6a820746fa4ec6d7970711249b354927d86b255b90fb8562be2b71bf2b2b358a1a5349e51c9761c392e1988e21283db2b5194fffcb0acaa64988fd997cd188a44d5dfdf8b2fb5b052a99317fc5f6ec88475f6364fcfe8f6d0ca155e60550ac25d8cf47a48c87c0e1c729969a65b5df8eec880e8c6ffe", 0x7a}], 0x1, &(0x7f0000002100)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffa04}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7dc}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="0f181a4a6c2c7f76e4465e743ddf3ededfca962fcd13704f35cbed738760b6215e7c500673050a02a2e419a39bc98e3f1e416cef3cf5f44d112812bb961646fb71dbccfb825aa640c862f8664e997d22c5e3cc6b29575b6f58af8898ff41548a6c2f238d9f9b738e8fee198c2227735ad5949a3d088debca5cdf2c67c9a232b192482c868cdfd46dfd34e82819d29eb7d69ff1c2156e7f56afec69f3fe43b5aabcb77b9b9cbd495382683e92ab22728c82", 0xb1}], 0x1, &(0x7f0000002280)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x78}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xf0}}], 0x5, 0x8000010) 4.330794238s ago: executing program 0 (id=4978): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffde0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000f0000fa85957db7d209af14aef2000000000000000000000a00800015321649f65a4a954c4bb97164f351e617ce1e97122d448eef69d91db4dd60815fede1e20f853da934bb0d6f483be82b74032b39090086db61dc2ef8f939692fa426910461b6772a49dd33ee6a67b3166f8be2badc9283c26b77dec4bcfde170a87f0a25b343d76d020000002dd8f22ca5d37b2c78a48f5ca54ccd20ab1119ca5d88e9442bc79f1b43401192886de700"/190, @ANYRES32=0x0, @ANYBLOB="22656b8fa31e359e062457d798f14e485f5026a956fcaf061107dd6c52c82452ef9ffc47d7f28c41e3c5ef"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x804) 4.221418759s ago: executing program 0 (id=4979): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xf4ff) 4.210719954s ago: executing program 0 (id=4980): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc9ffb}]}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) 3.900577051s ago: executing program 2 (id=4981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) io_setup(0x0, &(0x7f0000000000)) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 3.005368908s ago: executing program 1 (id=4982): socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.77345619s ago: executing program 3 (id=4983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000004000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000000000000000000000000000000000000000000000000000300000000000000000000b40000000000000000000000000000000000000000ff000000000000000100000000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2.52443025s ago: executing program 3 (id=4984): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x40000000000000) 2.285840853s ago: executing program 2 (id=4985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000a00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.077580022s ago: executing program 2 (id=4986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000001a00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001900000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000001807010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087}, 0x90) 2.053471875s ago: executing program 3 (id=4987): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ftruncate(r0, 0xd5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 1.920663378s ago: executing program 1 (id=4988): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 1.920467857s ago: executing program 2 (id=4989): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xffffff18}, 0x48) 1.813318992s ago: executing program 3 (id=4990): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050028006a0af2fe000000008500000081000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df1509516f06f1330cf8c3a8b1ff72e6127b0dd488318b5790bee7ebd4745b7cdd77b85b941092314fd085f028f4e09d63781987af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a504c271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd6ff43cb78b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da323947004cacadcaff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389485ee7af1f0387c93559653f50a471c69608241730459f012b060e7d23fd39206000000000000eb55d00162325ba141bd587cc9dad46de56ef907b059b99a79ae5498f6589880ed6eea7b9c670012f80cd6a1397953ba5870786554df26236ebced9390cb6941b8365d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0c7a06a9fa87d64cb77872a0aa9a104e16b3b8c6e64836ac3f32f53c9a2bae513464ca03aff14b9aa4bd9539f5096412b92012e095b84c202060098df3314f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd39000000200000e81c23cf14156951210001c800000000001500000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921e0128dfd70b438af60b060000000000000056642b49b745f3bf2c01808b6d7d748308eea09f0161b4735efbf3411738d6ee7aebf9ef40662d7836d252c566e1ee938a9a6804ed3a1079b0282a12043408cd60b9e53978c81839be0000000000456f7d2a42cb13da2022f23eaec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8ffd3d628293e591dc6f71c2710a7ea8a4fdc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e014df20fa209bcbb5c252b11a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633c26d3927ae1beb065f5ac33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2b2bdc0af7c4c61241750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a145dfcedad69da9cd4b75c624600e78f4458542b14f29611f95d4a318384eb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d583f436137a3c5dc714c9402c21d181aae59efb28d4f91652f6750b9195599d60c534ee8e8ff0755b09004c25edb85bcff24c757aa80900000000b6638c420eb4304f66e3a37aaf000000c42a570f0e9d76fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284df80e4636c25b96174326d82761c26e329555f9290af40000000000000100000fd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b8505809ed2ee9647c5d3b0000bc00edf5e9020c09ab004321610b857e8717974b633b21cb32f0e03280e09758bd445ab91d201782d656ab09f508bbbaca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92b32af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77e8246605a644e9e3d769db497c3960df05caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101985602688888ccb85c87b4f8ffffff7f000000002c331fca28541b7ca211115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000000102000000000000000000000027c9585c0cead5d619d18475ccde2857279a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3b3da8c17a23692759ccf5a205311b7d122532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769da52b3d42c68a3102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e8918a0d6e2949affcacb5ba0a56aa063b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d395832f1e2aad3e519f1634e8fbd8d31330d89069f9448a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d6027ab2aec8f2bcad7fe6bb932bc5751d2974e95455a277fa3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439a3607961d5b59da48a0155e8e42cc13c702cc40c99cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d88723ef65aa5152e3d55e5c66585e2112f5ec64b639a9864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf8a719a7ada06ed03832bf274707c7c970edc20f4a1eaa3b61045a20097208d03f7a146a6901913618738679d4e0af53eae997eecfa0dc3dcec19d3d9205450765d659200c92701ee75c8710470d9eb6f62c5c721883f1544ba66271c8dab05a933746c16b6e93294b561c6715a32a394ed1e6c01670c931bfa76c58c6f34d64e758a7a7f7d33c49336d4cba2cbb170ad7539a45774dfcc55257215c8ae719dc1c232fc6699ef01005887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea895e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd251dc88e91a5e458e66ea1e822d55d4dd919a95eb4c25a08cb6e1070000003a0fd07a4ad9df240e00006aaa2db0dfe416146840d88bd08365e547c970e2983200703864a3b9c4682cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbf5e23a7f5d51ea480371748d18d8e10608ab8261fe058d1732f28814a9981d84a04a2bb36c89bdd245e3293a14df1ac567301a79514f103abd387d6ef2d9d94508ac0f6135c8921279573eefd5d4e33b9ef585980789a94d9848906f545559d30000b5040f0776703363249ca984cbb09752f099efbb9e7362e4999594c1086d8958e9469db01d85fb0b9b3148663e9ea2e755d96c70e540b4200e4cf82986712dd733b26d00e947d03c42215118426d548cb2077b43b89e4163d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5dbc37d03ee056b2579a1d16799589a2600000000aa00006c94bcaf115fbbcb216e3cb7fd9afe16d1fff2d047e508aa5f6de0ea4e9ec1b3a4ab1f8b5f312fc50000000000000000000000000042709db6de7e969ac0ce18b47280fb1b1b1531648122fed3e25edecb5200f5000000000000166f7d36b2966c19af7ffa6afa69e50821c9aa3ae60fbc196cf8ad2f7f86d79db1bb0ecbf9c3d0d3d407574def838e4def26ed9c7e6c69858f7813be8ffc565583663bebfe7485660b67e1436cbc6d4d3c48ab7b033d7d1195173edb16643f69cb779802839d490a4df94e5ea89c192af2ae83876edd59c9a7140e12ba591f073ec604f7e8f1e100cd414e9237ecfc052d9a73a868cd0e4b06da0435af72fb0d25657e8f5464b19fa83f977e6900000000367871fa37420e7a232ef9b440bb0639994c655d144c5786939d6a187b81f9ddd2bec36cd28371b1754cb6c53697fb23576ee0d3fd0a5803c9be9fe364803184f1a7a9a8eb64d17d238fa3238a001aa8ed040a69e9ec0a627e3b3ca64d4680d819c14c71684581000000000000000000000000000000000000c6a6587715865fe14558960bc936bc838bd1f2a00b17a407457681d0760000000000000040000000000000000000004faeabea6de40ae30291662594c993099ef041c264a64d77d69e0cdfa620a191704cef91e269044acf844de65a099200265e13c2a8f9b717886dea8e79407e34bc268a17965033ca1dfeeaf9b49bc68f1546595642f9fc008875ddb7aebda7a16b1d20dd8b65bcdac8cdc75a173fd2e57a9c37bf5a52ea001ec981dd7ad4e5944575ced39233ada8f3c1b856644812828bb79536a5188d14fe537250dc107121534cbbc7598f48aa2335616ae8eb72acf6982048e568e37f1f58e9714343587734c7ec0fa5c44d13165d6384bf9500757b4b0275950d6e7c451eef3fd353d47c54c4c2cf7318e6c24583ba0966225284d1abac80786519c563ddf0e6c023d537ca6e0d6d4e072c98f45415d13f0dcea174f162ebd00b42264f6fa3dccd09f4101dd254e54423b30e06713eccfacb6ffb38afff920980af938a4d78f4b9a6b5c7424e91121cda789104ee490d25843f1622bba93257cc23e45cd7ed42abdb991d51804e674e507dfd53b5ab6944df33f4f494b926f2ceb329550b46e82a939ad82b385e66809d7d4d3630b6f22c2f41fdaa0fadeea09fa4f7005813643c2d6307d55689faf6f656327ac5872a3bd4c11363909a8b9f30e5401993a0f6e1a9b42287542647d1e86b02b7e36319414629ac1f35e1457f922da0c2de76c9e97944efad0a3ad78cda81c5b82709d696e85bbf4595ef9664a6aff8cf96446cb6c26595f4eb659d26c846471f6551dbb24fc6c03a01e33efcd5939472b687d31be9bd9bd1bcda45bd2236f06c000000007d348ebcb9d810d4dc3d55bbe4055ce9c45267daeec7a7d8b498f507e933cc02fb53c2c28fa09ce5ada5de1415309761f6378c794f8ce23c1f7add4f65280ab446ea2d130000000000000000000000d1a0313ff63bc4e4463688db1d6ac7f4595a02c89349a973f118d936f33ea18e69d7739f4532e1b8580ef125b47cf5b402b6f2beffed6cc9afe2b548c4dbc78363118818d9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157999c82bd151bee0c67f3e664225bd917b38aeae1da5524eefef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a319d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e940ed6a6a301a0b761a9cd849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322c887d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a548da6f669e5c34afc272e5a32e85d5f44979431eab3fcd8d33d54000000000000000000ff1f3f6f4b33adcbee66736b4b35b5b909bc7ddd03f17f5f6436156a56c7e77e0808703b370f0cb4f00074200ae3e4ea0611d548f34582848903e4459d0a18ab9b113ebc614fafe4bd03cb1a8843e592f1b102b1bb87f13c50a1dc5df223e5bbcd06c55393f9c0e08ab6509bbed0dfedbf37309c99bf1e1fc7512afb7bd334653356419f8aa57f1224a54a85a3041657fb5037dda5b0f2e6a9673cc0d51b28954ef8c0ca82e69d198729b2c984a04b0f6ef9486767f5928461df5b8f84e0b790fa7d9088fdb7b7e6f020d4eae420155f1739307421fc3e9d4ffaffff2434f3d167d24bead3c6cedb2dd480d5c8b21c0edb06893c1fb18e9e716525f115055a84daca135d8972280324a9ffd4e636c87225c2512eb3e0fe65972c84361536e52a6ea677ffcb4bf8fac2009f24c01b7c86c203ce9093dd53b154110f033a25034752dc8561ed7bb7343e069ba1ad6f1d7437b584d2c292088d3d80e8834ae8760cc0211cb03f3ed168131eba4c8a0000000000000000000000000019c2dbe83523a58f68e66fa9fdf1d2878bf2ff524e6da7f918e87c1b1de17ff8077ba247fd5498310ae532b9bc6c583edfa97f7a4c00cce855a225dc017afc3c06e8a72b62bdb64e83cb6a319eb551345cfb24aaa02ddc4ec2daa942dc6e2332d724b11c0d9c8ff4ee94849938f5d231fdb5984d5442b564c079fce70ac620dcf7739693beca9dff66e957dd2fc03ce462da31e7f7a657118387727e8500"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 1.797226669s ago: executing program 2 (id=4991): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x9, 0x4, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f00000000c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x5, 0x39, "2d3aaffd6b024efffe48af5743a35ea33738205b6e5947b6d1217356f8392b62de2c4c63b79e98344def837eedcc948f2b43f116869971d4a7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x8, 0x9, 0x9, 0x80, 0x9, 0x90, 0xfffc, 0x0, 0x1, 0xc00, 0x8, 0x101}}, &(0x7f0000000340)={0x20, 0x85, 0xffffffffffffff6f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0xe93c}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0x70}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.784396833s ago: executing program 3 (id=4992): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x69, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x80, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "62730aee33"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x200, 0x9311, 0xda}, [@country_functional={0xe, 0x24, 0x7, 0x10, 0x0, [0x8001, 0xf415, 0x3, 0x1]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x3d, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x3, 0x8, 0x1, 0xff, 0xc5}, 0x99, &(0x7f0000000280)={0x5, 0xf, 0x99, 0x4, [@generic={0x28, 0x10, 0x2, "881f7fcbbe057fe2ca2233fd956360dd84e575ffc36f6cb680804541241efefe6d3ddba68c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x3, 0x7fff}, @generic={0x58, 0x10, 0x1, "c405857e26c9cb5083335cf3dd6ffb2fac7253df5eaf3f911078c1018d7c2bd29524a6b6652b9910b816ba2f169e7aadb56278c9360bf6a9b7737f4c8c1b6fd22c77019873393fb8810f269a0f54d21fd98c3b646c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0xa, 0x3}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 1.461452077s ago: executing program 0 (id=4993): lsetxattr$system_posix_acl(0x0, &(0x7f0000000580)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fchmod(0xffffffffffffffff, 0x42) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0xffffffffffffffff, r3) setreuid(r1, r3) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, &(0x7f0000000040)=[0x1], 0x0, 0x0, 0x0, 0x7f}) socket$inet(0x2, 0xa, 0xab44) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x5, 0x192, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x7, 0xed}}) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000006480)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r6 = syz_clone(0x89802c00, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000000200)={0x0, 0x6, {0x0, 0x0, 0x40, {0xfffe, 0x8000}, {0xfffc}, @cond=[{0xe62, 0xd, 0x10, 0x2, 0x4, 0x1000}, {0x9, 0xdb0f, 0x4, 0x1, 0x9e, 0x6}]}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) ptrace$pokeuser(0x6, r6, 0x358, 0xfffffe7fffffffff) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000280)=""/188) 1.41330308s ago: executing program 0 (id=4994): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1, 0x4}, {0x7c}, {0x6}]}) (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async) r2 = epoll_create1(0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x8000000e}) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000ff0300001c0001000b"], 0x3c}}, 0x0) (async, rerun: 64) dup3(r1, r2, 0x80000) (rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.177387886s ago: executing program 0 (id=4995): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/232, 0xe8}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 877.488741ms ago: executing program 4 (id=4996): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300020e0000000007000000000000030005000000000002004e2300000000000000000000000003000600b8000000020000030000000000000000000000000200080008000000b60000000000000002000100000000000040030200000000020009000800"], 0x70}, 0x1, 0x7}, 0x0) 807.037126ms ago: executing program 4 (id=4997): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) (async, rerun: 64) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x8, 0x3a, 0x6, 0x5e157e35, 0x80}}}}}, 0x0) (rerun: 64) 699.397604ms ago: executing program 4 (id=4998): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x80000000000000) 357.463876ms ago: executing program 4 (id=4999): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x399, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x80, 0x4, 0x0, 0x0, 0xc8, 0x9, 0x900}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700000000000240000001800018014000200766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x35}}, 0x88}}, 0x0) 0s ago: executing program 4 (id=5000): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980913, 0x1, '\x00', @p_u32=0x0}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) shutdown(r0, 0x2) recvfrom(r1, &(0x7f0000000100)=""/111, 0x6f, 0x60ff, 0x0, 0x0) kernel console output (not intermixed with test programs): T30] audit: type=1326 audit(1750814194.138:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effee9c11e5 code=0x7ffc0000 [ 1089.853093][T27721] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024 [ 1089.877413][ T30] audit: type=1326 audit(1750814194.138:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effee9c11e5 code=0x7ffc0000 [ 1089.901222][T27721] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1089.949259][T27721] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1089.959010][T27721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.967037][T27721] usb 1-1: Product: syz [ 1089.993050][ T30] audit: type=1326 audit(1750814194.148:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effee9c11e5 code=0x7ffc0000 [ 1090.052550][T27721] usb 1-1: Manufacturer: syz [ 1090.057202][T27721] usb 1-1: SerialNumber: syz [ 1090.136302][T27721] usb 1-1: config 0 descriptor?? [ 1090.141810][ T30] audit: type=1326 audit(1750814194.148:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.4549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effee9c11e5 code=0x7ffc0000 [ 1090.224949][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1090.457399][ T5896] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1090.525170][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1090.687668][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 1090.727812][ T5896] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1090.757276][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.845712][ T5896] usb 3-1: Product: syz [ 1090.850639][T27721] usb 1-1: USB disconnect, device number 67 [ 1090.881438][ T5896] usb 3-1: Manufacturer: syz [ 1090.906492][ T5896] usb 3-1: SerialNumber: syz [ 1090.926782][ T5896] usb 3-1: config 0 descriptor?? [ 1090.971977][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 1091.167843][ T8712] netlink: 211352 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1091.486672][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1091.516469][ T8765] netlink: 'syz.3.4559': attribute type 7 has an invalid length. [ 1091.544910][ T8772] veth1_virt_wifi: entered promiscuous mode [ 1091.562526][ T8772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1091.578663][ T8765] netlink: 'syz.3.4559': attribute type 8 has an invalid length. [ 1091.581639][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1091.604850][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1091.612552][ T8772] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1091.650721][ T8773] netlink: 'syz.0.4560': attribute type 7 has an invalid length. [ 1091.664260][ T8773] netlink: 'syz.0.4560': attribute type 8 has an invalid length. [ 1091.681625][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1091.701941][ T8765] gretap0: entered promiscuous mode [ 1091.715597][ T8765] batadv_slave_1: entered promiscuous mode [ 1091.736459][ T8765] gretap0: left promiscuous mode [ 1091.745272][ T8765] batadv_slave_1: left promiscuous mode [ 1091.816059][ T8774] tipc: Started in network mode [ 1091.821171][ T8774] tipc: Node identity ac14140f, cluster identity 4711 [ 1091.831908][ T8774] tipc: New replicast peer: 255.255.255.255 [ 1091.844539][ T8774] tipc: Enabled bearer , priority 10 [ 1091.901937][ T8773] gretap0: entered promiscuous mode [ 1091.923878][ T8773] batadv_slave_1: entered promiscuous mode [ 1091.942479][ T8773] gretap0: left promiscuous mode [ 1091.960598][ T8773] batadv_slave_1: left promiscuous mode [ 1092.116395][T27721] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1092.266221][ T8804] netlink: 'syz.3.4563': attribute type 7 has an invalid length. [ 1092.274432][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4563'. [ 1092.293581][ T5896] gspca_se401: read req failed req 0x06 error -19 [ 1092.300229][T27721] usb 5-1: Using ep0 maxpacket: 16 [ 1092.309431][T27721] usb 5-1: config 0 has no interfaces? [ 1092.317853][T27721] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1092.333230][ T5896] usb 3-1: USB disconnect, device number 126 [ 1092.554929][T27721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.737186][T27721] usb 5-1: config 0 descriptor?? [ 1092.967474][ T5918] tipc: Node number set to 2886997007 [ 1093.331878][ T8830] ip6gre1: entered promiscuous mode [ 1093.337472][ T8830] ip6gre1: entered allmulticast mode [ 1093.417214][ T5918] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1093.578730][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1093.590183][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.611510][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1093.648050][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1093.682832][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.723355][ T5918] usb 3-1: config 0 descriptor?? [ 1093.737726][ T5917] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1093.897519][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 1093.910648][ T5917] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1093.921382][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.969657][ T5917] usb 2-1: Product: syz [ 1093.976217][ T5917] usb 2-1: Manufacturer: syz [ 1094.055988][ T5917] usb 2-1: SerialNumber: syz [ 1094.219442][ T5918] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max [ 1094.305402][ T5918] microsoft 0003:045E:07DA.0031: No inputs registered, leaving [ 1094.528680][ T5918] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1094.649739][ T5918] microsoft 0003:045E:07DA.0031: no inputs found [ 1094.670039][ T5918] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 1094.754542][ T5918] usb 3-1: USB disconnect, device number 127 [ 1094.754615][T27721] usb 5-1: USB disconnect, device number 62 [ 1094.771041][ T5917] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1094.867029][ T8849] fido_id[8849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1094.964362][ T5917] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1095.004169][ T5917] usb 2-1: USB disconnect, device number 107 [ 1095.060054][T13576] udevd[13576]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.653230][ T8893] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 1095.699938][ T8893] gre1: entered allmulticast mode [ 1095.707633][ T5919] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1095.847919][ T5919] usb 1-1: device descriptor read/64, error -71 [ 1096.110539][ T5919] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1096.298110][ T5919] usb 1-1: device descriptor read/64, error -71 [ 1096.417907][ T5919] usb usb1-port1: attempt power cycle [ 1096.827576][ T5919] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1096.907140][ T5919] usb 1-1: device descriptor read/8, error -71 [ 1096.917687][T27721] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1097.107936][T27721] usb 4-1: Using ep0 maxpacket: 16 [ 1097.207605][ T5919] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1097.263156][ T5919] usb 1-1: device descriptor read/8, error -71 [ 1097.434483][ T5919] usb usb1-port1: unable to enumerate USB device [ 1097.667450][ T5917] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1097.827875][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 1097.837676][ T5917] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 1097.850436][ T5917] usb 5-1: config 0 has no interface number 0 [ 1097.901192][ T5917] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1097.913129][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.933999][ T5917] usb 5-1: Product: syz [ 1098.115172][ T5917] usb 5-1: Manufacturer: syz [ 1098.132166][ T5917] usb 5-1: SerialNumber: syz [ 1098.352649][ T5917] usb 5-1: config 0 descriptor?? [ 1099.336253][ T5917] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1099.380560][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.518214][T27721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1099.526552][ T5917] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1099.548768][T27721] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1099.559246][ T5917] usb 5-1: media controller created [ 1099.574206][T27721] usb 4-1: can't read configurations, error -71 [ 1099.606677][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.648267][ T5917] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1099.656415][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1099.862335][ T5917] usb 5-1: USB disconnect, device number 63 [ 1099.968682][ T5917] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1100.104386][ T8995] xt_l2tp: wrong L2TP version: 0 [ 1100.507986][ T5917] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1100.717744][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1100.977411][ T5917] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1101.073555][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1101.117509][ T5917] usb 3-1: device descriptor read/64, error -71 [ 1101.227869][ T5917] usb usb3-port1: attempt power cycle [ 1101.314068][ T9042] FAULT_INJECTION: forcing a failure. [ 1101.314068][ T9042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.355944][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.1.4594 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1101.355971][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1101.355982][ T9042] Call Trace: [ 1101.355990][ T9042] [ 1101.356000][ T9042] dump_stack_lvl+0x189/0x250 [ 1101.356031][ T9042] ? __pfx____ratelimit+0x10/0x10 [ 1101.356055][ T9042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.356080][ T9042] ? __pfx__printk+0x10/0x10 [ 1101.356113][ T9042] should_fail_ex+0x414/0x560 [ 1101.356141][ T9042] _copy_from_user+0x2d/0xb0 [ 1101.356159][ T9042] copy_from_sockptr+0x5e/0xa0 [ 1101.356179][ T9042] do_ip_setsockopt+0x1b34/0x2d00 [ 1101.356203][ T9042] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1101.356224][ T9042] ? aa_sk_perm+0x81e/0x950 [ 1101.356249][ T9042] ? __pfx_aa_sk_perm+0x10/0x10 [ 1101.356263][ T9042] ? __lock_acquire+0xab9/0xd20 [ 1101.356296][ T9042] ip_setsockopt+0x66/0x110 [ 1101.356312][ T9042] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1101.356332][ T9042] do_sock_setsockopt+0x25a/0x3e0 [ 1101.356356][ T9042] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1101.356381][ T9042] ? __fget_files+0x2a/0x420 [ 1101.356410][ T9042] __x64_sys_setsockopt+0x18b/0x220 [ 1101.356435][ T9042] do_syscall_64+0xfa/0x3b0 [ 1101.356450][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 1101.356473][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.356490][ T9042] ? clear_bhb_loop+0x60/0xb0 [ 1101.356511][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.356529][ T9042] RIP: 0033:0x7f24c498e929 [ 1101.356546][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.356562][ T9042] RSP: 002b:00007f24c57c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1101.356580][ T9042] RAX: ffffffffffffffda RBX: 00007f24c4bb5fa0 RCX: 00007f24c498e929 [ 1101.356593][ T9042] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 1101.356603][ T9042] RBP: 00007f24c57c3090 R08: 000000000000000c R09: 0000000000000000 [ 1101.356614][ T9042] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1101.356625][ T9042] R13: 0000000000000000 R14: 00007f24c4bb5fa0 R15: 00007f24c4cdfa28 [ 1101.356655][ T9042] [ 1101.693382][ T5917] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 1101.810690][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1102.047532][ T5917] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1102.137767][ T5917] usb 3-1: device descriptor read/8, error -71 [ 1102.253557][ T5917] usb usb3-port1: unable to enumerate USB device [ 1102.373698][ T9069] fuse: Invalid gid '00000000000000000000004' [ 1102.385640][ T9069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1102.557666][ T5917] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1102.683254][ T977] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1102.703365][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1102.703385][ T30] audit: type=1326 audit(1750814207.408:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.0.4605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd03a18e929 code=0x0 [ 1102.907447][ T977] usb 4-1: device descriptor read/64, error -71 [ 1102.927488][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1102.934345][ T5917] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 1102.954603][ T5917] usb 2-1: config 6 has no interface number 0 [ 1102.963146][ T5917] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1102.975471][ T5917] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.993066][ T5917] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1103.004929][ T5917] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1103.026429][ T5917] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1103.042795][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.051294][ T5917] usb 2-1: Product: syz [ 1103.055794][ T5917] usb 2-1: Manufacturer: syz [ 1103.070435][ T5917] usb 2-1: SerialNumber: syz [ 1103.094358][ T5917] hso 2-1:6.2: Failed to find BULK IN ep [ 1103.147756][ T977] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1103.287410][ T977] usb 4-1: device descriptor read/64, error -71 [ 1103.307169][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.318744][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.343071][ T5917] usb 2-1: USB disconnect, device number 108 [ 1103.410780][ T977] usb usb4-port1: attempt power cycle [ 1103.758799][ T977] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1103.799498][ T977] usb 4-1: device descriptor read/8, error -71 [ 1103.867802][T27721] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1103.960462][ T9127] wg1: entered promiscuous mode [ 1103.974033][ T9127] wg1: entered allmulticast mode [ 1104.037626][ T977] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1104.047362][T27721] usb 5-1: Using ep0 maxpacket: 32 [ 1104.061667][T27721] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1104.078149][ T977] usb 4-1: device descriptor read/8, error -71 [ 1104.106807][T27721] usb 5-1: config 0 has no interface number 0 [ 1104.132318][T27721] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1104.167848][T27721] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1104.193510][T27721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.200111][ T977] usb usb4-port1: unable to enumerate USB device [ 1104.237677][T27721] usb 5-1: Product: syz [ 1104.243830][T27721] usb 5-1: Manufacturer: syz [ 1104.254662][T27721] usb 5-1: SerialNumber: syz [ 1104.340403][T27721] usb 5-1: config 0 descriptor?? [ 1104.547672][ T9144] xt_l2tp: wrong L2TP version: 0 [ 1104.801008][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4610'. [ 1104.848671][T27721] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1104.857650][ T5917] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1104.886845][T27721] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1104.916156][T27721] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1104.928592][T27721] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1104.978416][T27721] usb 5-1: USB disconnect, device number 64 [ 1105.001575][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1105.257446][ T5917] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1105.420729][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1105.545098][ T5917] usb usb2-port1: attempt power cycle [ 1105.907508][ T977] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1105.933149][ T5917] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1105.982490][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1106.240952][ T977] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1106.253124][ T977] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1106.272343][ T977] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1106.283604][ T5917] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1106.318693][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1106.355508][ T977] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1106.427854][ T5917] usb usb2-port1: unable to enumerate USB device [ 1106.444549][ T977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1106.474109][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.799177][ T977] ath6kl: Failed to submit usb control message: -71 [ 1106.807443][ T977] ath6kl: unable to send the bmi data to the device: -71 [ 1106.844498][ T977] ath6kl: Unable to send get target info: -71 [ 1106.879568][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4626'. [ 1106.889697][ T977] ath6kl: Failed to init ath6kl core: -71 [ 1106.906635][ T977] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1107.034586][ T977] usb 5-1: USB disconnect, device number 65 [ 1107.124272][ T9200] netlink: 'syz.3.4627': attribute type 10 has an invalid length. [ 1107.173629][ T9200] veth0_vlan: left promiscuous mode [ 1107.185449][ T9200] veth0_vlan: entered promiscuous mode [ 1107.202869][ T9200] team0: Device veth0_vlan failed to register rx_handler [ 1108.791288][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1109.987643][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1110.307418][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1110.324227][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1110.674178][ T24] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1110.805776][ T24] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1110.907146][ T24] usb 4-1: Product: syz [ 1110.914992][ T24] usb 4-1: Manufacturer: syz [ 1110.924650][ T24] usb 4-1: SerialNumber: syz [ 1111.267454][ T24] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 1111.313609][ T24] visor 4-1:1.0: probe with driver visor failed with error -71 [ 1111.353023][ T24] usb 4-1: USB disconnect, device number 54 [ 1113.040726][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1113.093958][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1113.163637][ T9386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1113.279276][ T9398] binder: 9397:9398 ioctl 4018620d 0 returned -22 [ 1113.337868][ T5918] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1113.634976][ T5918] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1113.657590][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.665763][ T5918] usb 2-1: Product: syz [ 1113.743983][ T9410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.878483][ T5918] usb 2-1: Manufacturer: syz [ 1113.891376][ T5918] usb 2-1: SerialNumber: syz [ 1113.998207][ T5918] usb 2-1: config 0 descriptor?? [ 1114.452447][ T5918] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1114.463639][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.492794][ T9383] pim6reg: entered allmulticast mode [ 1114.502692][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.688751][ T5918] usb 2-1: USB disconnect, device number 113 [ 1114.917419][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1115.195188][ T24] usb 5-1: config index 0 descriptor too short (expected 65069, got 45) [ 1115.270776][ T24] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1115.339247][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.374628][ T24] usb 5-1: config 0 has no interfaces? [ 1115.394274][ T24] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1115.472593][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.602205][ T24] usb 5-1: config 0 descriptor?? [ 1115.860444][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.870628][ T24] usb 5-1: USB disconnect, device number 66 [ 1115.878722][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.897559][ T5918] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1116.070336][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.096201][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1116.117396][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1116.130350][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1116.219763][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1116.237387][ T5918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1116.273059][ T5918] usb 2-1: Manufacturer: syz [ 1116.277978][ T977] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1116.308159][ T5918] usb 2-1: config 0 descriptor?? [ 1116.351444][ T9485] FAULT_INJECTION: forcing a failure. [ 1116.351444][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.398944][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.3.4677 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1116.398970][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1116.398981][ T9485] Call Trace: [ 1116.398991][ T9485] [ 1116.399001][ T9485] dump_stack_lvl+0x189/0x250 [ 1116.399031][ T9485] ? __pfx____ratelimit+0x10/0x10 [ 1116.399055][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.399072][ T9485] ? __pfx__printk+0x10/0x10 [ 1116.399085][ T9485] ? __pfx___might_resched+0x10/0x10 [ 1116.399102][ T9485] should_fail_ex+0x414/0x560 [ 1116.399117][ T9485] should_failslab+0xa8/0x100 [ 1116.399136][ T9485] __kmalloc_noprof+0xcb/0x4f0 [ 1116.399153][ T9485] ? sock_kmalloc+0xd6/0x160 [ 1116.399179][ T9485] sock_kmalloc+0xd6/0x160 [ 1116.399202][ T9485] ip_mc_source+0x760/0x1490 [ 1116.399220][ T9485] ? ip_rt_multicast_event+0x69/0x80 [ 1116.399234][ T9485] ? __ip_mc_join_group+0x431/0x510 [ 1116.399250][ T9485] do_ip_setsockopt+0x22c8/0x2d00 [ 1116.399263][ T9485] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1116.399277][ T9485] ? aa_sk_perm+0x81e/0x950 [ 1116.399310][ T9485] ? __pfx_aa_sk_perm+0x10/0x10 [ 1116.399341][ T9485] ip_setsockopt+0x66/0x110 [ 1116.399356][ T9485] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1116.399374][ T9485] do_sock_setsockopt+0x25a/0x3e0 [ 1116.399396][ T9485] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1116.399417][ T9485] ? __fget_files+0x2a/0x420 [ 1116.399444][ T9485] __x64_sys_setsockopt+0x18b/0x220 [ 1116.399467][ T9485] do_syscall_64+0xfa/0x3b0 [ 1116.399480][ T9485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1116.399500][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.399516][ T9485] ? clear_bhb_loop+0x60/0xb0 [ 1116.399535][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.399557][ T9485] RIP: 0033:0x7effee98e929 [ 1116.399572][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.399586][ T9485] RSP: 002b:00007effec7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1116.399605][ T9485] RAX: ffffffffffffffda RBX: 00007effeebb6080 RCX: 00007effee98e929 [ 1116.399618][ T9485] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 1116.399628][ T9485] RBP: 00007effec7d5090 R08: 000000000000000c R09: 0000000000000000 [ 1116.399639][ T9485] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1116.399649][ T9485] R13: 0000000000000000 R14: 00007effeebb6080 R15: 00007effeecdfa28 [ 1116.399669][ T9485] [ 1116.667404][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1116.676773][ T977] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1116.686650][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.700288][ T977] usb 3-1: Product: syz [ 1116.708981][ T977] usb 3-1: Manufacturer: syz [ 1116.719196][ T977] usb 3-1: SerialNumber: syz [ 1116.735452][ T977] usb 3-1: config 0 descriptor?? [ 1116.742984][ T5918] rc_core: IR keymap rc-hauppauge not found [ 1116.749658][ T5918] Registered IR keymap rc-empty [ 1116.755171][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.787817][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.819478][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1116.835970][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input98 [ 1116.854300][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.877748][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.940274][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.968447][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1116.986586][ T977] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1117.017573][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.061103][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.215319][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.237667][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.290519][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.356596][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1117.391794][ T5918] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1117.415225][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1117.424663][ T5918] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1117.434459][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1117.456078][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1117.576253][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1117.586437][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1117.598460][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1118.127825][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1118.138991][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1118.148846][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1118.458826][T27721] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1118.617537][T27721] usb 1-1: Using ep0 maxpacket: 32 [ 1118.625432][T27721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1118.635018][T27721] usb 1-1: config 5 has an invalid interface number: 61 but max is 0 [ 1118.645831][T27721] usb 1-1: config 5 has no interface number 0 [ 1118.678944][ T5918] usb 2-1: USB disconnect, device number 114 [ 1118.686241][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.694270][T27721] usb 1-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 1118.756154][ T9528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.779964][T27721] usb 1-1: config 5 interface 61 has no altsetting 0 [ 1118.805619][T27721] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 1118.816705][T27721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.884603][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.891841][ T9534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.913491][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.920710][ T9534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.929264][T27721] usb 1-1: Product: syz [ 1118.933461][T27721] usb 1-1: Manufacturer: syz [ 1119.120403][T27721] usb 1-1: SerialNumber: syz [ 1119.143444][ T977] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1119.158524][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4683'. [ 1119.174718][ T977] usb 3-1: USB disconnect, device number 6 [ 1119.208375][ T9522] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1119.426229][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.561976][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.627680][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1119.700358][T27721] ath6kl: Failed to submit usb control message: -71 [ 1119.742382][T27721] ath6kl: unable to send the bmi data to the device: -71 [ 1119.750903][T27721] ath6kl: Unable to send get target info: -71 [ 1119.758533][T27721] ath6kl: Failed to init ath6kl core: -71 [ 1119.765509][T27721] ath6kl_usb 1-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 1119.827599][T27721] usb 1-1: USB disconnect, device number 72 [ 1120.945502][T27721] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1121.077846][ T30] audit: type=1326 audit(1750814225.778:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.4.4691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f808a58e929 code=0x0 [ 1121.191432][T27721] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1121.201761][T27721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.222123][T27721] usb 1-1: Product: syz [ 1121.233789][T27721] usb 1-1: Manufacturer: syz [ 1121.274356][T27721] usb 1-1: SerialNumber: syz [ 1121.320683][T27721] usb 1-1: config 0 descriptor?? [ 1121.327595][ T5896] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1121.374363][T27721] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1121.517360][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1121.527834][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.547581][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.555878][ T5896] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1121.557020][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.568038][ T5896] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1121.615180][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.632035][ T5896] usb 4-1: config 0 has no interface number 0 [ 1121.656331][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.683149][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has an invalid descriptor for endpoint zero, skipping [ 1121.699480][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.740342][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.773176][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.794190][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0xE, skipping [ 1121.827795][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.878141][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0xE, skipping [ 1121.900735][ T5896] usb 4-1: config 0 interface 237 altsetting 88 bulk endpoint 0x1 has invalid maxpacket 999 [ 1121.915477][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.925051][T27721] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1121.938900][T27721] sq905c 1-1:0.0: Get version command failed [ 1121.981726][T27721] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1122.002073][ T5896] usb 4-1: config 0 interface 237 altsetting 88 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1122.052695][ T5896] usb 4-1: config 0 interface 237 altsetting 88 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1122.076525][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0x1, skipping [ 1122.123409][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0x4, skipping [ 1122.164246][ T5896] usb 4-1: config 0 interface 237 altsetting 88 bulk endpoint 0xC has invalid maxpacket 32 [ 1122.209464][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0xE, skipping [ 1122.240741][ T5896] usb 4-1: config 0 interface 237 altsetting 88 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1122.284976][ T5896] usb 4-1: config 0 interface 237 altsetting 88 has a duplicate endpoint with address 0x1, skipping [ 1122.314476][ T5896] usb 4-1: config 0 interface 237 has no altsetting 0 [ 1122.339917][ T5896] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=15.49 [ 1122.354752][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.362998][T27721] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1122.376653][ T5896] usb 4-1: Product: syz [ 1122.385858][ T5896] usb 4-1: Manufacturer: syz [ 1122.394164][ T5896] usb 4-1: SerialNumber: syz [ 1122.410926][ T5896] usb 4-1: config 0 descriptor?? [ 1122.428017][ T9621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.436965][ T9621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.449801][ T9621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.502863][ T5918] usb 1-1: USB disconnect, device number 73 [ 1122.530235][T27721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.559885][T27721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1122.585010][T27721] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1122.597107][T27721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.626357][T27721] usb 2-1: config 0 descriptor?? [ 1123.045601][ T5896] option 4-1:0.237: GSM modem (1-port) converter detected [ 1123.103329][T27721] kovaplus 0003:1E7D:2D50.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1123.118112][ T5918] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1123.263165][ T5896] usb 4-1: USB disconnect, device number 55 [ 1123.377596][ T5918] usb 5-1: config 0 has no interfaces? [ 1123.387230][ T5896] option 4-1:0.237: device disconnected [ 1123.448442][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1123.470635][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.511120][ T5918] usb 5-1: Product: syz [ 1123.533111][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1123.534314][ T5918] usb 5-1: Manufacturer: syz [ 1123.547112][ T5918] usb 5-1: SerialNumber: syz [ 1123.579855][ T5918] usb 5-1: config 0 descriptor?? [ 1123.671270][ T9672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1123.942482][ T9666] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:20003 [ 1123.955300][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1123.964806][ T9666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1125.323493][T27721] kovaplus 0003:1E7D:2D50.0032: couldn't init struct kovaplus_device [ 1125.355013][T27721] kovaplus 0003:1E7D:2D50.0032: couldn't install mouse [ 1125.444658][T27721] kovaplus 0003:1E7D:2D50.0032: probe with driver kovaplus failed with error -71 [ 1125.445605][ T9750] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1125.496601][T27721] usb 2-1: USB disconnect, device number 115 [ 1125.513262][ T9756] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1125.717839][ T5918] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1125.805980][ T9764] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1125.856574][ T5919] usb 5-1: USB disconnect, device number 67 [ 1125.863077][ T5918] usb 1-1: device descriptor read/64, error -71 [ 1125.870441][ T9764] syzkaller1: linktype set to 780 [ 1126.117761][ T5918] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1126.302220][ T5918] usb 1-1: device descriptor read/64, error -71 [ 1126.438006][ T5918] usb usb1-port1: attempt power cycle [ 1126.788244][ T5918] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1126.843624][ T5918] usb 1-1: device descriptor read/8, error -71 [ 1127.217105][ T5918] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1127.271823][ T5918] usb 1-1: device descriptor read/8, error -71 [ 1127.462057][ T5918] usb usb1-port1: unable to enumerate USB device [ 1127.597504][ T5896] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1127.759079][ T5896] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1127.768838][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.788344][ T5896] usb 4-1: config 0 descriptor?? [ 1127.807034][ T5896] cp210x 4-1:0.0: cp210x converter detected [ 1127.937797][T27721] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1127.984124][ T9838] loop6: detected capacity change from 0 to 1 [ 1128.006442][ T9838] Dev loop6: unable to read RDB block 1 [ 1128.022865][ T9838] loop6: unable to read partition table [ 1128.040044][ T9838] loop6: partition table beyond EOD, truncated [ 1128.064523][ T9838] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.108222][T27721] usb 5-1: Using ep0 maxpacket: 16 [ 1128.135815][T27721] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1128.154069][T27721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.187635][T27721] usb 5-1: Product: syz [ 1128.192014][T27721] usb 5-1: Manufacturer: syz [ 1128.196642][T27721] usb 5-1: SerialNumber: syz [ 1128.425652][ T5896] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1128.488942][ T5896] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1128.585760][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4724'. [ 1128.723842][T27721] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1128.908055][ T5919] usb 4-1: USB disconnect, device number 56 [ 1128.921655][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1128.967991][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1129.054896][ T9884] ip6gre2: entered promiscuous mode [ 1129.061569][ T9884] ip6gre2: entered allmulticast mode [ 1129.238468][ T5919] cp210x 4-1:0.0: device disconnected [ 1129.269301][T27721] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1129.332816][T27721] usb 5-1: USB disconnect, device number 68 [ 1129.415068][ T5918] usb 3-1: config 0 has no interfaces? [ 1129.459409][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1129.487476][ T977] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1129.494478][T13576] udevd[13576]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.520989][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.548690][ T5918] usb 3-1: Product: syz [ 1129.553081][ T5918] usb 3-1: Manufacturer: syz [ 1129.563170][ T5918] usb 3-1: SerialNumber: syz [ 1129.585607][ T5918] usb 3-1: config 0 descriptor?? [ 1129.617652][ T977] usb 1-1: device descriptor read/64, error -71 [ 1129.868507][ T977] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1129.947639][ T5919] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1130.042259][ T977] usb 1-1: device descriptor read/64, error -71 [ 1130.074008][ T9932] batadv_slave_0: entered promiscuous mode [ 1130.085875][ T9931] batadv_slave_0: left promiscuous mode [ 1130.145192][ T5919] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1130.157746][ T977] usb usb1-port1: attempt power cycle [ 1130.181468][ T5919] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1130.197799][T27721] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1130.213382][ T5919] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.235064][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.278952][ T9920] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1130.308943][ T5919] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1130.362460][T27721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1130.373205][T27721] usb 4-1: not running at top speed; connect to a high speed hub [ 1130.385886][T27721] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.399923][T27721] usb 4-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=2b.c8 [ 1130.422450][T27721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.568422][ T9920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1130.634810][T27721] usb 4-1: Product: syz [ 1130.664732][ T977] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1130.666436][T27721] usb 4-1: Manufacturer: syz [ 1130.717687][T27721] usb 4-1: SerialNumber: syz [ 1130.733082][ T977] usb 1-1: device descriptor read/8, error -71 [ 1130.810094][ T5919] usb 5-1: USB disconnect, device number 69 [ 1130.977628][ T977] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1131.008479][ T977] usb 1-1: device descriptor read/8, error -71 [ 1131.083836][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.092974][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.117659][ T977] usb usb1-port1: unable to enumerate USB device [ 1131.217978][ T9981] batadv0: entered promiscuous mode [ 1131.245540][ T9981] batadv0: left promiscuous mode [ 1131.253595][T27721] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 1131.325378][T27721] sonixb 4-1:6.0: Error reading register 00: -71 [ 1131.363131][T27721] usb 4-1: USB disconnect, device number 57 [ 1131.370739][ T977] usb 3-1: USB disconnect, device number 7 [ 1131.580751][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1131.623301][T10002] netlink: 'syz.4.4736': attribute type 7 has an invalid length. [ 1131.631157][T10002] netlink: 'syz.4.4736': attribute type 8 has an invalid length. [ 1131.646572][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1131.669636][T10002] gretap0: entered promiscuous mode [ 1131.713288][T10002] batadv_slave_1: entered promiscuous mode [ 1131.749883][T10002] gretap0: left promiscuous mode [ 1131.780697][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.795438][T10002] batadv_slave_1: left promiscuous mode [ 1131.806934][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.947544][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1131.977881][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4738'. [ 1132.107549][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1132.124404][ T977] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1132.146056][ T977] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1132.186878][ T977] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1132.207041][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1132.233173][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1132.249281][ T977] usb 3-1: SerialNumber: syz [ 1132.276644][ T9998] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1132.503073][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1132.548307][T27721] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1132.570914][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1132.845165][ T977] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1132.865021][ T977] usb 3-1: USB disconnect, device number 8 [ 1132.884453][T27721] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1132.953048][T27721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.021740][T27721] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1133.032345][T27721] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1133.085562][T27721] usb 1-1: Manufacturer: syz [ 1133.124139][T27721] usb 1-1: config 0 descriptor?? [ 1133.298183][T27721] rc_core: IR keymap rc-hauppauge not found [ 1133.304137][T27721] Registered IR keymap rc-empty [ 1133.312324][T27721] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1133.341769][T27721] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input99 [ 1133.813463][T27721] usb 1-1: USB disconnect, device number 82 [ 1135.182766][T10139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1135.212091][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1135.246706][T10139] netlink: 'syz.4.4750': attribute type 7 has an invalid length. [ 1135.420024][T10139] netlink: 'syz.4.4750': attribute type 8 has an invalid length. [ 1135.446430][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1135.913847][T10139] gretap0: entered promiscuous mode [ 1135.980672][T10139] batadv_slave_1: entered promiscuous mode [ 1136.034872][T10190] FAULT_INJECTION: forcing a failure. [ 1136.034872][T10190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.049290][T10190] CPU: 0 UID: 0 PID: 10190 Comm: syz.1.4758 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1136.049315][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1136.049326][T10190] Call Trace: [ 1136.049333][T10190] [ 1136.049342][T10190] dump_stack_lvl+0x189/0x250 [ 1136.049372][T10190] ? __pfx____ratelimit+0x10/0x10 [ 1136.049396][T10190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.049419][T10190] ? __pfx__printk+0x10/0x10 [ 1136.049438][T10190] ? __might_fault+0xb0/0x130 [ 1136.049465][T10190] should_fail_ex+0x414/0x560 [ 1136.049491][T10190] _copy_from_user+0x2d/0xb0 [ 1136.049508][T10190] ___sys_recvmsg+0x12e/0x510 [ 1136.049533][T10190] ? __pfx____sys_recvmsg+0x10/0x10 [ 1136.049573][T10190] ? __fget_files+0x3a0/0x420 [ 1136.049592][T10190] do_recvmmsg+0x307/0x770 [ 1136.049608][T10190] ? __pfx_do_recvmmsg+0x10/0x10 [ 1136.049625][T10190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1136.049649][T10190] __x64_sys_recvmmsg+0x190/0x240 [ 1136.049662][T10190] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1136.049673][T10190] ? rcu_is_watching+0x15/0xb0 [ 1136.049690][T10190] ? do_syscall_64+0xbe/0x3b0 [ 1136.049701][T10190] do_syscall_64+0xfa/0x3b0 [ 1136.049708][T10190] ? lockdep_hardirqs_on+0x9c/0x150 [ 1136.049721][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.049730][T10190] ? clear_bhb_loop+0x60/0xb0 [ 1136.049741][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.049751][T10190] RIP: 0033:0x7f24c498e929 [ 1136.049761][T10190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.049769][T10190] RSP: 002b:00007f24c57c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1136.049780][T10190] RAX: ffffffffffffffda RBX: 00007f24c4bb5fa0 RCX: 00007f24c498e929 [ 1136.049787][T10190] RDX: 0000000000000001 RSI: 0000200000001380 RDI: 0000000000000004 [ 1136.049793][T10190] RBP: 00007f24c57c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.049799][T10190] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 1136.049805][T10190] R13: 0000000000000000 R14: 00007f24c4bb5fa0 R15: 00007f24c4cdfa28 [ 1136.049819][T10190] [ 1136.327417][T27721] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1136.351343][T10139] gretap0: left promiscuous mode [ 1136.368558][T10139] batadv_slave_1: left promiscuous mode [ 1136.487409][T27721] usb 4-1: Using ep0 maxpacket: 8 [ 1136.531032][T27721] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1136.634977][T27721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.647371][T27721] usb 4-1: Product: syz [ 1136.651649][T27721] usb 4-1: Manufacturer: syz [ 1136.656406][T27721] usb 4-1: SerialNumber: syz [ 1136.671774][T27721] usb 4-1: config 0 descriptor?? [ 1136.682586][T27721] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1136.691372][T27721] usb 4-1: setting power ON [ 1136.696723][T27721] dvb-usb: bulk message failed: -22 (2/0) [ 1136.726415][T27721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1136.798830][T27721] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1136.808950][T27721] usb 4-1: media controller created [ 1136.916919][T27721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.988169][T27721] usb 4-1: selecting invalid altsetting 6 [ 1136.995248][T27721] usb 4-1: digital interface selection failed (-22) [ 1137.001964][T27721] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1137.011777][T27721] usb 4-1: setting power OFF [ 1137.019221][T27721] dvb-usb: bulk message failed: -22 (2/0) [ 1137.028762][T27721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1137.039618][T27721] (NULL device *): no alternate interface [ 1137.102814][T27721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1137.229572][T27721] usb 4-1: USB disconnect, device number 59 [ 1137.271374][T10232] xt_l2tp: wrong L2TP version: 0 [ 1137.363339][T10244] netlink: 'syz.1.4764': attribute type 27 has an invalid length. [ 1137.551036][ T5896] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 1137.599898][T10252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.735611][T10244] wg1: left promiscuous mode [ 1137.758899][T10244] wg1: left allmulticast mode [ 1137.827421][ T5896] usb 1-1: device descriptor read/64, error -71 [ 1137.970225][T10272] vlan2: entered promiscuous mode [ 1138.077914][ T5896] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1138.257917][ T977] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1138.267733][ T5896] usb 1-1: device descriptor read/64, error -71 [ 1138.450698][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1138.489556][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.489886][ T5896] usb usb1-port1: attempt power cycle [ 1138.520923][ T977] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1138.536984][ T977] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1138.553939][ T977] usb 5-1: Manufacturer: syz [ 1138.569536][ T977] usb 5-1: config 0 descriptor?? [ 1139.010417][ T977] cougar 0003:060B:700A.0033: unknown main item tag 0x0 [ 1139.017464][ T5896] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 1139.041890][ T5896] usb 1-1: device descriptor read/8, error -71 [ 1139.094976][ T977] cougar 0003:060B:700A.0033: unknown main item tag 0x0 [ 1139.124767][ T977] cougar 0003:060B:700A.0033: unknown main item tag 0x0 [ 1139.158979][ T977] cougar 0003:060B:700A.0033: unknown main item tag 0x0 [ 1139.159262][T10304] binder: 10303:10304 ioctl c0306201 200000000140 returned -14 [ 1139.180171][ T977] cougar 0003:060B:700A.0033: unknown main item tag 0x0 [ 1139.221818][ T977] cougar 0003:060B:700A.0033: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1139.273819][ T977] usb 5-1: USB disconnect, device number 70 [ 1139.321065][ T5896] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1139.373477][ T5896] usb 1-1: device descriptor read/8, error -71 [ 1139.407991][T10322] fido_id[10322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1139.469258][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1139.488775][ T5896] usb usb1-port1: unable to enumerate USB device [ 1139.556654][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1139.630868][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1139.658805][ T24] usb 4-1: config 4 has an invalid interface number: 82 but max is 3 [ 1139.667127][ T24] usb 4-1: config 4 has an invalid interface number: 218 but max is 3 [ 1139.678621][ T24] usb 4-1: config 4 has an invalid interface number: 207 but max is 3 [ 1139.687129][ T24] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1139.701713][ T24] usb 4-1: config 4 has an invalid descriptor of length 165, skipping remainder of the config [ 1139.809274][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1139.823787][ T24] usb 4-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 1139.862843][ T24] usb 4-1: config 4 has no interface number 0 [ 1139.879326][ T24] usb 4-1: config 4 has no interface number 1 [ 1139.928384][ T24] usb 4-1: config 4 has no interface number 2 [ 1139.953291][ T24] usb 4-1: config 4 interface 82 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1139.986173][ T24] usb 4-1: config 4 interface 82 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1140.127872][ T24] usb 4-1: too many endpoints for config 4 interface 218 altsetting 90: 218, using maximum allowed: 30 [ 1140.139559][ T24] usb 4-1: config 4 interface 218 altsetting 90 has an invalid descriptor for endpoint zero, skipping [ 1140.144395][T10348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1140.152415][ T24] usb 4-1: config 4 interface 218 altsetting 90 endpoint 0x8 has invalid maxpacket 2031, setting to 64 [ 1140.182034][T10348] netlink: 'syz.0.4784': attribute type 7 has an invalid length. [ 1140.235094][ T977] usb 3-1: config 0 has no interfaces? [ 1140.276511][ T24] usb 4-1: config 4 interface 218 altsetting 90 endpoint 0x7 has invalid maxpacket 1080, setting to 64 [ 1140.297645][T10348] netlink: 'syz.0.4784': attribute type 8 has an invalid length. [ 1140.322056][ T977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1140.331311][ T24] usb 4-1: config 4 interface 218 altsetting 90 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1140.343158][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.343185][ T977] usb 3-1: Product: syz [ 1140.343199][ T977] usb 3-1: Manufacturer: syz [ 1140.343214][ T977] usb 3-1: SerialNumber: syz [ 1140.352631][ T977] usb 3-1: config 0 descriptor?? [ 1140.357892][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1140.441470][T10348] gretap0: entered promiscuous mode [ 1140.463091][T10348] batadv_slave_1: entered promiscuous mode [ 1140.519622][ T24] usb 4-1: config 4 interface 218 altsetting 90 has a duplicate endpoint with address 0x8A, skipping [ 1140.531752][T10348] gretap0: left promiscuous mode [ 1140.562256][ T24] usb 4-1: config 4 interface 218 altsetting 90 has a duplicate endpoint with address 0x7, skipping [ 1140.592423][ T24] usb 4-1: config 4 interface 218 altsetting 90 has 5 endpoint descriptors, different from the interface descriptor's value: 218 [ 1140.593520][T10348] batadv_slave_1: left promiscuous mode [ 1140.626546][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1140.653370][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1140.657886][ T24] usb 4-1: config 4 interface 207 altsetting 252 has an invalid endpoint descriptor of length 3, skipping [ 1140.711935][ T24] usb 4-1: config 4 interface 207 altsetting 252 has an invalid endpoint descriptor of length 3, skipping [ 1140.733901][ T24] usb 4-1: config 4 interface 207 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1140.789720][ T24] usb 4-1: config 4 interface 82 has no altsetting 0 [ 1140.807191][ T24] usb 4-1: config 4 interface 218 has no altsetting 0 [ 1140.826476][ T24] usb 4-1: config 4 interface 207 has no altsetting 0 [ 1140.851128][ T24] usb 4-1: New USB device found, idVendor=1286, idProduct=2044, bcdDevice= b.ab [ 1140.860404][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.869824][ T24] usb 4-1: Product: Ы [ 1140.876348][ T24] usb 4-1: Manufacturer: 倓迬캰䬻ǂ [ 1140.884878][ T24] usb 4-1: SerialNumber: syz [ 1140.997581][ T977] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1141.140362][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.149484][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.158684][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.270925][ T977] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 1141.284286][ T977] usb 5-1: config 0 has no interface number 0 [ 1141.295257][ T977] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 1141.323253][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.332535][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.342395][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1141.355706][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.363958][ T977] usb 5-1: Product: syz [ 1141.412847][ T977] usb 5-1: Manufacturer: syz [ 1141.450638][ T977] usb 5-1: SerialNumber: syz [ 1141.526701][ T24] usb 4-1: USB disconnect, device number 60 [ 1141.615533][ T977] usb 5-1: config 0 descriptor?? [ 1141.641199][ T977] kl5kusb105 5-1:0.181: KL5KUSB105D / PalmConnect converter detected [ 1141.659897][T10396] loop6: detected capacity change from 0 to 1 [ 1141.684854][ T977] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1141.696301][T10396] Dev loop6: unable to read RDB block 1 [ 1141.706862][T10396] loop6: unable to read partition table [ 1141.760648][T10396] loop6: partition table beyond EOD, truncated [ 1141.821069][T10396] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1141.834713][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.857643][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.971956][T10380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1142.071411][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.098024][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.465194][ T5936] usb 5-1: USB disconnect, device number 71 [ 1142.478340][ T5936] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1142.544161][ T5936] kl5kusb105 5-1:0.181: device disconnected [ 1142.692728][T10435] pim6reg: entered allmulticast mode [ 1142.708717][T10435] pim6reg: left allmulticast mode [ 1142.771700][ T5918] usb 3-1: USB disconnect, device number 9 [ 1143.180577][T10436] ip6gre2: entered promiscuous mode [ 1143.187609][T10436] ip6gre2: entered allmulticast mode [ 1144.579102][ T5918] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1144.677564][ T5904] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1144.789378][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.799425][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1144.812650][ T5918] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1144.821959][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.833702][ T5918] usb 4-1: config 0 descriptor?? [ 1144.902906][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.951104][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.018118][ T5904] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1145.051231][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.121869][ T5904] usb 1-1: config 0 descriptor?? [ 1145.267191][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.330909][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.341953][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1145.354112][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1145.363557][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1145.372124][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1145.380298][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1145.620041][ T5904] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 1145.630924][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 1145.644557][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1145.652521][ T5904] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1145.707511][ T5918] usb 4-1: USB disconnect, device number 61 [ 1145.803346][ T5904] cp2112 0003:10C4:EA90.0034: error requesting version [ 1145.821882][ T5904] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -71 [ 1145.840388][ T5904] usb 1-1: USB disconnect, device number 87 [ 1146.072113][T10504] chnl_net:caif_netlink_parms(): no params data found [ 1146.226838][T10674] __nla_validate_parse: 2 callbacks suppressed [ 1146.226856][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1146.331520][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.350894][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.359655][T10504] bridge_slave_0: entered allmulticast mode [ 1146.366679][T10504] bridge_slave_0: entered promiscuous mode [ 1146.408597][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.415823][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.431199][T10504] bridge_slave_1: entered allmulticast mode [ 1146.444052][T10504] bridge_slave_1: entered promiscuous mode [ 1146.819535][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.940950][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.008962][ T5904] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1147.264850][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1147.281912][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 1147.308878][ T5904] usb 4-1: config 203 has too many interfaces: 58, using maximum allowed: 32 [ 1147.321661][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1147.331086][ T5904] usb 4-1: config 203 has 1 interface, different from the descriptor's value: 58 [ 1147.331143][ T5904] usb 4-1: config 203 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.331168][ T5904] usb 4-1: config 203 interface 0 has no altsetting 0 [ 1147.389178][T10759] ip6gre2: entered promiscuous mode [ 1147.417589][ T5936] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1147.450076][T10759] ip6gre2: entered allmulticast mode [ 1147.468436][ T1220] Bluetooth: hci5: command tx timeout [ 1147.548676][ T5904] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.40 [ 1147.557880][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.568296][ T5904] usb 4-1: Product: syz [ 1147.572618][ T5904] usb 4-1: Manufacturer: syz [ 1147.577677][ T5904] usb 4-1: SerialNumber: syz [ 1147.597627][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 1147.614829][ T5936] usb 1-1: config index 0 descriptor too short (expected 8253, got 61) [ 1147.625732][ T5936] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 1147.715291][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.762365][ T5936] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1147.786465][ T5936] usb 1-1: config 0 has no interface number 0 [ 1147.808630][ T5936] usb 1-1: too many endpoints for config 0 interface 145 altsetting 210: 245, using maximum allowed: 30 [ 1147.857909][ T5936] usb 1-1: config 0 interface 145 altsetting 210 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 1147.905546][ T5936] usb 1-1: config 0 interface 145 has no altsetting 0 [ 1147.922480][ T5936] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 1147.955636][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.017160][ T5936] usb 1-1: Product: syz [ 1148.046421][ T5936] usb 1-1: Manufacturer: syz [ 1148.106916][ T5936] usb 1-1: SerialNumber: syz [ 1148.141095][ T5936] usb 1-1: config 0 descriptor?? [ 1148.504341][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.593756][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.566436][ T1220] Bluetooth: hci5: command tx timeout [ 1150.148750][ T5904] usb 4-1: USB disconnect, device number 62 [ 1150.410164][T24774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.483632][T24774] bond_slave_0: left promiscuous mode [ 1150.528462][T24774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.568174][T24774] bond_slave_1: left promiscuous mode [ 1150.581168][T24774] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1150.620580][T24774] bond1 (unregistering): left promiscuous mode [ 1150.643774][T24774] bond0 (unregistering): Released all slaves [ 1150.823623][ T977] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1150.892258][T24774] bond1 (unregistering): Released all slaves [ 1150.967150][T10777] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1150.999820][ T977] usb 4-1: config 0 has no interfaces? [ 1151.020366][ T977] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1151.030173][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.045933][ T977] usb 4-1: Product: syz [ 1151.065340][ T977] usb 4-1: Manufacturer: syz [ 1151.075815][ T977] usb 4-1: SerialNumber: syz [ 1151.125537][T10504] team0: Port device team_slave_0 added [ 1151.126812][ T977] usb 4-1: config 0 descriptor?? [ 1151.181330][ T5936] keyspan_pda 1-1:0.145: required endpoints missing [ 1151.205350][ T5936] usb 1-1: USB disconnect, device number 88 [ 1151.281799][T10504] team0: Port device team_slave_1 added [ 1151.297555][T24774] tipc: Disabling bearer [ 1151.303072][T24774] tipc: Left network mode [ 1151.634418][ T1220] Bluetooth: hci5: command tx timeout [ 1151.691352][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.733867][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.774170][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.802894][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.814190][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.841363][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.274311][T10504] hsr_slave_0: entered promiscuous mode [ 1152.288263][T10504] hsr_slave_1: entered promiscuous mode [ 1152.309083][T10504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1152.474021][T10504] Cannot create hsr debugfs directory [ 1152.571102][T24774] hsr_slave_0: left promiscuous mode [ 1152.586908][T24774] hsr_slave_1: left promiscuous mode [ 1152.595684][T24774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.609483][T24774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.653791][ T5904] usb 4-1: USB disconnect, device number 63 [ 1153.700616][ T1220] Bluetooth: hci5: command tx timeout [ 1153.787278][ T1220] Bluetooth: hci1: command 0x0405 tx timeout [ 1153.997399][ T977] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1154.171841][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.207388][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.217212][ T977] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1154.297430][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.334647][ T977] usb 1-1: config 0 descriptor?? [ 1154.780642][ T977] steelseries 0003:1038:12B6.0035: unknown main item tag 0x2 [ 1154.808913][ T977] steelseries 0003:1038:12B6.0035: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 1155.533794][ T5904] usb 1-1: USB disconnect, device number 89 [ 1156.001181][T24774] IPVS: stop unused estimator thread 0... [ 1156.259568][ T5904] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1156.447482][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 1156.480735][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.516436][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.538639][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1156.549545][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1156.560155][ T5904] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1156.577105][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.606842][ T5904] usb 5-1: config 0 descriptor?? [ 1157.138902][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: unknown main item tag 0x0 [ 1157.150571][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: unknown main item tag 0x0 [ 1157.164404][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: unknown main item tag 0x0 [ 1157.178140][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: unknown main item tag 0x0 [ 1157.186179][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: unknown main item tag 0x0 [ 1157.222757][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 1157.345085][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: U2F Zero LED initialised [ 1157.398439][ T5904] hid-u2fzero 0003:10C4:8ACF.0036: U2F Zero RNG initialised [ 1157.458337][ T5904] usb 5-1: USB disconnect, device number 72 [ 1157.887614][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1157.897452][ T5918] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1158.016047][T10504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1158.083652][T10504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1158.097886][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1158.114600][ T5918] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1158.135935][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.137498][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.161085][ T5918] usb 1-1: config 0 descriptor?? [ 1158.176340][ T5918] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1158.182912][T10504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1158.197175][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.327006][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1158.389821][T10504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1158.479813][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.839437][ T24] usb 2-1: config 0 descriptor?? [ 1159.045657][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.117974][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.207796][ T5896] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1159.288512][ T5936] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1159.326231][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.378808][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1159.400318][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.408440][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.432934][ T2093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.440196][ T2093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.453281][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.457380][ T5918] gspca_cpia1: usb_control_msg 02, error -32 [ 1159.469480][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 1159.478901][ T5936] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1159.486239][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1159.489309][ T5936] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.517747][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.539095][ T2093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.546341][ T2093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.563154][ T5896] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1159.563169][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.574276][ T5936] usb 4-1: config 6 has no interface number 0 [ 1159.595904][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1159.613828][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1159.625376][ T5936] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1159.662456][ T5918] gspca_cpia1: usb_control_msg 02, error -71 [ 1159.664344][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.682501][ T24] usb 2-1: USB disconnect, device number 116 [ 1159.705098][ T5936] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.724109][ T5896] usb 5-1: config 0 descriptor?? [ 1159.724404][ T5918] gspca_cpia1: usb_control_msg 05, error -71 [ 1159.757376][ T5918] gspca_cpia1: usb_control_msg 04, error -71 [ 1159.781024][ T5918] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 1159.791377][ T5936] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1159.806028][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.833843][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.841474][ T5918] usb 1-1: USB disconnect, device number 90 [ 1159.847590][ T5936] usb 4-1: Product: syz [ 1159.858819][ T5936] usb 4-1: Manufacturer: syz [ 1159.879039][ T5936] usb 4-1: SerialNumber: syz [ 1159.906613][ T5936] hso 4-1:6.2: Failed to find INT IN ep [ 1160.015937][T10504] veth0_vlan: entered promiscuous mode [ 1160.064731][T10504] veth1_vlan: entered promiscuous mode [ 1160.109276][ T5918] usb 4-1: USB disconnect, device number 64 [ 1160.206566][T10504] veth0_macvtap: entered promiscuous mode [ 1160.242743][T10504] veth1_macvtap: entered promiscuous mode [ 1160.285305][T11304] dvmrp0: entered allmulticast mode [ 1160.331242][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.390685][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.425728][T10504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.465041][T10504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.487444][T10504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.487483][T27720] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1160.506733][T10504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.688378][T27720] usb 1-1: Using ep0 maxpacket: 8 [ 1160.730729][T27720] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 1160.758707][T27720] usb 1-1: config 11 has no interface number 0 [ 1160.765008][T27720] usb 1-1: config 11 interface 95 has no altsetting 0 [ 1160.813770][T27720] usb 1-1: language id specifier not provided by device, defaulting to English [ 1160.836180][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.875555][T27720] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1160.895063][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.908835][T27720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.920946][T27720] usb 1-1: Product: syz [ 1160.925304][T27720] usb 1-1: SerialNumber: syz [ 1161.006119][ T2092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.026050][ T2092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.106576][T27721] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1161.319003][T27721] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1161.327495][T27721] usb 2-1: config 8 has no interface number 0 [ 1161.338329][T27721] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1161.387055][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 1161.409430][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1161.422245][T27721] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 1161.507074][ T5896] usb 5-1: USB disconnect, device number 73 [ 1161.513722][T27721] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1161.555270][T27721] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1161.586662][T27721] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1161.654970][T27720] usb 1-1: USB disconnect, device number 91 [ 1161.687774][T27721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.816431][T11330] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1162.034774][T27721] usb 2-1: string descriptor 0 read error: -71 [ 1162.060859][T27721] ir_toy 2-1:8.177: required endpoints not found [ 1162.092443][T27721] usb 2-1: USB disconnect, device number 117 [ 1162.485520][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.506060][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.717504][ T5919] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1163.197406][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 1163.205887][ T5919] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1163.226319][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1163.251050][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.277426][ T5919] usb 1-1: Product: syz [ 1163.285097][ T5919] usb 1-1: Manufacturer: syz [ 1163.304384][ T5919] usb 1-1: SerialNumber: syz [ 1163.333366][ T5919] usb 1-1: config 0 descriptor?? [ 1163.360276][ T5919] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1163.565373][ T5919] gspca_zc3xx: reg_w_i err -71 [ 1163.638560][T11447] ip6gre1: entered promiscuous mode [ 1163.643897][T11447] ip6gre1: entered allmulticast mode [ 1163.918884][T27721] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1163.923451][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069882400: rx timeout, send abort [ 1164.100647][T27721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1164.122794][T27721] usb 5-1: not running at top speed; connect to a high speed hub [ 1164.134104][T27721] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1164.142469][T27721] usb 5-1: config 0 has no interface number 0 [ 1164.148813][T27721] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1164.181728][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1164.189769][T27721] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1164.190925][ T5919] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1164.212714][T27721] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1164.214286][ T5919] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1164.378709][T27721] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1164.389916][T27721] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1164.398717][T27721] usb 5-1: Product: syz [ 1164.408889][T27721] usb 5-1: Manufacturer: syz [ 1164.423617][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069881c00: rx timeout, send abort [ 1164.434978][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069882400: abort rx timeout. Force session deactivation [ 1164.437379][T27721] usb 5-1: SerialNumber: syz [ 1164.494348][ T5919] usb 1-1: USB disconnect, device number 92 [ 1164.536636][T27721] usb 5-1: config 0 descriptor?? [ 1164.931969][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069881c00: abort rx timeout. Force session deactivation [ 1164.979160][T27721] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input101 [ 1165.019323][T11487] sctp: [Deprecated]: syz.3.4867 (pid 11487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1165.019323][T11487] Use struct sctp_sack_info instead [ 1165.042689][T27721] usb 5-1: USB disconnect, device number 74 [ 1165.229031][T11467] team0 (unregistering): Port device team_slave_0 removed [ 1165.275288][T11467] team0 (unregistering): Port device team_slave_1 removed [ 1165.582474][T11545] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1165.589106][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1165.621905][T11545] vhci_hcd vhci_hcd.0: Device attached [ 1165.718310][T11551] create_pit_timer: 52 callbacks suppressed [ 1165.718327][T11551] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1165.776666][T11558] binder: 11556:11558 ioctl c0306201 2000000003c0 returned -14 [ 1165.797531][T27721] vhci_hcd: vhci_device speed not set [ 1165.805894][T11558] binder: 11556:11558 ioctl 80104592 200000000040 returned -22 [ 1165.822592][T11558] C: renamed from team_slave_0 (while UP) [ 1165.835684][T11558] netlink: 'syz.3.4870': attribute type 4 has an invalid length. [ 1165.846834][T11558] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1165.871821][T11558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1165.889959][T27721] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 1166.816852][T11547] vhci_hcd: connection reset by peer [ 1166.864327][ T2095] vhci_hcd: stop threads [ 1166.906119][ T2095] vhci_hcd: release socket [ 1166.919973][ T2095] vhci_hcd: disconnect device [ 1167.226273][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4878'. [ 1167.280407][ T5919] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1167.476346][ T5919] usb 1-1: config 0 has no interfaces? [ 1167.488782][ T5919] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1167.510220][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.626401][ T5919] usb 1-1: Product: syz [ 1167.652221][ T5919] usb 1-1: Manufacturer: syz [ 1167.663490][ T5919] usb 1-1: SerialNumber: syz [ 1167.689396][ T5919] usb 1-1: config 0 descriptor?? [ 1167.758045][ T5936] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1167.919066][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.933044][ T5936] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1167.954964][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.185371][ T5936] usb 2-1: config 0 descriptor?? [ 1168.417672][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1168.429180][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1168.627387][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1168.658470][ T5904] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1168.672244][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.712193][ T5904] usb 3-1: config 0 descriptor?? [ 1168.736722][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1168.852928][ T5936] usb 2-1: USB disconnect, device number 118 [ 1169.083219][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1169.093585][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1169.439380][ T5919] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1169.504365][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1169.597691][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 1169.610648][ T5919] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1169.621706][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1169.647410][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.653888][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4887'. [ 1169.655482][ T5919] usb 5-1: Product: syz [ 1169.700062][ T5919] usb 5-1: Manufacturer: syz [ 1169.704719][ T5919] usb 5-1: SerialNumber: syz [ 1169.726275][ T5919] usb 5-1: config 0 descriptor?? [ 1169.756014][ T5919] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1169.849094][T11685] loop6: detected capacity change from 0 to 1 [ 1169.856354][T11685] Dev loop6: unable to read RDB block 1 [ 1169.862931][T11685] loop6: unable to read partition table [ 1169.869236][T11685] loop6: partition table beyond EOD, truncated [ 1169.875654][T11685] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1169.972747][ T5904] usb 1-1: USB disconnect, device number 93 [ 1170.497717][ T5936] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1170.647395][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 1170.654140][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.665620][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1170.676710][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1170.686538][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1170.696481][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.711930][ T5936] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1170.721148][ T5936] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1170.729310][ T5936] usb 1-1: Manufacturer: syz [ 1170.736263][ T5936] usb 1-1: config 0 descriptor?? [ 1170.772726][ T5919] gspca_sq905: bulk read fail (-22) len 0/4 [ 1170.781957][ T5919] sq905 5-1:0.0: probe with driver sq905 failed with error -5 [ 1170.986051][ T5896] usb 5-1: USB disconnect, device number 75 [ 1171.000510][ T5936] rc_core: IR keymap rc-hauppauge not found [ 1171.009539][ T5936] Registered IR keymap rc-empty [ 1171.015256][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.037781][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.047611][T27721] vhci_hcd: vhci_device speed not set [ 1171.058840][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1171.075618][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input103 [ 1171.091806][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.117796][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.137502][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.157917][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.177534][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.197475][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.220905][ T5917] usb 3-1: USB disconnect, device number 10 [ 1171.227850][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.271893][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.329691][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.350652][ T5936] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1171.389879][ T5936] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1171.443133][ T5936] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1171.494627][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1171.586318][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.618994][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.618164][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4898'. [ 1172.877418][ T5917] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1173.046046][ T5917] usb 5-1: config 0 has no interfaces? [ 1173.058407][ T5917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1173.067891][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.075972][ T5917] usb 5-1: Product: syz [ 1173.081333][ T5917] usb 5-1: Manufacturer: syz [ 1173.086178][ T5917] usb 5-1: SerialNumber: syz [ 1173.095906][ T5917] usb 5-1: config 0 descriptor?? [ 1173.264239][ T5917] usb 1-1: USB disconnect, device number 94 [ 1173.373896][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1174.053214][T27721] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1174.096724][T11824] loop4: detected capacity change from 0 to 7 [ 1174.136249][T11824] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1174.147195][T11824] loop4: p1 start 16843009 is beyond EOD, truncated [ 1174.154982][T11824] loop4: p2 start 16843009 is beyond EOD, truncated [ 1174.200410][T11824] loop4: p3 start 16843009 is beyond EOD, truncated [ 1174.220192][T11824] loop4: p4 start 16843009 is beyond EOD, truncated [ 1174.247260][T11824] loop4: p5 start 16843009 is beyond EOD, truncated [ 1174.256108][T27721] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1174.269271][T27721] usb 3-1: config 0 has no interface number 0 [ 1174.307627][T27721] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1174.324709][T11824] loop4: p6 start 16843009 is beyond EOD, truncated [ 1174.342982][T27721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.399112][T11824] loop4: p7 start 16843009 is beyond EOD, truncated [ 1174.411217][T11824] loop4: p8 start 16843009 is beyond EOD, truncated [ 1174.421629][T11824] loop4: p9 start 16843009 is beyond EOD, truncated [ 1174.451899][T27721] usb 3-1: config 0 descriptor?? [ 1174.459581][T27721] usb 3-1: selecting invalid altsetting 1 [ 1174.468490][T27721] dvb_ttusb_budget: ttusb_init_controller: error [ 1174.480637][T27721] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1174.496191][T11824] loop4: p10 start 16843009 is beyond EOD, truncated [ 1174.516296][T11824] loop4: p11 start 16843009 is beyond EOD, truncated [ 1174.566588][T11824] loop4: p12 start 16843009 is beyond EOD, truncated [ 1174.891892][T27721] DVB: Unable to find symbol cx22700_attach() [ 1175.066438][T27721] DVB: Unable to find symbol tda10046_attach() [ 1175.086496][T27721] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1175.119925][T27721] usb 3-1: USB disconnect, device number 11 [ 1175.148219][ T5917] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1175.339887][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.351321][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.860338][ T5917] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1175.991400][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.039479][ T5917] usb 1-1: config 0 descriptor?? [ 1176.250935][T27721] usb 5-1: USB disconnect, device number 76 [ 1176.355094][T11951] loop6: detected capacity change from 0 to 1 [ 1176.367445][T11951] Dev loop6: unable to read RDB block 1 [ 1176.373078][T11951] loop6: unable to read partition table [ 1176.383282][T11951] loop6: partition table beyond EOD, truncated [ 1176.387573][ T5919] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1176.393189][T11951] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1176.420384][ T5936] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1176.468106][ T5917] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 1176.490003][ T5917] cp2112 0003:10C4:EA90.0038: item fetching failed at offset 4/7 [ 1176.491777][T11959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4917'. [ 1176.503780][ T5917] cp2112 0003:10C4:EA90.0038: parse failed [ 1176.524313][ T5917] cp2112 0003:10C4:EA90.0038: probe with driver cp2112 failed with error -22 [ 1176.549049][ T5919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1176.567431][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1176.580792][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1176.591763][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1176.602605][ T5919] usb 2-1: Product: syz [ 1176.612283][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1176.621208][ T5919] usb 2-1: Manufacturer: syz [ 1176.633718][ T5936] usb 3-1: config 106 has an invalid interface number: 33 but max is 0 [ 1176.646552][ T5936] usb 3-1: config 106 has no interface number 0 [ 1176.655169][ T5919] usb 2-1: SerialNumber: syz [ 1176.665757][ T5936] usb 3-1: config 106 interface 33 has no altsetting 0 [ 1176.678665][ T5919] usb 2-1: config 0 descriptor?? [ 1176.692419][ T5936] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 1176.704901][ T5919] usb 2-1: selecting invalid altsetting 0 [ 1176.712377][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.733928][ T5936] usb 3-1: Product: syz [ 1176.753952][ T5936] usb 3-1: Manufacturer: syz [ 1176.764998][ T5936] usb 3-1: SerialNumber: syz [ 1176.820020][T11965] loop4: detected capacity change from 0 to 7 [ 1176.835416][T13576] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1176.844269][T13576] loop4: p1 start 16843009 is beyond EOD, truncated [ 1176.854062][T13576] loop4: p2 start 16843009 is beyond EOD, truncated [ 1176.861336][T13576] loop4: p3 start 16843009 is beyond EOD, truncated [ 1176.872010][T13576] loop4: p4 start 16843009 is beyond EOD, truncated [ 1176.880673][T13576] loop4: p5 start 16843009 is beyond EOD, truncated [ 1176.901479][T13576] loop4: p6 start 16843009 is beyond EOD, truncated [ 1176.919389][T13576] loop4: p7 start 16843009 is beyond EOD, truncated [ 1176.942542][T13576] loop4: p8 start 16843009 is beyond EOD, truncated [ 1176.952167][T13576] loop4: p9 start 16843009 is beyond EOD, truncated [ 1176.952426][T27721] usb 2-1: USB disconnect, device number 119 [ 1176.973471][T13576] loop4: p10 start 16843009 is beyond EOD, truncated [ 1176.985663][T13576] loop4: p11 start 16843009 is beyond EOD, truncated [ 1176.992969][T13576] loop4: p12 start 16843009 is beyond EOD, truncated [ 1177.015292][T11965] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1177.026146][T11965] loop4: p1 start 16843009 is beyond EOD, truncated [ 1177.039196][T11965] loop4: p2 start 16843009 is beyond EOD, truncated [ 1177.046547][ T5936] ums-sddr55 3-1:106.33: USB Mass Storage device detected [ 1177.063663][T11965] loop4: p3 start 16843009 is beyond EOD, truncated [ 1177.075389][ T5936] ums-sddr55 3-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 1177.078828][T11965] loop4: p4 start 16843009 is beyond EOD, truncated [ 1177.105175][T11965] loop4: p5 start 16843009 is beyond EOD, truncated [ 1177.123238][T11965] loop4: p6 start 16843009 is beyond EOD, truncated [ 1177.133965][T11965] loop4: p7 start 16843009 is beyond EOD, truncated [ 1177.141055][T11965] loop4: p8 start 16843009 is beyond EOD, truncated [ 1177.149377][T11965] loop4: p9 start 16843009 is beyond EOD, truncated [ 1177.156123][T11965] loop4: p10 start 16843009 is beyond EOD, truncated [ 1177.165421][T11965] loop4: p11 start 16843009 is beyond EOD, truncated [ 1177.168862][ T5936] usb 3-1: USB disconnect, device number 12 [ 1177.173863][T11965] loop4: p12 start 16843009 is beyond EOD, truncated [ 1177.304955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.311515][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.382272][T12016] kvm: user requested TSC rate below hardware speed [ 1178.518562][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1178.519349][T27721] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1178.581831][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1178.694612][T27721] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1178.728386][T27721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.776165][T27721] usb 2-1: config 0 descriptor?? [ 1178.980799][T12134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1179.007387][ T5896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1179.037466][T27721] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1179.067557][T27721] [drm:udl_init] *ERROR* Selecting channel failed [ 1179.117519][T27721] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1179.124270][T27721] [drm] Initialized udl on minor 2 [ 1179.144357][T27721] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.539086][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 1179.557841][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1179.566647][T27721] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1179.592554][ T5896] usb 3-1: config 5 has an invalid interface number: 215 but max is 0 [ 1179.602784][ T5896] usb 3-1: config 5 has no interface number 0 [ 1179.617033][T27720] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1179.625961][T27721] usb 2-1: USB disconnect, device number 120 [ 1179.637105][ T5896] usb 3-1: config 5 interface 215 has no altsetting 0 [ 1179.708202][T27720] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1179.730021][ T5896] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 1179.764996][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.777115][ T5896] usb 3-1: Product: syz [ 1179.898511][ T5896] usb 3-1: Manufacturer: syz [ 1179.903175][ T5896] usb 3-1: SerialNumber: syz [ 1179.938955][T12188] xt_l2tp: wrong L2TP version: 0 [ 1180.175192][T12196] ip6gre1: entered promiscuous mode [ 1180.188498][T12196] ip6gre1: entered allmulticast mode [ 1180.255382][ T5936] usb 1-1: USB disconnect, device number 95 [ 1180.288675][T27720] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1180.441755][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1180.504245][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1180.827397][T27720] usb 4-1: device descriptor read/64, error -71 [ 1180.987959][ T30] audit: type=1326 audit(1750814285.698:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.096764][T27720] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1181.208697][ T30] audit: type=1326 audit(1750814285.728:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.231542][ T30] audit: type=1326 audit(1750814285.728:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.254308][ T30] audit: type=1326 audit(1750814285.728:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.277033][ T30] audit: type=1326 audit(1750814285.728:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.299861][ T30] audit: type=1326 audit(1750814285.728:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.327531][T27720] usb 4-1: device descriptor read/64, error -71 [ 1181.386537][ T30] audit: type=1326 audit(1750814285.728:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.415098][ T30] audit: type=1326 audit(1750814285.728:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.448414][T27720] usb usb4-port1: attempt power cycle [ 1181.505884][ T30] audit: type=1326 audit(1750814285.728:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.749855][ T30] audit: type=1326 audit(1750814285.728:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.0.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1181.807481][T27720] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1181.830834][T27720] usb 4-1: device descriptor read/8, error -71 [ 1182.077607][T27720] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1182.089589][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1182.124056][T27720] usb 4-1: device descriptor read/8, error -71 [ 1182.244601][T27720] usb usb4-port1: unable to enumerate USB device [ 1182.740332][ T5896] cypress_m8 3-1:5.215: DeLorme Earthmate USB converter detected [ 1182.859992][ T5896] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1182.912780][ T5896] usb 3-1: USB disconnect, device number 13 [ 1182.939324][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1182.945174][ T5896] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1182.998216][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1183.036943][ T5896] cypress_m8 3-1:5.215: device disconnected [ 1183.368193][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1183.390864][ T5846] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1183.461899][T12311] binder: 12295:12311 ioctl 40046210 0 returned -14 [ 1183.562976][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.595342][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.606843][T12318] libceph: resolve '4' (ret=-3): failed [ 1183.667438][ T5936] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1183.695636][ T5896] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1183.746321][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.781472][ T5896] usb 3-1: config 0 descriptor?? [ 1183.837815][ T5936] usb 4-1: device descriptor read/64, error -71 [ 1184.128206][ T5936] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1184.241166][ T5896] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 1184.280879][ T5896] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1184.307607][ T5936] usb 4-1: device descriptor read/64, error -71 [ 1184.488578][T12347] ip6gre2: entered promiscuous mode [ 1184.494132][T12347] ip6gre2: entered allmulticast mode [ 1184.518588][ T5896] cp2112 0003:10C4:EA90.0039: Part Number: 0x82 Device Version: 0xFE [ 1184.519005][ T5936] usb usb4-port1: attempt power cycle [ 1184.847885][ T5919] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1184.957472][ T5936] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1184.979177][ T5936] usb 4-1: device descriptor read/8, error -71 [ 1184.998455][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1185.005399][ T5919] usb 5-1: config 0 has an invalid interface number: 101 but max is 1 [ 1185.018453][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.028934][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1185.037998][ T5919] usb 5-1: config 0 has no interface number 0 [ 1185.044377][ T5919] usb 5-1: config 0 interface 101 has no altsetting 0 [ 1185.051792][ T5919] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1185.061438][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.074811][ T5919] usb 5-1: config 0 descriptor?? [ 1185.082993][ T5919] hub 5-1:0.101: bad descriptor, ignoring hub [ 1185.124293][ T5919] hub 5-1:0.101: probe with driver hub failed with error -5 [ 1185.141059][T27721] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1185.217587][ T5936] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1185.274473][ T5936] usb 4-1: device descriptor read/8, error -71 [ 1185.328115][T27721] usb 1-1: Using ep0 maxpacket: 16 [ 1185.336917][T27721] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1185.372564][T27721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.381340][ T5896] usb 3-1: USB disconnect, device number 14 [ 1185.396756][T27721] usb 1-1: Product: syz [ 1185.397807][ T5919] usb 5-1: USB disconnect, device number 77 [ 1185.407349][T27721] usb 1-1: Manufacturer: syz [ 1185.407372][T27721] usb 1-1: SerialNumber: syz [ 1185.439112][ T5936] usb usb4-port1: unable to enumerate USB device [ 1185.454841][T27721] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1185.472182][T27721] r8152-cfgselector 1-1: config 0 descriptor?? [ 1185.767590][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1185.918853][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1185.927576][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1185.936167][ T24] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 1185.947425][ T24] usb 2-1: config 1 has no interface number 0 [ 1185.953919][ T24] usb 2-1: config 1 interface 160 has no altsetting 0 [ 1185.968731][ T24] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 1186.029622][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.097850][ T24] usb 2-1: Product: syz [ 1186.106281][ T24] usb 2-1: Manufacturer: syz [ 1186.266140][ T24] usb 2-1: SerialNumber: syz [ 1186.407207][T12436] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1186.600943][ T24] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 1186.609208][ T24] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 1186.620673][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1186.642769][ T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1186.659052][ T24] usb 2-1: USB disconnect, device number 121 [ 1186.661732][T12460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1186.670762][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1186.687422][T12460] netlink: 'syz.4.4973': attribute type 7 has an invalid length. [ 1186.701519][T12460] netlink: 'syz.4.4973': attribute type 8 has an invalid length. [ 1186.712304][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1186.726251][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1186.897116][ T24] visor 2-1:1.160: device disconnected [ 1186.897161][T12460] gretap0: entered promiscuous mode [ 1186.910645][T12460] batadv_slave_1: entered promiscuous mode [ 1186.927469][ T5919] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1186.936509][T12460] gretap0: left promiscuous mode [ 1186.952952][T12460] batadv_slave_1: left promiscuous mode [ 1187.057432][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1187.297457][ T5919] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1187.439322][ T5919] usb 4-1: device descriptor read/64, error -71 [ 1187.477687][ T5917] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1187.547545][ T5936] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1187.555499][ T5919] usb usb4-port1: attempt power cycle [ 1187.581345][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1187.660670][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 1187.676676][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1187.689070][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1187.700994][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1187.711392][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1187.730678][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1187.745349][ T5936] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 1187.756157][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 1187.769292][ T5917] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1187.779151][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.791616][ T5936] usb 5-1: config 0 has no interface number 0 [ 1187.797883][ T5936] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1187.809073][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.817252][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1187.826499][ T5917] usb 2-1: Product: syz [ 1187.830916][ T5936] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1187.842188][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.850366][ T5917] usb 2-1: Manufacturer: syz [ 1187.855259][ T5917] usb 2-1: SerialNumber: syz [ 1187.862768][ T5936] usb 5-1: config 0 interface 230 has no altsetting 0 [ 1187.875150][ T5918] usb 3-1: config 0 descriptor?? [ 1187.884213][ T5917] usb 2-1: config 0 descriptor?? [ 1187.894475][ T5936] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1187.904364][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.912865][ T5936] usb 5-1: Product: syz [ 1187.917441][ T5936] usb 5-1: Manufacturer: syz [ 1187.923054][ T5936] usb 5-1: SerialNumber: syz [ 1187.927852][ T5919] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1187.955557][T27720] r8152-cfgselector 1-1: USB disconnect, device number 96 [ 1187.968182][ T5919] usb 4-1: device descriptor read/8, error -71 [ 1187.983513][ T5936] usb 5-1: config 0 descriptor?? [ 1187.992999][T12488] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1188.009283][T12488] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1188.022344][ T5936] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 1188.037830][ T5936] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1188.136611][ T5918] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.003A/input/input105 [ 1188.217467][ T5919] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1188.240136][ T5919] usb 4-1: device descriptor read/8, error -71 [ 1188.259258][ T5918] appleir 0003:05AC:8241.003A: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1188.320379][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1188.344166][ T5917] input input104: Device does not respond to id packet M [ 1188.355058][ T5919] usb usb4-port1: unable to enumerate USB device [ 1188.364425][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1188.380327][ T5917] input input104: Device does not respond to id packet P [ 1188.391312][ T24] usb 3-1: USB disconnect, device number 15 [ 1188.394979][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1188.405663][ T5917] input input104: Device does not respond to id packet B [ 1188.458878][T27720] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1188.617006][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1188.629985][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1188.639210][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1188.647948][T27720] usb 1-1: Using ep0 maxpacket: 32 [ 1188.653094][ T5917] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1188.788715][ T5917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input104 [ 1188.808761][ T5917] usb 2-1: USB disconnect, device number 122 [ 1188.816011][T27720] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1188.825718][T27720] usb 1-1: config 0 has no interface number 0 [ 1188.842194][T27720] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1188.854637][T27720] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1188.867567][T27720] usb 1-1: Product: syz [ 1188.871784][T27720] usb 1-1: Manufacturer: syz [ 1188.882654][T27720] usb 1-1: config 0 descriptor?? [ 1189.107793][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1189.107810][ T30] audit: type=1326 audit(1750814293.818:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1189.140353][ T30] audit: type=1326 audit(1750814293.818:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03a18e929 code=0x7ffc0000 [ 1189.163551][ T30] audit: type=1326 audit(1750814293.848:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.237670][ T30] audit: type=1326 audit(1750814293.848:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.264649][ T30] audit: type=1326 audit(1750814293.848:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.287815][ T30] audit: type=1326 audit(1750814293.848:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.586361][ T30] audit: type=1326 audit(1750814293.848:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.630851][ T1220] Bluetooth: hci3: command 0x0406 tx timeout [ 1189.684115][ T30] audit: type=1326 audit(1750814293.848:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.708790][ T30] audit: type=1326 audit(1750814293.848:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.732878][ T30] audit: type=1326 audit(1750814293.848:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.0.4980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03a18e52b code=0x7ffc0000 [ 1189.928962][T12599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1189.942376][T12599] netlink: 'syz.3.4984': attribute type 7 has an invalid length. [ 1189.951791][T12599] netlink: 'syz.3.4984': attribute type 8 has an invalid length. [ 1189.955887][T12587] loop4: detected capacity change from 0 to 7 [ 1189.963215][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1189.997158][T12599] gretap0: entered promiscuous mode [ 1190.004585][T12587] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1190.019398][T12587] loop4: p1 start 16843009 is beyond EOD, truncated [ 1190.027170][T12587] loop4: p2 start 16843009 is beyond EOD, truncated [ 1190.043067][T12599] batadv_slave_1: entered promiscuous mode [ 1190.044969][T12587] loop4: p3 start 16843009 is beyond EOD, truncated [ 1190.059899][T12587] loop4: p4 start 16843009 is beyond EOD, truncated [ 1190.066675][T12599] gretap0: left promiscuous mode [ 1190.066710][T12587] loop4: p5 start 16843009 is beyond EOD, truncated [ 1190.079743][T12587] loop4: p6 start 16843009 is beyond EOD, truncated [ 1190.086494][T12599] batadv_slave_1: left promiscuous mode [ 1190.086628][T12587] loop4: p7 start 16843009 is beyond EOD, truncated [ 1190.100288][T12587] loop4: p8 start 16843009 is beyond EOD, truncated [ 1190.107182][T12587] loop4: p9 start 16843009 is beyond EOD, truncated [ 1190.114054][T12587] loop4: p10 start 16843009 is beyond EOD, truncated [ 1190.122102][T12587] loop4: p11 start 16843009 is beyond EOD, truncated [ 1190.129362][T12587] loop4: p12 start 16843009 is beyond EOD, truncated [ 1190.316433][ T5918] usb 1-1: USB disconnect, device number 97 [ 1190.381750][ T5936] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 1190.707616][T27720] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1190.797415][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1190.847564][ T5896] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1190.856735][T27720] usb 2-1: device descriptor read/64, error -71 [ 1190.947407][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1190.961720][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1190.975062][ T24] usb 3-1: config 0 has no interface number 0 [ 1190.982180][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.000832][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1191.010331][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1191.021193][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.031700][ T5896] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1191.042754][ T24] usb 3-1: Product: syz [ 1191.047051][ T5896] usb 4-1: config 0 has no interface number 0 [ 1191.053531][ T24] usb 3-1: Manufacturer: syz [ 1191.058862][ T5896] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1191.065898][ T24] usb 3-1: SerialNumber: syz [ 1191.074662][ T5896] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1191.086019][ T24] usb 3-1: config 0 descriptor?? [ 1191.091094][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.099293][T27720] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1191.112359][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1191.122843][ T5896] usb 4-1: Product: syz [ 1191.127122][ T5896] usb 4-1: Manufacturer: syz [ 1191.132229][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 1191.145493][ T5896] usb 4-1: SerialNumber: syz [ 1191.158977][ T5896] usb 4-1: config 0 descriptor?? [ 1191.247443][T27720] usb 2-1: device descriptor read/64, error -71 [ 1191.380377][T27720] usb usb2-port1: attempt power cycle [ 1191.401001][ T5904] usb 5-1: USB disconnect, device number 78 [ 1191.577084][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1191.755700][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1191.765736][T27720] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1191.774982][T12683] netlink: 'syz.4.4998': attribute type 7 has an invalid length. [ 1191.783413][T12683] netlink: 'syz.4.4998': attribute type 8 has an invalid length. [ 1191.797855][T27720] usb 2-1: device descriptor read/8, error -71 [ 1191.804595][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1191.826049][T12683] gretap0: entered promiscuous mode [ 1191.838095][T12683] batadv_slave_1: entered promiscuous mode [ 1191.848666][T12683] gretap0: left promiscuous mode [ 1191.859679][T12683] batadv_slave_1: left promiscuous mode [ 1191.998147][ T24] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1192.012672][ T24] em28xx 3-1:0.132: board has no eeprom [ 1192.047833][T27720] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1192.078105][T27720] usb 2-1: device descriptor read/8, error -71 [ 1192.096539][T12690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1192.106925][T12690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1192.117468][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1192.125362][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 1192.132823][ T5904] em28xx 3-1:0.132: Registering V4L2 extension [ 1192.187895][T27720] usb usb2-port1: unable to enumerate USB device [ 1192.437369][T12698] tipc: Started in network mode [ 1192.442935][T12698] tipc: Node identity 4, cluster identity 4711 [ 1192.451491][ T5904] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 1192.457584][T12698] tipc: Node number set to 4 [ 1192.462080][T27720] usb 3-1: USB disconnect, device number 16 [ 1192.476583][T27720] em28xx 3-1:0.132: Disconnecting em28xx [ 1192.642680][ T5904] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1192.655373][ T5904] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1192.675177][ T5904] em28xx 3-1:0.132: No AC97 audio processor [ 1192.713506][ T5904] usb 3-1: Decoder not found [ 1192.737770][ T5904] em28xx 3-1:0.132: failed to create media graph [ 1192.770131][ T5904] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1192.799397][T12705] ================================================================== [ 1192.800761][ T5904] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1192.807495][T12705] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1192.807524][T12705] Read of size 8 at addr ffff888048f54738 by task v4l_id/12705 [ 1192.807539][T12705] [ 1192.807549][T12705] CPU: 0 UID: 0 PID: 12705 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1192.807569][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1192.807580][T12705] Call Trace: [ 1192.807588][T12705] [ 1192.807596][T12705] dump_stack_lvl+0x189/0x250 [ 1192.807618][T12705] ? __virt_addr_valid+0x1c8/0x5c0 [ 1192.807635][T12705] ? rcu_is_watching+0x15/0xb0 [ 1192.807659][T12705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.807682][T12705] ? rcu_is_watching+0x15/0xb0 [ 1192.807714][T12705] ? lock_release+0x4b/0x3e0 [ 1192.807738][T12705] ? __virt_addr_valid+0x1c8/0x5c0 [ 1192.807754][T12705] ? __virt_addr_valid+0x4a5/0x5c0 [ 1192.807772][T12705] print_report+0xd2/0x2b0 [ 1192.807793][T12705] ? v4l2_fh_open+0xc7/0x430 [ 1192.807815][T12705] kasan_report+0x118/0x150 [ 1192.807834][T12705] ? v4l2_fh_open+0xc7/0x430 [ 1192.807859][T12705] v4l2_fh_open+0xc7/0x430 [ 1192.807881][T12705] ? __pfx___mutex_lock+0x10/0x10 [ 1192.807908][T12705] em28xx_v4l2_open+0x157/0x9a0 [ 1192.807937][T12705] v4l2_open+0x20f/0x360 [ 1192.807954][T12705] chrdev_open+0x4c9/0x5e0 [ 1192.807973][T12705] ? __pfx_chrdev_open+0x10/0x10 [ 1192.807993][T12705] ? __pfx_chrdev_open+0x10/0x10 [ 1192.808010][T12705] do_dentry_open+0xdf0/0x1970 [ 1192.808036][T12705] vfs_open+0x3b/0x340 [ 1192.808053][T12705] ? path_openat+0x2ecd/0x3830 [ 1192.808075][T12705] path_openat+0x2ee5/0x3830 [ 1192.808097][T12705] ? arch_stack_walk+0xfc/0x150 [ 1192.808125][T12705] ? __pfx_path_openat+0x10/0x10 [ 1192.808146][T12705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.808170][T12705] do_filp_open+0x1fa/0x410 [ 1192.808191][T12705] ? __lock_acquire+0xab9/0xd20 [ 1192.808212][T12705] ? __pfx_do_filp_open+0x10/0x10 [ 1192.808242][T12705] ? _raw_spin_unlock+0x28/0x50 [ 1192.808261][T12705] ? alloc_fd+0x64c/0x6c0 [ 1192.808282][T12705] do_sys_openat2+0x121/0x1c0 [ 1192.808303][T12705] ? __pfx_do_sys_openat2+0x10/0x10 [ 1192.808323][T12705] ? exc_page_fault+0x76/0xf0 [ 1192.808346][T12705] ? do_user_addr_fault+0xc8a/0x1390 [ 1192.808367][T12705] __x64_sys_openat+0x138/0x170 [ 1192.808389][T12705] do_syscall_64+0xfa/0x3b0 [ 1192.808404][T12705] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.808424][T12705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.808441][T12705] ? clear_bhb_loop+0x60/0xb0 [ 1192.808458][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.808475][T12705] RIP: 0033:0x7f1c968a7407 [ 1192.808490][T12705] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1192.808506][T12705] RSP: 002b:00007ffd20497ae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1192.808524][T12705] RAX: ffffffffffffffda RBX: 00007f1c97000880 RCX: 00007f1c968a7407 [ 1192.808538][T12705] RDX: 0000000000000000 RSI: 00007ffd20497f1a RDI: ffffffffffffff9c [ 1192.808550][T12705] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1192.808561][T12705] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1192.808573][T12705] R13: 00007ffd20497d30 R14: 00007f1c97167000 R15: 0000557ce80d84d8 [ 1192.808592][T12705] [ 1192.808599][T12705] [ 1192.818306][T27720] em28xx 3-1:0.132: Closing input extension [ 1192.823534][T12705] Allocated by task 5904: [ 1192.823551][T12705] kasan_save_track+0x3e/0x80 [ 1192.823576][T12705] __kasan_kmalloc+0x93/0xb0 [ 1192.823588][T12705] __kmalloc_cache_noprof+0x230/0x3d0 [ 1192.823602][T12705] em28xx_v4l2_init+0x10b/0x2e70 [ 1192.823621][T12705] em28xx_init_extension+0x11d/0x1c0 [ 1192.823637][T12705] process_scheduled_works+0xae1/0x17b0 [ 1192.823657][T12705] worker_thread+0x8a0/0xda0 [ 1193.183070][T12705] kthread+0x70e/0x8a0 [ 1193.187164][T12705] ret_from_fork+0x3fc/0x770 [ 1193.191848][T12705] ret_from_fork_asm+0x1a/0x30 [ 1193.196622][T12705] [ 1193.198942][T12705] Freed by task 5904: [ 1193.202909][T12705] kasan_save_track+0x3e/0x80 [ 1193.207608][T12705] kasan_save_free_info+0x46/0x50 [ 1193.212632][T12705] __kasan_slab_free+0x62/0x70 [ 1193.217403][T12705] kfree+0x18e/0x440 [ 1193.221312][T12705] em28xx_v4l2_init+0x1683/0x2e70 [ 1193.226336][T12705] em28xx_init_extension+0x11d/0x1c0 [ 1193.231638][T12705] process_scheduled_works+0xae1/0x17b0 [ 1193.237210][T12705] worker_thread+0x8a0/0xda0 [ 1193.241819][T12705] kthread+0x70e/0x8a0 [ 1193.245898][T12705] ret_from_fork+0x3fc/0x770 [ 1193.250492][T12705] ret_from_fork_asm+0x1a/0x30 [ 1193.255250][T12705] [ 1193.257564][T12705] The buggy address belongs to the object at ffff888048f54000 [ 1193.257564][T12705] which belongs to the cache kmalloc-8k of size 8192 [ 1193.271608][T12705] The buggy address is located 1848 bytes inside of [ 1193.271608][T12705] freed 8192-byte region [ffff888048f54000, ffff888048f56000) [ 1193.285564][T12705] [ 1193.287877][T12705] The buggy address belongs to the physical page: [ 1193.294280][T12705] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48f50 [ 1193.303031][T12705] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1193.311521][T12705] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1193.319058][T12705] page_type: f5(slab) [ 1193.323029][T12705] raw: 00fff00000000040 ffff88801a442280 ffffea0001d24000 dead000000000004 [ 1193.331792][T12705] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1193.340388][T12705] head: 00fff00000000040 ffff88801a442280 ffffea0001d24000 dead000000000004 [ 1193.349054][T12705] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1193.357723][T12705] head: 00fff00000000003 ffffea000123d401 00000000ffffffff 00000000ffffffff [ 1193.366380][T12705] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1193.375035][T12705] page dumped because: kasan: bad access detected [ 1193.381442][T12705] page_owner tracks the page as allocated [ 1193.387142][T12705] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21746, tgid 21739 (syz.1.2156), ts 560443865862, free_ts 559743949281 [ 1193.408678][T12705] post_alloc_hook+0x240/0x2a0 [ 1193.413436][T12705] get_page_from_freelist+0x21e4/0x22c0 [ 1193.418972][T12705] __alloc_frozen_pages_noprof+0x181/0x370 [ 1193.424774][T12705] alloc_pages_mpol+0x232/0x4a0 [ 1193.429612][T12705] allocate_slab+0x8a/0x3b0 [ 1193.434108][T12705] ___slab_alloc+0xbfc/0x1480 [ 1193.438784][T12705] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 1193.445206][T12705] krealloc_noprof+0x124/0x340 [ 1193.449972][T12705] copy_array+0x63/0xf0 [ 1193.454118][T12705] copy_verifier_state+0x848/0xed0 [ 1193.459226][T12705] push_stack+0x197/0x3c0 [ 1193.463551][T12705] sanitize_speculative_path+0x2b/0x1e0 [ 1193.469084][T12705] check_cond_jmp_op+0xd9c/0x2340 [ 1193.474099][T12705] do_check+0x6d3a/0xd450 [ 1193.478419][T12705] do_check_common+0x168d/0x20b0 [ 1193.483342][T12705] bpf_check+0x13664/0x19c60 [ 1193.487919][T12705] page last free pid 24 tgid 24 stack trace: [ 1193.494152][T12705] __free_frozen_pages+0xc71/0xe70 [ 1193.499275][T12705] __slab_free+0x326/0x400 [ 1193.503688][T12705] qlist_free_all+0x97/0x140 [ 1193.508279][T12705] kasan_quarantine_reduce+0x148/0x160 [ 1193.513726][T12705] __kasan_slab_alloc+0x22/0x80 [ 1193.518565][T12705] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1193.524016][T12705] __kernfs_new_node+0xd7/0x7e0 [ 1193.528854][T12705] kernfs_new_node+0x102/0x210 [ 1193.533603][T12705] __kernfs_create_file+0x4b/0x2e0 [ 1193.538718][T12705] sysfs_add_file_mode_ns+0x238/0x300 [ 1193.544077][T12705] internal_create_group+0x66d/0x1110 [ 1193.549436][T12705] sysfs_create_groups+0x59/0x120 [ 1193.554463][T12705] device_add_attrs+0x1c4/0x5a0 [ 1193.559320][T12705] device_add+0x496/0xb50 [ 1193.563656][T12705] usb_new_device+0xa39/0x16c0 [ 1193.568419][T12705] hub_event+0x2941/0x4a00 [ 1193.572830][T12705] [ 1193.575141][T12705] Memory state around the buggy address: [ 1193.580773][T12705] ffff888048f54600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.588829][T12705] ffff888048f54680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.596876][T12705] >ffff888048f54700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.604926][T12705] ^ [ 1193.610805][T12705] ffff888048f54780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.618854][T12705] ffff888048f54800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.626898][T12705] ================================================================== [ 1193.707887][T12705] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1193.715132][T12705] CPU: 0 UID: 0 PID: 12705 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1193.726867][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1193.736941][T12705] Call Trace: [ 1193.740237][T12705] [ 1193.743173][T12705] dump_stack_lvl+0x99/0x250 [ 1193.747865][T12705] ? __asan_memcpy+0x40/0x70 [ 1193.752487][T12705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.757706][T12705] ? __pfx__printk+0x10/0x10 [ 1193.762307][T12705] panic+0x2db/0x790 [ 1193.766215][T12705] ? __pfx_panic+0x10/0x10 [ 1193.770652][T12705] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1193.776576][T12705] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1193.782907][T12705] ? print_memory_metadata+0x314/0x400 [ 1193.788372][T12705] ? v4l2_fh_open+0xc7/0x430 [ 1193.792960][T12705] check_panic_on_warn+0x89/0xb0 [ 1193.797891][T12705] ? v4l2_fh_open+0xc7/0x430 [ 1193.802479][T12705] end_report+0x78/0x160 [ 1193.806725][T12705] kasan_report+0x129/0x150 [ 1193.811238][T12705] ? v4l2_fh_open+0xc7/0x430 [ 1193.815841][T12705] v4l2_fh_open+0xc7/0x430 [ 1193.820267][T12705] ? __pfx___mutex_lock+0x10/0x10 [ 1193.825298][T12705] em28xx_v4l2_open+0x157/0x9a0 [ 1193.830152][T12705] v4l2_open+0x20f/0x360 [ 1193.834389][T12705] chrdev_open+0x4c9/0x5e0 [ 1193.838801][T12705] ? __pfx_chrdev_open+0x10/0x10 [ 1193.843736][T12705] ? __pfx_chrdev_open+0x10/0x10 [ 1193.848661][T12705] do_dentry_open+0xdf0/0x1970 [ 1193.853427][T12705] vfs_open+0x3b/0x340 [ 1193.857483][T12705] ? path_openat+0x2ecd/0x3830 [ 1193.862245][T12705] path_openat+0x2ee5/0x3830 [ 1193.866828][T12705] ? arch_stack_walk+0xfc/0x150 [ 1193.871681][T12705] ? __pfx_path_openat+0x10/0x10 [ 1193.876611][T12705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.882676][T12705] do_filp_open+0x1fa/0x410 [ 1193.887175][T12705] ? __lock_acquire+0xab9/0xd20 [ 1193.892043][T12705] ? __pfx_do_filp_open+0x10/0x10 [ 1193.897085][T12705] ? _raw_spin_unlock+0x28/0x50 [ 1193.901951][T12705] ? alloc_fd+0x64c/0x6c0 [ 1193.906281][T12705] do_sys_openat2+0x121/0x1c0 [ 1193.910971][T12705] ? __pfx_do_sys_openat2+0x10/0x10 [ 1193.916165][T12705] ? exc_page_fault+0x76/0xf0 [ 1193.920842][T12705] ? do_user_addr_fault+0xc8a/0x1390 [ 1193.926120][T12705] __x64_sys_openat+0x138/0x170 [ 1193.930965][T12705] do_syscall_64+0xfa/0x3b0 [ 1193.935456][T12705] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.940664][T12705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.946736][T12705] ? clear_bhb_loop+0x60/0xb0 [ 1193.951413][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.957306][T12705] RIP: 0033:0x7f1c968a7407 [ 1193.961717][T12705] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1193.981316][T12705] RSP: 002b:00007ffd20497ae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1193.989726][T12705] RAX: ffffffffffffffda RBX: 00007f1c97000880 RCX: 00007f1c968a7407 [ 1193.997688][T12705] RDX: 0000000000000000 RSI: 00007ffd20497f1a RDI: ffffffffffffff9c [ 1194.005656][T12705] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1194.013617][T12705] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1194.021584][T12705] R13: 00007ffd20497d30 R14: 00007f1c97167000 R15: 0000557ce80d84d8 [ 1194.029650][T12705] [ 1194.033049][T12705] Kernel Offset: disabled [ 1194.037388][T12705] Rebooting in 86400 seconds..