last executing test programs: 12.868616475s ago: executing program 1 (id=2841): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000340, 0x0, 0x0, 0x200000000416, 0x200000000446], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1ae) 12.813635702s ago: executing program 1 (id=2842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x5, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, 0x0, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702fff020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 12.024043282s ago: executing program 0 (id=2844): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x4, &(0x7f0000000280)=0x0) (async, rerun: 64) r3 = eventfd2(0x63, 0x80000) (rerun: 64) io_submit(r2, 0x36, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) (async) write(r0, 0x0, 0x0) (async, rerun: 32) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) 11.80121976s ago: executing program 0 (id=2846): semop(0x0, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='esdfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2b72646d61202b13dfd163707573"], 0xe) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) getsockopt$sock_buf(r8, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11.371575028s ago: executing program 1 (id=2848): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e20, @multicast1}, 0x279, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='gretap0\x00', 0x1, 0x7, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000ff3000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f00009a3000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) (async) mremap(&(0x7f00009a3000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r3) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x5, 0x63c, 0x1, 0x2, 0xd59f85, 0x19f2, 0x3f, 0x19e7, 0x3, 0x4, 0x27fd, 0x2804, 0x2, 0xf70, 0x0, 0x28, {0x8, 0xfffffffd}, 0xd1, 0x80}}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x5, 0x63c, 0x1, 0x2, 0xd59f85, 0x19f2, 0x3f, 0x19e7, 0x3, 0x4, 0x27fd, 0x2804, 0x2, 0xf70, 0x0, 0x28, {0x8, 0xfffffffd}, 0xd1, 0x80}}) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x18) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66b852008ed8c4c23dbce70fc72bc4c10dc23100f00fc18d00800000640f1bcc660f3882055aa900003ef2dfb000200000b8005000000f23d80f21f835c00000400f23f80f201c", 0x47}], 0x1, 0x2, &(0x7f0000000500)=[@cr0={0x0, 0xa0000014}, @cr0={0x0, 0x40000000}], 0x2) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="66b852008ed8c4c23dbce70fc72bc4c10dc23100f00fc18d00800000640f1bcc660f3882055aa900003ef2dfb000200000b8005000000f23d80f21f835c00000400f23f80f201c", 0x47}], 0x1, 0x2, &(0x7f0000000500)=[@cr0={0x0, 0xa0000014}, @cr0={0x0, 0x40000000}], 0x2) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r7, 0x800, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, 0x0, 0x10000000) 10.583782764s ago: executing program 2 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x4080) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x4, 0xfff, 0xfffffe0010000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="228759f8fadbc1928108ac278e2a1b5cb469eccaeb5354a20039a2510728b4d5b470774bb30f118494891c0c3fca75e3d61fbea33e9967e3b69e65092427d26f424ba6b328158c487f54a609341cd19bec41686492e797898113490df702"], 0x113c}}, 0x48004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xdaf}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') pread64(r6, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1e1902, 0x0) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) ioctl$EVIOCGABS3F(r1, 0x8018457f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00540000000c0a01e2c0aca7ec32bab2005715e1155c010000000000000000070000060900020073797a31000000000900010073797a300000000028000380240000800800034000000002100002800c00028008000180fffffffb06000640090f0000140000001000010000000000000000000084000a"], 0xe8}}, 0x0) 9.333789848s ago: executing program 4 (id=2852): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000340, 0x0, 0x0, 0x200000000416, 0x200000000446], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000500000000fcffffff01000000031d00004000000022f06e723000000000000000000000000000726f73653000000000000000000000006970766c616e310000000000000000006e723000000000000000000000000000000000000000ffffffffffffffffff00ffff006e0000006e000000a6000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff000000000000000000"]}, 0x1ae) 9.1991034s ago: executing program 4 (id=2853): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/247, 0xf7}, 0xfffffffb}], 0x1, 0x2002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@int=0x5, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r2, &(0x7f0000000380)='./cgroup\x00', r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x27, 0x800004, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r7, &(0x7f0000000100), 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 9.107834301s ago: executing program 1 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) fanotify_init(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x40086603, &(0x7f0000000040)) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_disconnect(r4) unshare(0x62040200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x7}, &(0x7f0000000780)=0x8) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001000000001a0000000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b00"], 0x28}}, 0x0) 7.555869104s ago: executing program 2 (id=2855): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.674990219s ago: executing program 4 (id=2856): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 5.672394405s ago: executing program 0 (id=2858): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x5, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, 0x0, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 5.671696503s ago: executing program 2 (id=2859): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 5.670773715s ago: executing program 4 (id=2860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010220000018105e000000000904000009fcffffff09210000000122220009054c240000000000000000000000000000670e5d5b9c0803be084bc1ee97918984cc0ace975ad13cad"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000050000000000000060fc03000f982c"], 0xfce) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "901b"}, @global=@item_4={0x3, 0x1, 0x6, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 5.670584757s ago: executing program 2 (id=2861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.57246968s ago: executing program 2 (id=2862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x4000000000000000, 0x8040}, 0x0) 5.457532741s ago: executing program 2 (id=2863): syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000800)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xfffffffc, @rand_addr=' \x01\x00', 0x3ff}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x7, @private1, 0x1}, @in6={0xa, 0x4e24, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfaf}, @in={0x2, 0x4e21, @remote}], 0x74) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r5, 0xfff) getpeername(r5, 0x0, &(0x7f0000000140)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x855, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) sendmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="844d52d10dec4487ebf7779e1aef494ba02efc28143b4761d24f5517228d1b74a4cd7e7115b4a50c0f8ef9e5344dbc9f1e211c77aa340fb343425606d3f663c76585ee1508f62975c9bb18fd7e0fef0c10b22d624c240a01f91ca4a8365a22d29fadf7e66ee2efb961b775d5434da532ae9566114514e7289002a6a35b0934e1cf2361e6e365cb9ce8bb2a604be36e3a7130d85fccf9273739fe0cfc428a8ff9f48c6ed304e9c9403d0aa4b64f921e469bfa863e3ad279376dccfbf6da1aa4a6", 0xc0}, {&(0x7f0000000100)="36ec4b569138a38861b8aefd5e29b48a9dc8ad1c829e72fe66678b7b820d6ea20ef0a5ec379744eb98e747", 0x2b}, {&(0x7f0000000440)="f124b83b0e0e0290ef1fc6234f7bbadd06af0d9968fda845f0d911e4c0e0535f1be35c4792e9d17cc75baf5b0bf5b2164bf2c207e113d9a9edf2e097eeb1bf592eee2b522ff384fb20545460e5789ec61b3f2b5987429f2e1879abd457d3531c83d86c94a592da18b6452e5269f209376100a03f5fce4c70d16e4a8996189088861008a5ab7e6626d19ad5b14bbac75551e3de518d2389f7a8ec6ce7ef74dd553a2a7924035e", 0xa6}, {&(0x7f0000000500)="9a2f81142d896ed16780a1363e40ebc2e28f88986b9f0f4826620077744b729f312c1b20ca5abf52502c6a28c610bafe8309cb2e15a44c2140cc0a5239e0532b1901a55d81c83a30d7a8f5312809760e7fa72846954b486d89d9b22d2220f9b941a90c5ae8bc09c65d3f859e6fedfc19e612d77bb73f2a4c31433edcc213727f1495e8eae132794af17ccb929b4ab4bb2b466f72bbbd0f3c2e49b95acf8aa4ed9353d2c46ee9cbefafbc5b976605da353898f0409ac50b133cb65dd05a0f1cb7b14ba6b51757a06f55e558d82c7ed28f54601d9bb59238338a15dc87c0a19bc6e890d8a50abc5d07f826", 0xea}, {&(0x7f0000000600)="8df51fb7ce226eebd8e972c88e12604166cc4daec0634ab7da63444f33704e7927dc15e8193e71213e3b9b33b4a4ab37375c906b18e9ab6b0b4c062f9445f030d603e775757ac15378ef266395415151561360a1df12ff10e4c7ad072332d6ef229b7e8b64e41498f2f81390a4a21c686207820bc232b83f89d7b7418dc27c6e602b9d6f903c2aa083b690049811fed6dcbaf80fc12c7b22b9ec55831d8f956efbb7fbe0cd44e6480ae704e8ba2ae7143abdb22293d2ebf5", 0xb8}], 0x5, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], 0x2a8}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000006c0)="95de9c7c0eb9034d20fb84d4f77bb4a9a3e643cad052c72cd3e507fe566c0e6413f0c79d2742a601c20f4f994a67adc82b61e2ed732206a0de82bb48075b3fa3201771db3cff1da9", 0x48}, {&(0x7f0000000a80)="d97befacff95ea762179a15d029bb8b5766c15d44bed8f30d766715abf7d5a52fd9ba53296f4452ed31efaf2f115de6a27abd3bb2285bf85b1fe7ab93b0265d6d222888db568859c9379d5ad48468aedbe639b5b2d22be05eb9cb76645da430f76e65a4cf748efc0aff337c97c0629fc3f3057a8dae220e75a2a5a67c40b0fb94884419c714ff21b527c41d4dc0dcc4f91193cf0f14e90fc8b7b6f6834c49dd68b566be304f6e3850c96464c326234870b7d6fce96876ad2deafd05525b19a5279751c084e59cf7171ff5e39de8550290d0f4e11c5", 0xd5}, {&(0x7f0000000b80)="1b6a7c788c2ad245bae0c5572d789fa2488ae1c56766c2a77eadd7c5123aa0100414437f0fad5333a60f816197c50291b5caaf307043ecbbb696309896e6774ece70daba21337bb4a8e6d131fc7d7e2e6807f5af9e729e630f021da154c876a6030de1ae7f1b67f665fcbf662b13e1721f6bbd13b4c58631f5cb73d40314d564313f8748c8dba7a103232e42f1dae2eed971fdf811b300db8b179f2d4dec99dc3f4945106b731a61d95249118c6ae41d2620d4ffbdc69d6feb7e", 0xba}, {&(0x7f0000000740)="e622376856fab55a16a9cb10a3475ee16e6ba5d68ca257841714f33aeb427d23b72cc41fcf4eece2fdc683825f3268dcea86f7d5f6a1de4b9df4e7cd34e70e30dff9452ee6066549bf5691556d2660a0e620e80a15c314f3d444603adbbdeb3d2d5a703a", 0x64}], 0x4, &(0x7f0000002bc0)=ANY=[@ANYBLOB="f80000000000000006000000ff000000aa1c033f8f64d9b789233ecaf775617f9f6fcdfd516cc8c0b3324bda3c7d2a411e2138078d073a790b14f53545ed441c56aaadf671adc138ad76afe6ccb5aa641a2613818d02d6b0fdc03b63874284bdaf1f8866f7e19b60ace4777269ee8bf6ded39d89e380901e0e18f87a30800aba554accbd756c05fe7730493522931b6cfa3a3c362549de420cad0e6b964cef951ba1da1001229c7091740c4674ea82b5b03e0343fce504682eabfe7481a07457418df3e732c8268bda953739c51377dcb85699cbf20cfa06b3da070c4afdd1e1222f5e66e95b563c6b0fd1585d23fb4cc16fbbe373160ee7a8000000000000000e0100000000804eaacfb6a6bec1e220b26706805db5e680989169968f92a88c23c6e6d37efea8ac83a195d5d00143105eeb3845ac9a99c4315f4df459d06b22aee48f8da73870155d33553fe5853bc1206dc6af785ea6222fe03500007f22d22889d439875e50f9a9e39c52f6dd7d0e59e03c5967b88dbfbc5e353804df4af4f7aeaf73c14afa6a2f14cf000000000000008b4128536b124bb14e0a41e7fc2beaa9f81f180f18672ecf65cc59e24c1eab09d986880585ae036a0e2c4f3caa750d8f446f77ab117f88e5b7fa328439db21605972a9e7f8935b2eb2aa78b608dd0706c6428af251113627218ecf4095131721205164849b42d210d110b27db9ff974c03221feceb4a6e280e5b5b4645cce1978414298b539d65ccaa66ca419c44e316b9591d9f949d789781716d6b32d562bee36f7b7391c7458cc7a1c2f6cea4fb1e"], 0x1a0}}, {{&(0x7f0000000e80)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x3, 0x3}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f00)="d68753923b0448105b494eb4f53786cb1ea386078b5deef04f648e4dc83f86049b32a4b1a279c385265eefb725fd66043f0d6ed359fdeb94762e1af801f62e1b2c87ca42bbfd1b363e7f5a63a2bc2516f91ce11e8af1f03f861ad6b93806d1020fec85e5bbf923e1790fe5d137556c40b2ad041bf09bfe6c7c2e3840143959bdc6e410848714b45c6b1d0b15ba85", 0x8e}, {&(0x7f0000000fc0)="d932eb43f661e3f77ed4425b6fae8d9876bf88cf17bba94f0854ca9e29bcbc26e3207b01e1a6115b5f5571cb7b9d35860898bea0fe4919488a0873a8545ba26671a4508442b7b98c83225b7a9fc01bc6f6d8404df9148fe13ccb061e6f416b18f14c7d8bb07b9e52a8fd55", 0x6b}, {&(0x7f0000001040)="76be293e3d047a2f9b7d03356d2f893fab6f71e70077b377b1fee6402c8793c06a4cafc2942083d71e71591ee49895fcfb70a1301be1ebaee51841cbe9f162348c4e1d4f7b81686882e166c43599db072f3ec9f75bb6c8448f20c1350b", 0x5d}], 0x3, &(0x7f0000001100)=[{0x88, 0x108, 0x200, "18462bed03cb35775f7af232e9f4f0eb9d27d0205f4dadb3b8f5f8a848694e105a70729f43191d217c93586c127f6769cc847568d60879c0dd7da10e1014da2a38bbd967871e4346762e8dd99eca02705b4afcdea23dbf74891191744e52c77dedec3da48d5f3d5ac565cb8b6ce02f5d87"}, {0xd8, 0x108, 0x0, "5316a5c4c9cef51463f17a14ea3110b91cc27471c9723e8e849e9f6d313102c6729c0c185875b3ecb08c57f3a6febc264d5824513dbdcc8083e98f0cc3dedef4c2d0923b40a7e515527cc881e8c6746a78cecd20cde02f92ff2c0f40b631b1b388ac7e536045c5da1e871a8d618e4894a2e7fa9f76c50e4d6addb6925b3360fed8a0d96e752b4228711ec58205106cb979b5d56e483a57cd3088356fe71ad93d785847e4a7109b8ed55f6dbb810db5e18d1f77834611519e8ecbcae35fdc7aae8eab91daca0b88"}], 0x160}}, {{&(0x7f0000001280)=@ax25={{0x3, @null, 0x7}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="f48f178da2d1642a2a2ebddc505c0c22d5984cd35869261e45928252217affe28816025ac1b66cde60a943aff019337e969c7c30b2da355c72de54858a800c60f7f7863d4c3723d86e3179985cdbf0f4320a85b4373a3b5c11c90681244f23290cd9efa9c1f2ea32368a861c2c185ba448c6dc4e294eaa5cc697380adab535f7e94bf65457bc7bf1fd7256bc9f7b91ca9b121e7f458b4acdd2e8e27913e43d638fad9b9257e73356bad9164f8799aeebad4cfeca3f32ad89aad4efa48345e2fe8e248f057a096299eed7234834c3b4a3e659", 0xd2}, {&(0x7f0000002400)="87b6c5fb868a755b088c8c2e6e379689e29793fa00f7d3cb924a793840b1a1a4a2ac3e53d7d6d1923685fd591a3cd63f89838961ddf6f731794a", 0x3a}, {&(0x7f0000002440)="3fc1d80288a7de260b245905158b34320475e644614f9d06ccd60fc49ec1a64250223e25baa66c42323315f66b1ea61c6a2bb741d42eb3604718eac4958fe7d577cae5ef9c781511b0879d48c8d0e71fe1682228474a99b1380ae576e27902a8c62c36873a40ec0b4c4110ea0c4fdbf9cf4718bc6e7006a2550ace6c056a579051419bc3e959b92f0aa7d369a16eb591b72b39c9b19802d55c", 0x99}, {&(0x7f0000002500)="7f0a8fcb8be21a6a777dbe9b16998d91fa307a63b117e83c11db2634b08f174bb7f0b0371d45e9e8e865357ba5b92cd376b2a65f19d98aff10c9cf7ca21e54a6c272d0ddabf7319a0db4aaa2bc92c4290b1818c250c1d5bae7d9d2ba234de798e8d49a56f5909d69866c2a838c", 0x6d}, {&(0x7f0000002580)="5bf013ed75c5591a1cb0355f0afa512f4f64b644d20abeebf32e0567cdca717af4d9a17d21379e59719d3d9c6d4a643e51185bf230e83ebf25bec8ca44f5a40d978a1fff63199c4a19c7a7d2ed01e4aa6b9d6833f339d148478cdc1b045a84e4586b8f040288e2a2669bea2fba3c5b4469a2eb572a81214e19e14f5b28df8adbccfd62ddce9d79be9b588a32c86683c35ed3783b45ef667526c361095680694d978be47f744dd4049dad0845b743b2e93643f757b1da669399d7725e3e8b444d42a13ca68c740164d9e5d88c374434bd9d11c5c4de5e64d5cce2b1b1f6b503920951206b6f02", 0xe6}, {&(0x7f0000002680)="c88ec1f1442b7315b864168d8ff3834492adc15fa693c99777f92a5c6f99000275434eccc0820c8a414a156fb04c0fdf1737c0d46602ddbc7ed3eeda5bec557eee2efd3a985dbcf42c19521ec6da4b97c475136eff81e93caa3298c86f71c149879cbfc2766feed283245ec13c1b24f2f7edb2f74706f9359fd06da8da7d3298e493a9f2131f22a6ffade02741ad9c49d2dd1d62d032c6620fbe5683e1c2f67dcd41977412a3206bb4d3d9a8b48c1536b1693bba66af4b9345f359a36717adc0c07499143cf74bc79934aaababd50f4589b85486c72dbe38123dc69eca97d403a07ac8680df749b79a328de82738ebbd92", 0xf1}, {&(0x7f0000002780)="0badd52c53a37df01828166dcfb80ecb2023829c991cab4d8a6d55e2af63a55b7fd626a38f1b162e76cc055f6ac65e5076f24b", 0x33}], 0x8, &(0x7f0000002840)=ANY=[@ANYBLOB="18000000000000000a01000006000000f893f8bf30a06300400000000000000011000000060000000cc44f8c5b7ee50bf5fa0a2990eb8fffc268d40cef6913f481c124697f996155976abed601272865d900000000000000f0000000000000001701000001000000e57099241a5638d52857f7ac4977565eece3a27766c571609e4b6174648e13fb477ccf17c59a1e3a866e4a68c70e84debd01ee3fc1a1e8b54697868d181f3baa8ab336f344fea6dcde84573c9e101ae9fc78e69375b05e3a9cdb78f498214fb6569e36328e4e3baa30b97391e10b966124696747c019b0b653fca2a7f3e8c4461977002a62e5d44448c5dd49b7ce0ba9a58ee86c568e4ed9cfd90f8f346eba0e811991f9228f0a02eaf41be90d690c699be7cd6d980965ddd2c804e994c335edf6ee3b8b71a930673dc4282e3bb6310a84f57fc253cf7c3f8b608a8fe2bb1500980000000000000010010000090000002fbb72d72139237cf90778c554d12ade40f51e2fe1b7005d96c265dc6d71c1d7e90826e80b29fae049702a354f0de92c5eae2633d431dabefe64bc445f8e9c86f9d120823f159a9b96f21031e3b09adc49eab14a2f1155c95eb183eb6f510559fdfc07f1becee975720f69f19dc9907c9f429746b9b96a21c110a74942ce46ce8c13000000000000600000000000000016010000020000001b44c4a76ea6207aed490ab6977df7ea70b54b13537819f320b4b7771c85ae838043f90362519cff325083044e0e4e69ed4b86803554422cc43cce32d494bb3e7be316cca21ea761859788690d000000"], 0x240}}], 0x5, 0x9200000000000000) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0105b08, 0x0) bind$tipc(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.975871661s ago: executing program 0 (id=2864): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0xd, 0xbb, {0xbb, 0xe, "b1aed6761409f0b96de84e26ffc85aba8a41ffcd8fca8737d142c9c82dd464be4b8345edaa3c42b59c3a5f0247a8565afd073495b70b42a51eeb563910ab8d4fd5b9c6f3c93d048dee0fd2fb1231fd2ae6cdebad4024d444668cd6aaa7153f71f39c53f3c73a1621fbbfecdc75ec22938447622af3ce970f8b6b21f4efee9f9c516e1cb8f54442c6c699023a99918409ff60ee871c150a11968d42b78a73b5ba5445f02ae2c66f4fd0862e08942b3a7527a7df1d0fc1243114"}}, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7ff, 0xf00f, 0x60ab, [0x30, 0x3f00, 0xff003f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "ec019fe4309fc8f385fbf01078520a04"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x1}, @generic={0x3, 0x10, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x5, 0xff}]}}, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000400)={0x40, 0x14}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x11c0, 0x20}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xf6}, &(0x7f0000000780)={0x40, 0xb, 0x2, "7fc6"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xfd99}, &(0x7f0000000800)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "ad81"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000980)={0x40, 0x21, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x1902, &(0x7f0000000640)={0x0, 0xec26, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a80)={0x0, 0x3}, &(0x7f0000000ac0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x36314752, 0x8, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x7, 0x3078182a3427730f, 0x1}}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 4.731576076s ago: executing program 4 (id=2865): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000200)='}\xf7\x1aD,\xfcSJ\x1d\x11\x9e\xea=\x9d\xc0o\xec\xc0\x83\x91d`\xb9\xa1\xf0\v\xed\x14\xce\xc4q9\'\xba\x17\xd51\xef\x03\x1b\xa1LEr8\xbb\xc85\x017unH\xd7\x98\'V((\xed3\x15\xa9\xcf\xea2Q\xdd\xff{\xe5$j\x9b\xd5O,o0;\xd0e\x96]$\xb97%=\xc6\x18\x7f\xa8\x98\x93r\xe1\x9f3\xbdN\x96\xc5\xcb`X8\x9a`\xeby/\x00\xf8k72S\x1cB\xf7\xc7\xa8\xad\xeb\xef\xab\xe8f50\x92\xd5kK\xf2\xf8*\xb1\x14\x8f\xdd\xfe\xab\xd9?\xf9\xe2\xd0\xbfR\x8b\xfe|\x1b\x94\x9buP\xe4\x12\x01\xf65&\x80V\x81\x18\x14e\xc0b\x8fJ\xe4\xd0\x94s\x06/ \xb5\x96@\xdc\x95\x86\xef7[g\xdb\x86,xNA\xe4?\x84\xd4B\xe3\xc3\x05\xab\x00\x80\t\xa3\xff\xa0\xa2\r\x88\x92m\xa0\xdc\xec[\x84\xa8\xc8Z4n\xa3\x84\xa7_\xa4~\xa0\xd6Ya\x95&\xc30\x9e\x8f\x9dGl\xacv0|\x00\xb6b\xfa\x03\xd6MyGx\x05\xd7y}h\xf8\xcf)#\xd0z\xccp\xe8\xb5_\xef\x13ZY\x9f\xc1', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000004000/0x4000)=nil, 0x4000}, 0x2}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r7, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/128, 0x80, 0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, @fallback=0x3c, r9, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r11, 0xffffffffffffffff, 0x1, r12], 0x0, 0x10, 0x667}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="000000000000005685b2b100080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r13, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000100", @ANYRES16=r14, @ANYBLOB="080029bd7000fcdbdf2503000000060006000400000014000c00fe880000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.567688094s ago: executing program 1 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x6, @remote, 0x8b6}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x14}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f726bd7000fedbdf2505000000dd3a9806d96966c06e5c84a4e98bb751b21521f804387203bb809fcd67151c282a30d8eb63dbd79256ccf7571b05d6d3b19c020fffc699dce365297129b8636abfde000d3b9111a0aa603c83d303eba40d0af469f6d57ed6cf97f91c6ca3bcd3395fa9196e7a8add5d092fbe8f63d01ab5e3d8432faa914c4de9c83c4a2f7dcf3daa695d155a7ef78244920c72dd215cf7712d89b68d54d91d1768d91708f27fbba412ac7a146d038e66415bef1755a6687830d569bc3546dc9558400a43a7b422e5a9ba62c025ebf58f626061772bf1cbed2398a07831ee8faf93f853ab3c5077a24bedea4cbefe682dea1d91777248101c5b699cbffe0114693980a2b7485f25a9e01b16424213f7e5c4334324cf662b38bce35aadcfe61b9c887cf59bab133500ab5160bd0e2facd4ce027dfc27242c77"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x943, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe06fe05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') 4.423762721s ago: executing program 3 (id=2868): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/247, 0xf7}, 0xfffffffb}], 0x1, 0x2002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@int=0x5, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r2, &(0x7f0000000380)='./cgroup\x00', r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x27, 0x800004, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, 0x0, 0x0) bind$xdp(r7, &(0x7f0000000100), 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 3.568454428s ago: executing program 3 (id=2869): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x6b4b01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x8, 0x40) socket$packet(0x11, 0x3, 0x300) write$tun(r1, &(0x7f0000003040)=ANY=[@ANYBLOB="080008000003000001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000ef0132e0dc"], 0x36) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x1, "5a1a3fb958ff552002c2b9afdfc2f8295f5258e6bb806cb5da2125fcc727ec29"}) dup3(r3, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r5, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000140)="527302587e0a4e47ad09", 0xa}], 0x3, 0x0, 0x1000000) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300070f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a000000000000000002001300"], 0x78}, 0x1, 0x7}, 0x0) write$dsp(r9, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x0, 0xfffffffffffffffd, 0x2000003fffffffc, 0x4, 0x344}, 0x0, 0x0) close(r7) 2.612130191s ago: executing program 3 (id=2870): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.479999415s ago: executing program 3 (id=2871): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) (async) mmap(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) close(0x3) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast2, 0x1, "0596232642d17c7dc02cd9f90c8dd705b8dd6dadcd9a1c8ddffa4da80fbf040d", 0x7c, 0x8, 0x100, 0x3}, 0x3c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x2020) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x4000004) r8 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7fff, 0x8, 0x1, {0x22, 0x680}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x9, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0xc, 0x7}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0xe, 0x1, 0x48, 0x7}, 0x41, &(0x7f00000000c0)={0x5, 0xf, 0x41, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0xd, 0xf00, 0x1, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x8, 0x401}, @ss_container_id={0x23, 0x10, 0x4, 0x4, "a67995f87b4eed535146fd6cbf04fe07"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x500a}}, {0x46, &(0x7f0000000240)=@string={0x46, 0x3, "a843f9e6d5a7e3dbdcd55df48b0c7fbeb77d73e4956181b4952badcae1d1c913ba51be931c935f62dd7b3a02984a780fbb6bf5f43897b0c7613659a4bf444828e2da9088"}}, {0x97, &(0x7f0000000340)=ANY=[@ANYBLOB="9703b18eb4a21f2b820762c70fb41f81c8563be050010ba53f246284521fb7ff2361228ac70ba50c6f78d7680d172c8df59f747bd0c0bb75de9a134fc6cfc8b49b0fe3ebb90a31c02d4cdb4ede323359f878681dc404444ed1f7c8b5a0334e77ccf3c0b4f64958a249b211b4cd835becc48457cdc8605e6d7e1ea2043d56be65cbef00"/142]}, {0xfffffffffffffebc, &(0x7f0000000400)=@string={0x5a, 0x3, "8020e9d6b0b2b9ba7d1106688055e0d6822a50a296d7961cba0eaf0e76e895dfc2a9a71aebbe9cb4ff796e0569f0aa9362300a709ba5339f232481241c2bf3f1d6550b8cf0d9f0dffb2e0f12097d6715d08c86e22ae427d6"}}, {0x64, &(0x7f0000000480)=@string={0x64, 0x3, "7e99329fef62b2aaaf985c6007b0ef9d3b92357c34218ef4c664177826bd45f9ba063e2d641d0875f96a6954b666bb44ae08a8a9dd7fd627ab8f17eb4f201c494265b139bfc6472a1e960269bdc3aecac0aa64ccbac5e8422dcfaea4582bc0b568bf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}]}) (async) syz_usb_connect$cdc_ecm(0x5, 0x119, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x1, 0xe, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0xc, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x31f2, 0xffff, 0x4, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0xc, 0xcf, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x62, 0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @mdlm_detail={0xb2, 0x24, 0x13, 0xa, "cafd3d0a2e4fd03b79751af635d8a240ecd61a49517878bdbca048b269f6ae00940180478d0dc2c2f968719b69870e6c922551b966c252201d2eb4ffdfdae5f739c26283f312e88c3f5d43cd495b9d803d59faad890ca3a09f3716854fa0bf18210ca510b6cdaebc998c2c78349a8716088863b0d4b651ea977757fd8208279554e727f45268bc7cf20233cca9d8af882a549af119b89fffff104c1ead371bb10e0baf7af6dc684490f2a5e3e374"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x7d, 0xa1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x41, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xd, 0xdf, 0x9}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x2, 0x6, 0x5, 0xff, 0x2}, 0x15, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050f15000303100b03100b0a10030208000580480ccee44a8144ae7f66fe49f25f6a5a66e9fb1c7853714400aa6cd94ae1191d2112ec68bab66227e380626d5913f5af5f7a1a8a175bd5723e180b63386a069abd0b169446102d05b4590f4c02496dd2b219e244ada0c04cd06a2da7cf7c624bace32a744f2ab0de30f0135f0e8062d74d98b0128d0e9f741793d34396a11108f1dc387dc4c5552984899193aeba0a5dc7b2900ab9378ec62a89ffc32f6a753daf66d0efed733a994af6709b90a0bb0e058b619a80fd287543e58f2333dfd3508972f537a58232"], 0x8, [{0x89, &(0x7f0000000800)=@string={0x89, 0x3, "d79285ee53c54daee42a90d9863700f4f20f80e05eae773645fee9b1ffbe864864c060eb3893ae7316a6fb9ef4678f4bd104bc3f8b7eba0a14cf87c8eabfbe75589a18625423c4b2736528a4adf339688aaa5ebf821b190a90531795f1b4fccd8936b8eb75f9788754e15514505ad806d50adf20c87b4207089f209e1b0729afe9cbfcb7c69391"}}, {0x98, &(0x7f00000008c0)=@string={0x98, 0x3, "c523ba0c1cd017c49c6a0bdce9ac6be0435d69065f6f1eed6eaab4cd0e5d3f3d0d04ba5f950d9acbe1b0c9220bef7f74500f3e902d639914ecb75f276bc9134ce5b1484cd2bb226e82f16309b165d7ef76c66b0bbac3e5cbe539d7eb811c77adea10bb987033e45df8bccd4eaca407f100db90c1d09d76576e66804a1fe16819e21bd7fe6cc2c81cfde3650284ee9d8d5b48e0c22ddc"}}, {0x10, &(0x7f0000000980)=@string={0x10, 0x3, "d3a2fc01433cf3df4e8ec1c1dadb"}}, {0x72, &(0x7f00000009c0)=ANY=[@ANYBLOB="7203ee60ecc144ef6de04d07714c6fc9812cba9f1650cf56f881816fc10bb4ccdb32314599b7e10b6f455a86b95e5d9e5d00114353b59a88039d880ce67a8534d197f9c4aedc029d5cfe78a50c216570693b5a2815453054e9b6e64975f874eb601aa877d0699f9ada0cf7b3486fc11e7233"]}, {0x15, &(0x7f0000000a40)=@string={0x15, 0x3, "d495c52583517251b91883645538b1da2e26bc"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io(r8, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r9, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f7", 0x8}], 0x2) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 1.847819896s ago: executing program 0 (id=2873): syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0xe7ed, 0x80, 0x1, 0x1d9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) 1.587582471s ago: executing program 4 (id=2874): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e88052086800095d82cc1020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect(0x6, 0xac2, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xef, 0x8d, 0x71, 0x40, 0x22de, 0x9051, 0x248e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab0, 0x2, 0x4, 0x2, 0x80, 0x2c, [{{0x9, 0x4, 0x2, 0x5, 0xc, 0x3c, 0xa6, 0xa8, 0x5, [@hid_hid={0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x378}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3fee"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xd, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0x7ff, 0x9}, [@acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0xf0, 0x84, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x44, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x3, 0x1, [@generic={0x102, 0xa, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x42, 0xb, 0x5, [@generic={0x25, 0x24, "7dcfe59459c69d5f2dc8864289dbc1caada131343b7929cd2e288797a94b44badc2f27"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x2}]}}, {{0x9, 0x5, 0x3, 0x13, 0x400, 0xc, 0xc, 0x4, [@generic={0xa1, 0x22, "a48d07148cdbfe9a684000ba84f6d6e772275812859638666ca25e5cbb286ec48f64e5ab21e4021a1656a751332c571695c5f3409b19813b907e63002ca9ccdaa98cdb202eb74f9bd9c4c6d202ddc36133629a046d5b63681609e8833a0d0f015774d769279e2df8189d7ac4152ce14d0358b66fb3e0887cc62187dbdfff241f92e390875377c10cd9233d9816822d3a4f7b749fa3d154e0ebe8d211f09079"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xe4, 0x8, 0x6, [@generic={0xec, 0x1, "8df2ac9d52c087fe5d950cc374c4bf7840e8bc05d60543ce8eeecba9cb6eaaff0cf1c58fc659f3747243ef0d5040d51ab308a3d4d0b5f32a56535e69d6af70421cc4a217df3ec7803cf216b2904bcf070625e8d0e4af5da8d2c20e853f79152b6b9989cf8418ea4ffb90c3475f4d82bb8f48050348cbe7bfcbe8ef0fbc04173d497bbb77628303174b33b8a0a6a5bf4981c53538a9da8b68d37b78b9a1b606f9b12efdcbc628d8fdc0b7d09c6a14b23a1a9fb9126d38e5672bb2a92631c3b57172d7480279ed0b82a063d7656d443ae0bacad83796403f4c96eeb450e07cab6bebd7e9cf459f6b1972af"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x60, 0x42, 0xd, 0x6, [@generic={0xe1, 0x5, "69f836bd620087e9428f5dd44283a235330c55d177a66b951c4c31412d3eb994881bfb09ec3b510a1d04416086ef2a65f216e5bc2dd38d88f27f1e206241e856f4b12a97f73c48a9bd66edc79ee3f6532afee7fd643fdbc898ec0312848403878eda12540254a0cbcd28a80073a9ba13e5eef4a9b5b9b5f546cd63150fc482b31e898e544f434533add4d55dc4d0a0eadb46ecca525f2bc90f197e47666438698634b8e825952bcefa5d5cffa2d328c4df369a5709bfbbf7b7f60c8b598393f8500caf4930b10ffa205b0f721a73115b06124e73b216834317afd9463a51e5"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x0, 0x1, [@generic={0x5a, 0x31, "6014d9bfe727550a9045010994010eb8ea9d50035de1332f28236f8a0844fce54a01b88fc73520e20303601a3fcb46b395a10e2997d34c05d795abf9e5fa9ab4e026f6442c7f71cbbeb40170555247375b6b010821fd4faa"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x1, 0x3, 0x4a, [@generic={0x86, 0xb, "ad3d3c4153138b6825376392062def0249345a7ba406df8f153bb3f9be2da880fd92ae09fb5092d941f47ab20816eb7c22b882c47c3085e3ae8989a56202ea9e1084ab1e8a66c6c3d3340071c803bb0796109b3f68ead757cf43a12145aac34e9dc3da8ec62d53cc893cc8ded612017abe4c48a6241c283674c0bf8cd35ddd5c4245ea7e"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x6, 0x1, 0x3, [@generic={0x1a, 0x5, "09cb1afc6f49b91cff6ec2daa47bf31d515cce3c8174764c"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xde, 0x77, 0xc, [@generic={0x83, 0x1, "5543977fd1912d70ab1b45768b645812c5cbd2f9e60b075ce06613f70a0b3db35cb27a27e1b73bffa952c422f86f26a1135ba45684f4471646f7fb5ff273e14f894d7b287b98a123fbabfc7aab6d3b2b5a712df78c368c1a730bfdcbd6c6d0d151b0d6328a180bbcfd84fe7855d4431bbb0aa09816818c856f25209ef08fac300b"}, @generic={0x8c, 0xa, "29e3b0a4e026591cdba2ba10453a4a6a01f20430cbb948f730d21dbe2ea686a13c79e04188ac0b4d79482f2d01badd2b53b09471ae5551c97970b0140ba254828b54a59da1d98c0f31ac4890f46ee5bc4ac9f8fcb23f13e273289bc0e670832206348d6730f6e9a04a3f5445bcfb6f781d04b49e96a4d57c65be9cc9dfeff5ae9e6b7745fa4789e6b225"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xf8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5c, 0x11}]}}]}}, {{0x9, 0x4, 0x42, 0x0, 0xc, 0xea, 0xca, 0x43, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xa3, 0xe, 0x6, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x23}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x5, 0x7, 0x80, 0x6, 0x7f}, @mdlm={0x15}, @mdlm_detail={0x39, 0x24, 0x13, 0x3, "6fde817abaf831bdc2743befeffd5c85ad210c1b92f5becff0f14665e26ccbf5a6164bfa8a1ea2f6e8a309926f1c19db7688a332b4"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x80, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0x1000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3b7, 0xc, 0xff, 0x3, [@generic={0xb4, 0xf, "3c84b72de794dadf7ea98c90b1c4251a780b087d1ad5f70ac292241282b8060acf59ed61ea950ec33bd661d2a65ac0f1e315a4640a3f47323b26c3d33285f219ea466d1a51c3f1b631ad312e7759cc1cbb6d6089008baa67fd14dad593319e8cd3549225c141972c079fc115a875bec15db086505e044cc37047e22d12fa963846a8734900d694ef1a93a7117773c9c809b10a95521f676d54345817e74ab9d816119db46c06e5f0c6b49606f0b576f8e826"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5a9}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x21, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6, 0x5, 0xe4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8001}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x80, 0x6, 0x7, [@generic={0xb4, 0x22, "912e7f2394d41026419a1c7aa2bb1b95de6de329a0867f8815539c5b469ef8e9e32af22cb6fb167dfdc1dd42cf0a439b100a5c2636909def7238e58e7b062756c41cb10bbe811b84e2d07b28f96af0242b8ccdf0e84234fba7513a967c6c3b5c86550c87eb8e9e708b777be5adc67d0cd03b389393eb00f3b415af43845db03e61eb47d9d99f2f659a50d6d941421be56f92459c9675988fe3957a751c8b1f0204872bbb991872a5d4c473c8c9e1562fc025"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8, 0x7f, 0x3, [@generic={0x8e, 0x13, "8c161c2a27cb3d16ed8aa7b4bca479cc0d428485888b0080f2ed3fc932a3e318cd673650f84a98fc8a9b01ae08ebfb9bdf01349a27cc448378b696f028100b70fdf518a54957ebc962e55f0e9259e8b48a668266dc020ea1b217ed70ad0ba1946ddf03e6f048ccd4a90eae39ce37e57a156f8cb0d70138e97d2dc2080b7645a507fae0e868ad372a5d310342"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x5, 0x79, 0x2, [@generic={0x22, 0x5, "b30eaace11b9695d71993048b889431e8718d87746368ac3624b155df1f28e5c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0x3, 0x0, [@generic={0xff, 0x31, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xff, 0xc, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4a9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x0, 0x1, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x800}]}}]}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x3, &(0x7f0000000080)={0x18, "d09bf4f30d7969a0420805782a879867f27c442e2f000cdec22f1ce8a9f7b91865"}}) 1.58704328s ago: executing program 0 (id=2875): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000024) fcntl$notify(r4, 0x402, 0x80000032) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000004008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x18, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000040)='x') 1.40370848s ago: executing program 1 (id=2876): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r1], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 960.44467ms ago: executing program 3 (id=2877): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x80000) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x101180) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000100)=""/14) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0x5, 0x300000000000}) 0s ago: executing program 3 (id=2878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000001000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000fcffffffffffffff000000000000000001000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff000000000000000000000000000000000000cf00000000000000000040000000fe8000004000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000330018b11470000000000000000000000000ffff0a0101010135000005"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 7 [ 668.026488][T14581] loop2: unable to read partition table [ 668.038365][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.071466][T14581] loop2: partition table beyond EOD, truncated [ 668.102938][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.105574][T14581] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 668.374829][T14494] team0: Port device team_slave_0 added [ 668.402362][T14494] team0: Port device team_slave_1 added [ 668.418411][ T5842] Bluetooth: hci0: command tx timeout [ 668.554964][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 668.600653][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.625396][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.757875][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.774075][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.783457][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.809994][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.404493][T14494] hsr_slave_0: entered promiscuous mode [ 669.411737][T14494] hsr_slave_1: entered promiscuous mode [ 669.805479][ T8752] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 669.952674][T14606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 670.083145][ T8752] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 670.106821][ T8752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.147237][ T8752] usb 1-1: Product: syz [ 670.168107][ T8752] usb 1-1: Manufacturer: syz [ 670.244166][ T8752] usb 1-1: SerialNumber: syz [ 670.497338][ T5842] Bluetooth: hci0: command tx timeout [ 670.862601][T14629] binder: BINDER_SET_CONTEXT_MGR already set [ 670.868836][T14629] binder: 14628:14629 ioctl 4018620d 200000000040 returned -16 [ 670.878251][T14629] binder: 14628:14629 ioctl 4068aea3 2000000024c0 returned -22 [ 672.316718][T14494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.365123][T14494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 672.399877][T14494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 672.449598][T14494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.882005][ T8752] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 672.911399][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.930666][ T8752] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 672.988261][ T8752] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 673.016388][ T8752] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 673.049879][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.115106][T13495] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.122295][T13495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.145173][ T8752] usb 1-1: USB disconnect, device number 84 [ 673.223546][T13495] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.230747][T13495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.451068][T14684] loop2: detected capacity change from 0 to 7 [ 673.457974][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 673.482653][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.489651][ T7792] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 673.503375][T14684] Dev loop2: unable to read RDB block 7 [ 673.521009][T14684] loop2: unable to read partition table [ 673.551404][T14684] loop2: partition table beyond EOD, truncated [ 673.579960][T14684] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 673.628296][ T9] usb 4-1: config 0 has no interfaces? [ 673.651458][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 673.676077][ T7792] usb 3-1: Using ep0 maxpacket: 16 [ 673.689773][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 673.704864][ T7792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.728134][T14494] veth0_vlan: entered promiscuous mode [ 673.735105][ T9] usb 4-1: Manufacturer: syz [ 673.741116][ T7792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.764481][ T9] usb 4-1: config 0 descriptor?? [ 673.774961][T14494] veth1_vlan: entered promiscuous mode [ 673.782155][ T7792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.808205][T14690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2432'. [ 673.827333][ T7792] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.849254][ T7792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.857663][T14690] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2432'. [ 673.879461][T14690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2432'. [ 673.910031][ T7792] usb 3-1: config 0 descriptor?? [ 673.921206][T14690] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2432'. [ 674.059992][T14494] veth0_macvtap: entered promiscuous mode [ 674.085260][T14494] veth1_macvtap: entered promiscuous mode [ 674.239991][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.265040][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.295912][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.324459][ T7792] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 674.337322][ T7792] microsoft 0003:045E:07DA.0016: unsupported Resolution Multiplier 0 [ 674.350780][ T7792] microsoft 0003:045E:07DA.0016: implement() called with n (152) > 32! (kworker/0:14) [ 674.361135][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.457731][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.487196][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.530298][ T7792] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 674.545422][ T7792] microsoft 0003:045E:07DA.0016: no inputs found [ 674.564229][ T7792] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 674.621341][ T7792] usb 3-1: USB disconnect, device number 98 [ 674.708996][T14702] fido_id[14702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 674.916436][T13495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.943803][T13495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.129867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.170928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.615623][ T7795] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 675.780175][ T7795] usb 1-1: Using ep0 maxpacket: 16 [ 675.803318][ T7795] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 675.813330][ T7795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.909966][ T7795] usb 1-1: Product: syz [ 675.920526][ T7795] usb 1-1: Manufacturer: syz [ 675.925161][ T7795] usb 1-1: SerialNumber: syz [ 675.955475][ T7795] usb 1-1: config 0 descriptor?? [ 676.004290][ T7795] safe_serial 1-1:0.0: safe_serial converter detected [ 676.076652][ T7795] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 676.203214][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.343304][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.429694][ T8752] usb 1-1: USB disconnect, device number 85 [ 676.462099][ T8752] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 676.487956][ T8752] safe_serial 1-1:0.0: device disconnected [ 676.763522][ T8756] usb 4-1: USB disconnect, device number 85 [ 676.823826][T14739] loop2: detected capacity change from 0 to 7 [ 676.830858][T14739] Dev loop2: unable to read RDB block 7 [ 676.836929][T14739] loop2: unable to read partition table [ 676.843377][T14739] loop2: partition table beyond EOD, truncated [ 676.855445][T14739] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 677.887108][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 678.327464][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 679.161577][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2454'. [ 679.398734][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 679.625402][ T8752] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 679.909473][ T8752] usb 5-1: Using ep0 maxpacket: 16 [ 679.922864][ T8752] usb 5-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 679.963155][ T8752] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.995090][ T8752] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 680.081320][ T8752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.275396][ T8752] usb 5-1: config 0 descriptor?? [ 680.357421][ T8752] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 680.520869][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2458'. [ 680.902961][T14827] loop2: detected capacity change from 0 to 7 [ 680.911404][T14828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.934515][T14827] Dev loop2: unable to read RDB block 7 [ 680.941536][T14828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.956678][T14827] loop2: unable to read partition table [ 680.971913][T14827] loop2: partition table beyond EOD, truncated [ 680.995483][T14827] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 681.428128][T14838] netlink: 'syz.2.2463': attribute type 1 has an invalid length. [ 681.611875][T14841] bond12: (slave geneve2): making interface the new active one [ 681.623591][T14841] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 681.639166][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.689499][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.734668][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.753807][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 681.845436][ T7790] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 682.105561][ T7790] usb 2-1: Using ep0 maxpacket: 32 [ 682.118162][ T7790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.131210][ T7790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.162052][ T7790] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 682.257537][ T7790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.281450][ T8752] usb 5-1: USB disconnect, device number 91 [ 682.350759][ T7790] usb 2-1: config 0 descriptor?? [ 682.573194][T14860] tipc: Started in network mode [ 682.604402][T14860] tipc: Node identity 00000000000000000000ffffe000002e, cluster identity 4711 [ 682.628813][T14860] tipc: Enabling of bearer rejected, failed to enable media [ 682.819328][ T7790] usbhid 2-1:0.0: can't add hid device: -71 [ 682.825832][ T7790] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 682.891449][ T7790] usb 2-1: USB disconnect, device number 41 [ 683.296111][ T8752] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 683.476486][ T8752] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.493694][ T8752] usb 1-1: config 0 has no interface number 0 [ 683.518001][ T8752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 683.555402][ T8752] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 683.615546][ T8752] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.666724][ T8752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.715946][ T8752] usb 1-1: config 0 descriptor?? [ 683.746440][T14869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.783091][ T8752] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 683.868701][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 683.966965][T14882] netlink: 'syz.4.2467': attribute type 10 has an invalid length. [ 683.983679][ T8752] usb 1-1: USB disconnect, device number 86 [ 683.989759][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 684.000836][T14887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 684.123388][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2467'. [ 684.157609][ T30] audit: type=1326 audit(1760102376.383:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaf38eec9 code=0x7ffc0000 [ 684.293683][ T30] audit: type=1326 audit(1760102376.423:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.4.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaf38eec9 code=0x7ffc0000 [ 684.434697][T14896] bond1: option lacp_rate: invalid value (108) [ 684.525435][ T8752] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 684.564707][T14896] bond1 (unregistering): Released all slaves [ 684.675430][ T8752] usb 3-1: Using ep0 maxpacket: 8 [ 684.693190][ T8752] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.705471][ T8752] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.756300][ T8752] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.784195][ T8752] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.820464][ T8752] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.835429][ T8752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.074114][T14894] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 685.082825][ T8752] usb 3-1: GET_CAPABILITIES returned 0 [ 685.102219][ T8752] usbtmc 3-1:16.0: can't read capabilities [ 685.501380][T14909] sit1: entered allmulticast mode [ 685.780529][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.788713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.829847][ T8750] usb 3-1: USB disconnect, device number 99 [ 686.205589][ T8750] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 686.507342][ T8750] usb 3-1: Using ep0 maxpacket: 32 [ 686.522222][ T8750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.541160][ T8750] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 686.621706][ T8750] usb 3-1: config 1 has no interface number 1 [ 686.652566][ T8750] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.675458][ T8750] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.689856][ T8750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.707494][ T8750] usb 3-1: Product: syz [ 686.716933][ T8750] usb 3-1: Manufacturer: syz [ 686.783088][ T8750] usb 3-1: SerialNumber: syz [ 686.995185][T14927] binder: 14925:14927 ioctl c0306201 2000000001c0 returned -14 [ 687.016263][T14927] binder: 14925:14927 ioctl c0306201 200000000540 returned -14 [ 687.038815][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.048067][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.097619][T14924] syzkaller0: entered promiscuous mode [ 687.104948][T14924] syzkaller0: entered allmulticast mode [ 687.235222][T14924] team_slave_0: entered allmulticast mode [ 687.275597][ T8752] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 687.290613][T14930] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2484'. [ 687.405448][ T8752] usb 4-1: device descriptor read/64, error -71 [ 687.657609][ T8752] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 687.825766][ T8752] usb 4-1: device descriptor read/64, error -71 [ 687.950243][ T8752] usb usb4-port1: attempt power cycle [ 688.300442][ T8752] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 688.435053][T14947] netlink: 'syz.0.2488': attribute type 10 has an invalid length. [ 688.446300][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'. [ 688.476298][ T8752] usb 4-1: device descriptor read/8, error -71 [ 688.518356][ T30] audit: type=1326 audit(1760102380.743:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.0.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 688.541943][ T30] audit: type=1326 audit(1760102380.773:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14934 comm="syz.0.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 688.775600][ T8752] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 688.796117][ T8752] usb 4-1: device descriptor read/8, error -71 [ 688.933306][ T8752] usb usb4-port1: unable to enumerate USB device [ 688.942947][ T8750] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 688.986723][ T8750] usb 3-1: 2:1 : format type 6 is not supported yet [ 689.024416][ T8750] usb 3-1: USB disconnect, device number 100 [ 690.485517][ T7792] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 690.635394][ T7792] usb 4-1: Using ep0 maxpacket: 8 [ 690.642383][ T7792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.652703][ T7792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.662710][ T7795] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 690.672283][ T7792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.684325][ T7792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.035239][ T7792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.079050][ T7792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.108626][ T7795] usb 3-1: Using ep0 maxpacket: 8 [ 691.118499][ T7795] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 691.141887][ T7795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.185532][ T7795] usb 3-1: Product: syz [ 691.189727][ T7795] usb 3-1: Manufacturer: syz [ 691.224134][ T7795] usb 3-1: SerialNumber: syz [ 691.237780][ T7795] usb 3-1: config 0 descriptor?? [ 691.383352][ T7792] usb 4-1: GET_CAPABILITIES returned 0 [ 691.389083][ T7792] usbtmc 4-1:16.0: can't read capabilities [ 691.458796][ T7795] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 691.593746][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 691.657579][ T7792] usb 4-1: USB disconnect, device number 90 [ 692.035586][ T8752] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 692.209740][ T8752] usb 2-1: Using ep0 maxpacket: 32 [ 692.230190][ T8752] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 692.257399][ T8752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.264648][T14995] loop2: detected capacity change from 0 to 7 [ 692.275941][ T5845] Dev loop2: unable to read RDB block 7 [ 692.284590][ T5845] loop2: unable to read partition table [ 692.289261][ T8752] usb 2-1: config 0 descriptor?? [ 692.291451][ T5845] loop2: partition table beyond EOD, truncated [ 692.314423][ T7795] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 692.333869][T14995] Dev loop2: unable to read RDB block 7 [ 692.345522][T14995] loop2: unable to read partition table [ 692.352911][ T7795] usb 3-1: USB disconnect, device number 101 [ 692.368957][T14995] loop2: partition table beyond EOD, truncated [ 692.396775][T14995] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 692.729631][ T8752] viewsonic 0003:2133:0018.0017: item fetching failed at offset 0/4 [ 692.780830][ T8752] viewsonic 0003:2133:0018.0017: probe with driver viewsonic failed with error -22 [ 692.929895][ T7792] usb 2-1: USB disconnect, device number 42 [ 693.078972][T15012] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 693.345666][T15025] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 693.353667][T15025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2507'. [ 693.435402][ T30] audit: type=1326 audit(1760102385.603:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 693.538190][ T30] audit: type=1326 audit(1760102385.603:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15004 comm="syz.0.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 694.155750][ T7792] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 694.165434][ T8752] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 694.305403][ T7792] usb 4-1: Using ep0 maxpacket: 8 [ 694.315666][ T7792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.327506][ T7792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.353696][ T8752] usb 3-1: Using ep0 maxpacket: 8 [ 694.357965][ T7792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.369383][ T7792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.376016][ T8752] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.384609][ T7792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.401765][ T7792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.425367][ T8752] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.462370][ T8752] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.475910][ T8752] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.502928][ T8752] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.512902][ T8752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.585925][ T7790] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 694.677423][ T7792] usb 4-1: GET_CAPABILITIES returned 0 [ 694.682956][ T7792] usbtmc 4-1:16.0: can't read capabilities [ 694.709568][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2512'. [ 694.772789][ T7790] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 694.835495][ T8752] usb 3-1: GET_CAPABILITIES returned 0 [ 694.842890][ T8752] usbtmc 3-1:16.0: can't read capabilities [ 694.902489][ T7790] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 694.915462][ T7790] usb 1-1: Product: syz [ 694.919653][ T7790] usb 1-1: SerialNumber: syz [ 694.946031][ T7790] usb 1-1: config 0 descriptor?? [ 694.985406][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 695.196632][ T7790] hso 1-1:0.0: Failed to find BULK IN ep [ 695.247766][T15042] binder: 15029:15042 ioctl c0306201 200000000080 returned -14 [ 695.286434][ T8752] usb 4-1: USB disconnect, device number 91 [ 695.415452][ T7792] usb 1-1: USB disconnect, device number 87 [ 696.238575][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 696.885552][ T8750] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 697.035403][ T8750] usb 4-1: Using ep0 maxpacket: 8 [ 697.110365][ T8750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.145287][ T8750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 697.216553][ T8750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 697.315634][ T8750] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.381052][ T8750] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.421663][ T8750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.631073][ T8752] usb 3-1: USB disconnect, device number 102 [ 697.691420][ T8750] usb 4-1: GET_CAPABILITIES returned 0 [ 697.722219][ T8750] usbtmc 4-1:16.0: can't read capabilities [ 697.795677][T15082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2527'. [ 697.814936][T15082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2527'. [ 697.847315][T15082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2527'. [ 697.863306][T15082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2527'. [ 698.043626][T15090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2531'. [ 698.377279][T15102] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.2535'. [ 698.386944][T15102] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.2535'. [ 698.412459][ T8750] usb 4-1: USB disconnect, device number 92 [ 698.456756][ T8752] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 698.474429][ T7792] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 698.661323][ T8752] usb 5-1: Using ep0 maxpacket: 32 [ 698.671072][ T8752] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.671518][ T7792] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 698.685383][ T8752] usb 5-1: config 0 has no interface number 0 [ 698.691119][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 698.694534][ T8752] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 698.910886][ T8752] usb 5-1: config 0 interface 1 has no altsetting 0 [ 698.920169][ T8752] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 698.929541][ T8752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.937914][ T8752] usb 5-1: Product: syz [ 698.942397][ T8752] usb 5-1: Manufacturer: syz [ 698.947108][ T8752] usb 5-1: SerialNumber: syz [ 698.974123][ T8752] usb 5-1: config 0 descriptor?? [ 698.974568][ T7792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.990563][ T7792] usb 3-1: Product: syz [ 698.995100][ T7792] usb 3-1: Manufacturer: syz [ 699.000565][ T7792] usb 3-1: SerialNumber: syz [ 699.025086][ T7792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 699.031989][ T7792] r8152-cfgselector 3-1: config 0 descriptor?? [ 699.214499][ T8752] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 699.230351][ T8752] cx231xx 5-1:0.1: Failed to read PCB config [ 699.240061][ T8752] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 699.264204][ T8752] usb 5-1: USB disconnect, device number 92 [ 699.575567][ T7792] r8152-cfgselector 3-1: USB disconnect, device number 103 [ 699.715535][ T8750] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 699.765423][ T8752] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 699.849626][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2541'. [ 699.859661][T15121] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2541'. [ 699.868868][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2541'. [ 699.879288][T15121] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2541'. [ 699.891405][ T8750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 699.902831][ T8750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 699.920779][ T8750] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 699.936445][ T8752] usb 5-1: Using ep0 maxpacket: 32 [ 699.948200][ T8752] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.960542][ T8750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.975381][ T8752] usb 5-1: config 0 has no interface number 0 [ 699.985258][ T8750] usb 4-1: Product: syz [ 699.991790][ T8752] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 700.006441][ T8750] usb 4-1: Manufacturer: syz [ 700.011063][ T8750] usb 4-1: SerialNumber: syz [ 700.018942][ T8752] usb 5-1: config 0 interface 1 has no altsetting 0 [ 700.029862][ T8752] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 700.040178][ T8750] usb 4-1: config 0 descriptor?? [ 700.045589][ T8752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.053794][ T8752] usb 5-1: Product: syz [ 700.063689][ T8752] usb 5-1: Manufacturer: syz [ 700.077894][ T8752] usb 5-1: SerialNumber: syz [ 700.086874][ T8752] usb 5-1: config 0 descriptor?? [ 700.181128][T15136] FAULT_INJECTION: forcing a failure. [ 700.181128][T15136] name failslab, interval 1, probability 0, space 0, times 0 [ 700.197101][T15136] CPU: 0 UID: 0 PID: 15136 Comm: syz.2.2547 Not tainted syzkaller #0 PREEMPT(full) [ 700.197128][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 700.197142][T15136] Call Trace: [ 700.197150][T15136] [ 700.197160][T15136] dump_stack_lvl+0x189/0x250 [ 700.197188][T15136] ? __pfx____ratelimit+0x10/0x10 [ 700.197212][T15136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.197233][T15136] ? __pfx__printk+0x10/0x10 [ 700.197259][T15136] ? __pfx___might_resched+0x10/0x10 [ 700.197286][T15136] should_fail_ex+0x414/0x560 [ 700.197315][T15136] should_failslab+0xa8/0x100 [ 700.197337][T15136] __kmalloc_noprof+0xcb/0x7f0 [ 700.197364][T15136] ? do_sys_poll+0x2ac/0x1070 [ 700.197399][T15136] do_sys_poll+0x2ac/0x1070 [ 700.197442][T15136] ? __pfx_do_sys_poll+0x10/0x10 [ 700.197540][T15136] ? rcu_read_lock_any_held+0xb3/0x120 [ 700.197572][T15136] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 700.197599][T15136] ? vfs_write+0x956/0xb30 [ 700.197652][T15136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.197677][T15136] ? set_user_sigmask+0xc7/0x1b0 [ 700.197698][T15136] ? __pfx_set_user_sigmask+0x10/0x10 [ 700.197721][T15136] ? __fget_files+0x3a0/0x420 [ 700.197747][T15136] __se_sys_ppoll+0x1ff/0x260 [ 700.197778][T15136] ? __pfx___se_sys_ppoll+0x10/0x10 [ 700.197806][T15136] ? __pfx_ksys_write+0x10/0x10 [ 700.197836][T15136] ? do_syscall_64+0xbe/0xfa0 [ 700.197859][T15136] ? __x64_sys_ppoll+0x20/0xc0 [ 700.197889][T15136] do_syscall_64+0xfa/0xfa0 [ 700.197911][T15136] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.197935][T15136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.197955][T15136] ? clear_bhb_loop+0x60/0xb0 [ 700.197980][T15136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.197999][T15136] RIP: 0033:0x7f879218eec9 [ 700.198018][T15136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.198036][T15136] RSP: 002b:00007f879301a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 700.198058][T15136] RAX: ffffffffffffffda RBX: 00007f87923e5fa0 RCX: 00007f879218eec9 [ 700.198073][T15136] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 700.198090][T15136] RBP: 00007f879301a090 R08: 0000000000000000 R09: 0000000000000000 [ 700.198101][T15136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.198112][T15136] R13: 00007f87923e6038 R14: 00007f87923e5fa0 R15: 00007f879250fa28 [ 700.198144][T15136] [ 700.467722][ T8752] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 700.470459][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.478484][ T8752] cx231xx 5-1:0.1: bad config in buspower!!!! [ 700.478484][ T8752] config_info=40 [ 700.485772][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.520118][T15138] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2548'. [ 700.548769][ T8752] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 700.684581][ T8752] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 700.737842][ T8752] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 700.751680][ T8750] usb 4-1: USB disconnect, device number 93 [ 700.801549][ T8752] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 700.835229][T15148] program syz.0.2551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.915552][ T8752] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 700.994408][ T8752] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 701.002980][ T8752] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71 [ 701.136236][ T8756] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 701.309678][ T8756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 701.323771][ T8752] i2c i2c-2: Added multiplexed i2c bus 4 [ 701.359721][ T8756] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 701.496177][ T8752] i2c i2c-2: Added multiplexed i2c bus 5 [ 701.503822][ T8756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.751652][ T8752] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 701.767946][ T8756] usb 1-1: Product: syz [ 701.787450][ T8756] usb 1-1: Manufacturer: syz [ 701.795101][ T8752] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 701.835457][ T8756] usb 1-1: SerialNumber: syz [ 701.862738][ T8756] usb 1-1: config 0 descriptor?? [ 701.875445][ T7795] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 701.890984][ T8752] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 701.939873][ T8752] usb 5-1: USB disconnect, device number 93 [ 702.480949][ T7795] usb 4-1: config 0 has no interfaces? [ 702.644760][ T7795] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 702.831899][ T7795] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 702.883153][ T7795] usb 4-1: Manufacturer: syz [ 702.891017][T15161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2554'. [ 702.921304][ T7795] usb 4-1: config 0 descriptor?? [ 702.955523][ T8752] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 703.894662][T15170] binder: BINDER_SET_CONTEXT_MGR already set [ 703.908078][T15170] binder: 15169:15170 ioctl 4018620d 2000000000c0 returned -16 [ 704.300149][T15180] FAULT_INJECTION: forcing a failure. [ 704.300149][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.344308][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.1.2559 Not tainted syzkaller #0 PREEMPT(full) [ 704.344329][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.344336][T15180] Call Trace: [ 704.344342][T15180] [ 704.344347][T15180] dump_stack_lvl+0x189/0x250 [ 704.344363][T15180] ? __pfx____ratelimit+0x10/0x10 [ 704.344377][T15180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.344388][T15180] ? __pfx__printk+0x10/0x10 [ 704.344399][T15180] ? __might_fault+0xb0/0x130 [ 704.344421][T15180] should_fail_ex+0x414/0x560 [ 704.344438][T15180] _copy_from_user+0x2d/0xb0 [ 704.344449][T15180] do_sys_poll+0x242/0x1070 [ 704.344474][T15180] ? __pfx_do_sys_poll+0x10/0x10 [ 704.344529][T15180] ? rcu_read_lock_any_held+0xb3/0x120 [ 704.344542][T15180] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 704.344557][T15180] ? vfs_write+0x956/0xb30 [ 704.344584][T15180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.344598][T15180] ? set_user_sigmask+0xc7/0x1b0 [ 704.344609][T15180] ? __pfx_set_user_sigmask+0x10/0x10 [ 704.344621][T15180] ? __fget_files+0x3a0/0x420 [ 704.344635][T15180] __se_sys_ppoll+0x1ff/0x260 [ 704.344651][T15180] ? __pfx___se_sys_ppoll+0x10/0x10 [ 704.344667][T15180] ? __pfx_ksys_write+0x10/0x10 [ 704.344683][T15180] ? do_syscall_64+0xbe/0xfa0 [ 704.344695][T15180] ? __x64_sys_ppoll+0x20/0xc0 [ 704.344711][T15180] do_syscall_64+0xfa/0xfa0 [ 704.344723][T15180] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.344735][T15180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.344745][T15180] ? clear_bhb_loop+0x60/0xb0 [ 704.344758][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.344768][T15180] RIP: 0033:0x7fd0b378eec9 [ 704.344779][T15180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.344788][T15180] RSP: 002b:00007fd0b4607038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 704.344800][T15180] RAX: ffffffffffffffda RBX: 00007fd0b39e5fa0 RCX: 00007fd0b378eec9 [ 704.344808][T15180] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 704.344816][T15180] RBP: 00007fd0b4607090 R08: 0000000000000000 R09: 0000000000000000 [ 704.344822][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.344828][T15180] R13: 00007fd0b39e6038 R14: 00007fd0b39e5fa0 R15: 00007fd0b3b0fa28 [ 704.344845][T15180] [ 704.598660][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.665638][ T7795] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 704.744783][ T7790] usb 4-1: USB disconnect, device number 94 [ 704.817174][ T7795] usb 3-1: device descriptor read/64, error -71 [ 704.969981][ T9] usb 1-1: USB disconnect, device number 88 [ 705.075745][ T7795] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 705.430313][ T7795] usb 3-1: device descriptor read/64, error -71 [ 705.645760][ T7795] usb usb3-port1: attempt power cycle [ 705.675532][ T7790] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 705.834839][T15199] netlink: 'syz.0.2567': attribute type 21 has an invalid length. [ 705.843674][T15199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2567'. [ 705.853501][T15199] netlink: 'syz.0.2567': attribute type 6 has an invalid length. [ 705.861828][T15199] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2567'. [ 705.898415][ T7790] usb 5-1: config 9 has an invalid interface number: 1 but max is 0 [ 705.907339][ T7790] usb 5-1: config 9 has no interface number 0 [ 705.913475][ T7790] usb 5-1: config 9 interface 1 has no altsetting 0 [ 705.926834][ T7790] usb 5-1: string descriptor 0 read error: -22 [ 705.943504][ T7790] usb 5-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 705.963703][ T7790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.982720][T15205] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 706.025923][ T7790] cx231xx 5-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 706.036398][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2567'. [ 706.055704][ T7790] cx231xx 5-1:9.1: Not found matching IAD interface [ 706.067768][ T7795] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 706.106397][ T7795] usb 3-1: device descriptor read/8, error -71 [ 706.134208][T15212] FAULT_INJECTION: forcing a failure. [ 706.134208][T15212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.165470][T15212] CPU: 1 UID: 0 PID: 15212 Comm: syz.1.2571 Not tainted syzkaller #0 PREEMPT(full) [ 706.165506][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.165519][T15212] Call Trace: [ 706.165528][T15212] [ 706.165537][T15212] dump_stack_lvl+0x189/0x250 [ 706.165563][T15212] ? __pfx____ratelimit+0x10/0x10 [ 706.165588][T15212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.165610][T15212] ? __pfx__printk+0x10/0x10 [ 706.165628][T15212] ? __might_fault+0xb0/0x130 [ 706.165667][T15212] should_fail_ex+0x414/0x560 [ 706.165696][T15212] _copy_from_user+0x2d/0xb0 [ 706.165717][T15212] ___sys_sendmsg+0x158/0x2a0 [ 706.165745][T15212] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.165803][T15212] ? __fget_files+0x2a/0x420 [ 706.165820][T15212] ? __fget_files+0x3a0/0x420 [ 706.165848][T15212] __sys_sendmmsg+0x227/0x430 [ 706.165878][T15212] ? __pfx___sys_sendmmsg+0x10/0x10 [ 706.165912][T15212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 706.165956][T15212] ? ksys_write+0x22a/0x250 [ 706.165986][T15212] ? __pfx_ksys_write+0x10/0x10 [ 706.166018][T15212] __x64_sys_sendmmsg+0xa0/0xc0 [ 706.166045][T15212] do_syscall_64+0xfa/0xfa0 [ 706.166068][T15212] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.166091][T15212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.166111][T15212] ? clear_bhb_loop+0x60/0xb0 [ 706.166135][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.166153][T15212] RIP: 0033:0x7fd0b378eec9 [ 706.166168][T15212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.166184][T15212] RSP: 002b:00007fd0b4607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 706.166206][T15212] RAX: ffffffffffffffda RBX: 00007fd0b39e5fa0 RCX: 00007fd0b378eec9 [ 706.166222][T15212] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000004 [ 706.166236][T15212] RBP: 00007fd0b4607090 R08: 0000000000000000 R09: 0000000000000000 [ 706.166249][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.166261][T15212] R13: 00007fd0b39e6038 R14: 00007fd0b39e5fa0 R15: 00007fd0b3b0fa28 [ 706.166292][T15212] [ 706.394945][T15192] fuse: Bad value for 'user_id' [ 706.400280][T15192] fuse: Bad value for 'user_id' [ 706.407404][ T7795] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 706.509453][T15225] netlink: 'syz.4.2565': attribute type 5 has an invalid length. [ 706.519503][ T7795] usb 3-1: device descriptor read/8, error -71 [ 706.867050][ T7795] usb usb3-port1: unable to enumerate USB device [ 707.012442][T15212] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.019943][T15212] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.586212][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.604781][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.898423][T15192] tipc: Enabling of bearer rejected, failed to enable media [ 707.928887][T15217] usb 5-1: USB disconnect, device number 94 [ 707.936491][T15216] vlan2: entered promiscuous mode [ 708.038382][T15208] xfrm1: entered allmulticast mode [ 708.055990][ T205] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.145270][ T205] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.188547][ T205] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.219323][ T205] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.223842][T15281] loop2: detected capacity change from 0 to 7 [ 708.240807][T15281] Dev loop2: unable to read RDB block 7 [ 708.247815][T15281] loop2: AHDI p1 p2 p3 [ 708.252158][T15281] loop2: partition table partially beyond EOD, truncated [ 708.279035][T15281] loop2: p1 start 1601398130 is beyond EOD, truncated [ 708.297936][T15281] loop2: p2 start 1702059890 is beyond EOD, truncated [ 708.534409][ T8754] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 708.597308][T15298] FAULT_INJECTION: forcing a failure. [ 708.597308][T15298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.619800][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.2.2583 Not tainted syzkaller #0 PREEMPT(full) [ 708.619828][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 708.619841][T15298] Call Trace: [ 708.619850][T15298] [ 708.619859][T15298] dump_stack_lvl+0x189/0x250 [ 708.619884][T15298] ? __pfx____ratelimit+0x10/0x10 [ 708.619908][T15298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.619930][T15298] ? __pfx__printk+0x10/0x10 [ 708.619963][T15298] should_fail_ex+0x414/0x560 [ 708.619992][T15298] _copy_to_user+0x31/0xb0 [ 708.620014][T15298] simple_read_from_buffer+0xe1/0x170 [ 708.620049][T15298] proc_fail_nth_read+0x1b3/0x220 [ 708.620077][T15298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.620105][T15298] ? rw_verify_area+0x2a6/0x4d0 [ 708.620130][T15298] ? __lock_acquire+0xab9/0xd20 [ 708.620147][T15298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.620174][T15298] vfs_read+0x1fd/0xa30 [ 708.620205][T15298] ? fdget_pos+0x247/0x320 [ 708.620228][T15298] ? __pfx___mutex_lock+0x10/0x10 [ 708.620255][T15298] ? __pfx_vfs_read+0x10/0x10 [ 708.620283][T15298] ? __fget_files+0x2a/0x420 [ 708.620306][T15298] ? __fget_files+0x3a0/0x420 [ 708.620323][T15298] ? __fget_files+0x2a/0x420 [ 708.620351][T15298] ksys_read+0x145/0x250 [ 708.620380][T15298] ? __pfx_ksys_read+0x10/0x10 [ 708.620411][T15298] ? do_syscall_64+0xbe/0xfa0 [ 708.620439][T15298] do_syscall_64+0xfa/0xfa0 [ 708.620462][T15298] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.620485][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.620506][T15298] ? clear_bhb_loop+0x60/0xb0 [ 708.620531][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.620550][T15298] RIP: 0033:0x7f879218d8dc [ 708.620569][T15298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 708.620587][T15298] RSP: 002b:00007f879301a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.620608][T15298] RAX: ffffffffffffffda RBX: 00007f87923e5fa0 RCX: 00007f879218d8dc [ 708.620624][T15298] RDX: 000000000000000f RSI: 00007f879301a0a0 RDI: 0000000000000005 [ 708.620637][T15298] RBP: 00007f879301a090 R08: 0000000000000000 R09: 0000000000000000 [ 708.620651][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.620663][T15298] R13: 00007f87923e6038 R14: 00007f87923e5fa0 R15: 00007f879250fa28 [ 708.620697][T15298] [ 708.915974][ T8750] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 708.935445][ T8754] usb 4-1: Using ep0 maxpacket: 32 [ 708.942646][ T8754] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 708.954544][ T8754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 708.975596][ T8754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 708.998773][T15304] IPVS: set_ctl: invalid protocol: 2 172.20.20.50:20003 [ 709.005608][ T8754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 709.128899][ T5842] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 709.134592][ T8754] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 709.151571][ T8750] usb 2-1: Using ep0 maxpacket: 8 [ 709.161497][ T8754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.170162][ T8754] usb 4-1: Product: syz [ 709.174689][ T8754] usb 4-1: Manufacturer: syz [ 709.179445][ T8754] usb 4-1: SerialNumber: syz [ 709.184213][ T8750] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.194038][ T8750] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.205613][ T8750] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.221408][ T8754] usb 4-1: config 0 descriptor?? [ 709.226631][ T8750] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.240387][ T8750] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 709.252228][ T8750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.487624][ T8750] usb 2-1: GET_CAPABILITIES returned 0 [ 709.564860][ T8750] usbtmc 2-1:16.0: can't read capabilities [ 709.645704][T15157] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 709.678850][T15265] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 709.690890][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 709.702903][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 709.715885][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.728374][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.775443][T15157] usb 5-1: device descriptor read/64, error -71 [ 709.858408][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.867639][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.875579][T15265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.886251][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.905979][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.912152][T15265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 709.919419][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.926679][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.936888][T15265] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 709.946389][T15265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.954395][T15265] usb 3-1: Product: syz [ 709.959390][T15265] usb 3-1: Manufacturer: syz [ 709.964158][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.972859][T15265] usb 3-1: SerialNumber: syz [ 709.977660][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 709.986855][T15265] usb 3-1: config 0 descriptor?? [ 709.994492][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.003759][T15265] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 710.012691][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.019353][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.025849][T15157] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 710.036270][T15265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 710.046313][T15265] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 710.054956][T15265] usb 3-1: media controller created [ 710.060419][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.067237][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.075430][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.091110][T15265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 710.099739][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.106204][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.112625][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.120070][ T8754] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 710.134150][ T8754] input input32: Timeout waiting for response from device. [ 710.147151][ T8754] usb 4-1: USB disconnect, device number 95 [ 710.165452][T15157] usb 5-1: device descriptor read/64, error -71 [ 710.189759][T15265] DVB: Unable to find symbol tda10046_attach() [ 710.197418][T15265] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 710.207454][T15265] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 710.265421][ T7786] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 710.275829][T15157] usb usb5-port1: attempt power cycle [ 710.425701][ T7786] usb 1-1: Using ep0 maxpacket: 16 [ 710.442992][ T7786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.454383][ T7786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.464827][ T7786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 710.481249][ T7786] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 710.490847][ T7786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.502409][ T7786] usb 1-1: config 0 descriptor?? [ 710.615520][T15157] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 710.621254][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.631867][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.636465][T15157] usb 5-1: device descriptor read/8, error -71 [ 710.646601][T15265] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 710.673333][T15265] usb 3-1: USB disconnect, device number 108 [ 710.825518][ T8754] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 710.895484][T15157] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 710.916411][T15157] usb 5-1: device descriptor read/8, error -71 [ 710.975432][ T8754] usb 4-1: Using ep0 maxpacket: 32 [ 710.982393][ T8754] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 710.990654][ T8754] usb 4-1: config 0 has no interface number 0 [ 710.996853][ T8754] usb 4-1: config 0 interface 12 has no altsetting 0 [ 711.005747][ T8754] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 711.014825][ T8754] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 711.023085][ T8754] usb 4-1: Product: syz [ 711.027706][ T8754] usb 4-1: Manufacturer: syz [ 711.032324][ T8754] usb 4-1: SerialNumber: syz [ 711.037088][T15157] usb usb5-port1: unable to enumerate USB device [ 711.047115][ T8754] usb 4-1: config 0 descriptor?? [ 711.486113][T15226] usb 2-1: USB disconnect, device number 44 [ 711.585821][T15327] bond13: option lacp_rate: invalid value (108) [ 711.596076][T15327] bond13 (unregistering): Released all slaves [ 711.680407][ T7786] usbhid 1-1:0.0: can't add hid device: -71 [ 711.690708][ T7786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 711.746780][ T7786] usb 1-1: USB disconnect, device number 89 [ 711.923076][T15323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.205425][ T7786] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 712.357341][ T7786] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.370682][ T7786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 712.411005][ T7786] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 712.515027][ T7786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.553957][ T8754] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 712.618183][ T8754] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 712.635290][ T8754] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 712.644802][ T7786] usb 1-1: config 0 descriptor?? [ 712.685058][ T8754] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 712.705281][T15351] lo: left promiscuous mode [ 712.728971][ T8754] usb 4-1: USB disconnect, device number 96 [ 712.764684][T15351] tunl0: left promiscuous mode [ 712.776509][T15351] gre0: left promiscuous mode [ 712.809703][T15351] gretap0: left promiscuous mode [ 712.934177][T15351] erspan0: left promiscuous mode [ 712.964428][T15351] ip_vti0: left promiscuous mode [ 713.024596][T15351] ip6_vti0: left promiscuous mode [ 713.034262][T15351] sit0: left promiscuous mode [ 713.156396][T15351] ip6tnl0: left promiscuous mode [ 713.493780][T15351] ip6gre0: left promiscuous mode [ 713.645663][T15351] syz_tun: left promiscuous mode [ 713.666910][T15351] ip6gretap0: left promiscuous mode [ 713.697879][T15351] bridge0: port 3(dummy0) entered disabled state [ 713.727424][T15351] bridge0: left promiscuous mode [ 713.744367][T15351] vcan0: left promiscuous mode [ 713.802460][T15351] nlmon0: left promiscuous mode [ 713.819346][T15351] caif0: left promiscuous mode [ 713.824714][T15351] macvlan0: left promiscuous mode [ 713.831734][T15351] gretap1: left promiscuous mode [ 713.839514][T15351] team1: left promiscuous mode [ 713.848560][T15349] tipc: Started in network mode [ 713.854517][T15349] tipc: Node identity ca49bf344024, cluster identity 4711 [ 713.880661][T15349] tipc: Enabled bearer , priority 0 [ 713.892888][T15354] syzkaller0: entered promiscuous mode [ 713.899307][T15354] syzkaller0: entered allmulticast mode [ 713.979597][T15354] tipc: Resetting bearer [ 714.083476][T15354] tipc: Disabling bearer [ 714.143359][T15376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2606'. [ 714.585916][T15386] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2609'. [ 714.787477][ T7786] usbhid 1-1:0.0: can't add hid device: -71 [ 714.799940][ T7786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 714.952934][ T7786] usb 1-1: USB disconnect, device number 90 [ 715.659455][T15217] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 715.837094][T15217] usb 3-1: Invalid ep0 maxpacket: 64 [ 715.873046][ T7786] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 716.028681][T15217] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 716.055462][ T7786] usb 1-1: Using ep0 maxpacket: 16 [ 716.063762][ T7786] usb 1-1: config 0 has no interfaces? [ 716.106789][ T7786] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.116617][ T7786] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.135425][ T7786] usb 1-1: Manufacturer: syz [ 716.158798][ T7786] usb 1-1: config 0 descriptor?? [ 716.209858][T15217] usb 3-1: Invalid ep0 maxpacket: 64 [ 716.251656][T15217] usb usb3-port1: attempt power cycle [ 716.666199][T15217] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 716.686201][T15217] usb 3-1: Invalid ep0 maxpacket: 64 [ 716.817618][T15217] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 716.982831][T15427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.035980][T15217] usb 3-1: Invalid ep0 maxpacket: 64 [ 717.095566][T15217] usb usb3-port1: unable to enumerate USB device [ 717.380675][T15429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2621'. [ 717.866781][T15270] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 717.972954][T15268] usb 1-1: USB disconnect, device number 91 [ 718.028020][T15270] usb 5-1: config 0 has no interfaces? [ 718.034958][T15270] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 718.044673][T15270] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 718.055075][T15270] usb 5-1: Manufacturer: syz [ 718.075565][T15217] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 718.085992][T15270] usb 5-1: config 0 descriptor?? [ 718.247437][T15217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.263030][T15217] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 718.273397][T15217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.292166][T15217] usb 4-1: config 0 descriptor?? [ 718.295872][T15268] usb 5-1: USB disconnect, device number 99 [ 718.485591][T15269] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 718.506783][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.520931][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.635384][T15269] usb 3-1: Using ep0 maxpacket: 16 [ 718.646605][T15269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.663481][T15269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.682078][T15269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.713189][T15269] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 718.715652][ T7786] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 718.755777][T15269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.764654][T15217] usbhid 4-1:0.0: can't add hid device: -71 [ 718.774440][T15217] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 718.782950][T15269] usb 3-1: config 0 descriptor?? [ 718.854492][T15217] usb 4-1: USB disconnect, device number 97 [ 719.020327][ T7786] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 719.028788][ T7786] usb 2-1: config 0 has no interface number 0 [ 719.070200][ T7786] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 719.108859][ T7786] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 719.143686][ T7786] usb 2-1: config 0 interface 113 has no altsetting 0 [ 719.188554][ T7786] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 719.197790][ T7786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.215487][ T7786] usb 2-1: Product: syz [ 719.219839][ T7786] usb 2-1: Manufacturer: syz [ 719.224452][ T7786] usb 2-1: SerialNumber: syz [ 719.238083][ T7786] usb 2-1: config 0 descriptor?? [ 719.254309][ C0] usb 2-1: NFC: Urb failure (status -71) [ 719.262220][ T7786] usb 2-1: NFC: Unable to get FW version [ 719.286201][ T7786] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 719.304623][T15443] xt_socket: unknown flags 0xe4 [ 719.518028][T15466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2627'. [ 719.661693][T15455] Set syz1 is full, maxelem 65536 reached [ 719.685431][ T7786] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 719.850667][ T7786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 719.881819][ T7786] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 719.925423][ T7786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.958741][ T7786] usb 1-1: Product: syz [ 719.974969][ T7786] usb 1-1: Manufacturer: syz [ 719.984345][ T7786] usb 1-1: SerialNumber: syz [ 720.001124][ T7786] usb 1-1: config 0 descriptor?? [ 720.114958][T15269] usbhid 3-1:0.0: can't add hid device: -71 [ 720.146973][T15269] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 720.202091][T15269] usb 3-1: USB disconnect, device number 113 [ 720.368207][T15480] loop2: detected capacity change from 0 to 7 [ 720.383830][T15480] Dev loop2: unable to read RDB block 7 [ 720.396761][T15480] loop2: unable to read partition table [ 720.406036][T15480] loop2: partition table beyond EOD, truncated [ 720.412505][T15480] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 720.571647][T15485] loop2: detected capacity change from 0 to 7 [ 720.579427][T15485] Dev loop2: unable to read RDB block 7 [ 720.585086][T15485] loop2: AHDI p1 p2 p3 [ 720.590779][T15485] loop2: partition table partially beyond EOD, truncated [ 720.599403][T15485] loop2: p1 start 1601398130 is beyond EOD, truncated [ 720.606856][T15485] loop2: p2 start 1702059890 is beyond EOD, truncated [ 721.863379][T15269] usb 2-1: USB disconnect, device number 45 [ 722.021649][T15510] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2647'. [ 722.082047][T15511] bond13 (unregistering): Released all slaves [ 722.267024][ T7786] usb 1-1: USB disconnect, device number 92 [ 722.377450][T15521] loop2: detected capacity change from 0 to 7 [ 722.415494][T15521] Dev loop2: unable to read RDB block 7 [ 722.431462][T15521] loop2: AHDI p1 p2 p3 [ 722.453659][T15521] loop2: partition table partially beyond EOD, truncated [ 722.471489][T15521] loop2: p1 start 1601398130 is beyond EOD, truncated [ 722.475730][T15268] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 722.485412][T15521] loop2: p2 start 1702059890 is beyond EOD, truncated [ 722.486440][T15527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.624214][T15529] sctp: [Deprecated]: syz.2.2654 (pid 15529) Use of int in max_burst socket option deprecated. [ 722.624214][T15529] Use struct sctp_assoc_value instead [ 722.665408][T15268] usb 5-1: Using ep0 maxpacket: 16 [ 722.724733][T15519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2650'. [ 723.230223][ T5197] Dev loop6: unable to read RDB block 1 [ 723.236116][ T5197] loop6: unable to read partition table [ 723.259997][ T5197] loop6: partition table beyond EOD, truncated [ 723.344154][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2655'. [ 723.366088][T15535] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2655'. [ 723.388536][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2655'. [ 723.408824][T15535] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2655'. [ 723.982681][T15542] kvm: pic: non byte write [ 724.275505][T15269] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 724.384626][T15553] vlan2: entered promiscuous mode [ 724.441564][T15269] usb 2-1: Using ep0 maxpacket: 16 [ 724.464233][T15269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.475786][T15269] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.486169][T15269] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.502471][T15269] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.512295][T15269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.520921][T15269] usb 2-1: Product: syz [ 724.525682][T15269] usb 2-1: Manufacturer: syz [ 724.530385][T15269] usb 2-1: SerialNumber: syz [ 724.704839][T15557] loop2: detected capacity change from 0 to 7 [ 724.774167][T15557] Dev loop2: unable to read RDB block 7 [ 724.836665][T15557] loop2: AHDI p1 p2 p3 [ 724.885401][T15557] loop2: partition table partially beyond EOD, truncated [ 724.893004][T15557] loop2: p1 start 1601398130 is beyond EOD, truncated [ 724.905375][T15557] loop2: p2 start 1702059890 is beyond EOD, truncated [ 725.223359][T15269] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 725.243020][T15269] cdc_ncm 2-1:1.0: bind() failure [ 725.288311][T15269] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 725.316512][T15269] cdc_ncm 2-1:1.1: bind() failure [ 725.331102][T15269] usb 2-1: USB disconnect, device number 46 [ 725.464117][T15268] usb 5-1: unable to get BOS descriptor or descriptor too short [ 725.509618][T15268] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 725.525992][T15268] usb 5-1: can't read configurations, error -71 [ 726.161027][T15578] sctp: [Deprecated]: syz.2.2670 (pid 15578) Use of int in max_burst socket option deprecated. [ 726.161027][T15578] Use struct sctp_assoc_value instead [ 726.183477][T15268] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 726.257731][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'. [ 726.398314][T15268] usb 5-1: Using ep0 maxpacket: 32 [ 726.412923][T15268] usb 5-1: config 8 has an invalid interface number: 183 but max is 0 [ 726.512553][T15268] usb 5-1: config 8 has an invalid interface descriptor of length 5, skipping [ 726.530829][T15268] usb 5-1: config 8 has an invalid descriptor of length 180, skipping remainder of the config [ 726.558692][T15268] usb 5-1: config 8 has no interface number 0 [ 726.558722][ T7786] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 726.568639][T15268] usb 5-1: config 8 interface 183 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 726.646226][T15268] usb 5-1: config 8 interface 183 has no altsetting 0 [ 726.787636][T15268] usb 5-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=69.50 [ 726.796843][T15268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.805226][T15268] usb 5-1: Product: syz [ 726.809804][T15268] usb 5-1: Manufacturer: syz [ 726.814476][T15268] usb 5-1: SerialNumber: syz [ 727.025908][ T7786] usb 2-1: Using ep0 maxpacket: 32 [ 727.036116][ T7786] usb 2-1: no configurations [ 727.062726][ T7786] usb 2-1: can't read configurations, error -22 [ 727.227977][T15569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.315416][ T7786] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 727.505376][ T7786] usb 2-1: Using ep0 maxpacket: 32 [ 727.532191][ T7786] usb 2-1: no configurations [ 727.537318][ T7786] usb 2-1: can't read configurations, error -22 [ 727.592543][ T7786] usb usb2-port1: attempt power cycle [ 727.828157][T15601] loop2: detected capacity change from 0 to 7 [ 727.845253][ T5845] Dev loop2: unable to read RDB block 7 [ 727.851004][ T5845] loop2: AHDI p1 p2 p3 [ 727.904740][ T5845] loop2: partition table partially beyond EOD, truncated [ 727.934126][ T5845] loop2: p1 start 1601398130 is beyond EOD, truncated [ 727.941689][ T5845] loop2: p2 start 1702059890 is beyond EOD, truncated [ 727.953362][T15601] Dev loop2: unable to read RDB block 7 [ 727.959466][T15601] loop2: AHDI p1 p2 p3 [ 727.963988][T15601] loop2: partition table partially beyond EOD, truncated [ 727.978313][T15601] loop2: p1 start 1601398130 is beyond EOD, truncated [ 727.985449][ T7786] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 727.993973][T15601] loop2: p2 start 1702059890 is beyond EOD, truncated [ 728.006137][ T7786] usb 2-1: Using ep0 maxpacket: 32 [ 728.013376][ T7786] usb 2-1: no configurations [ 728.019737][ T7786] usb 2-1: can't read configurations, error -22 [ 728.185530][ T7786] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 728.207022][ T7786] usb 2-1: Using ep0 maxpacket: 32 [ 728.213149][ T7786] usb 2-1: no configurations [ 728.218449][ T7786] usb 2-1: can't read configurations, error -22 [ 728.230650][ T7786] usb usb2-port1: unable to enumerate USB device [ 728.395400][T15269] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 728.555432][T15269] usb 3-1: Using ep0 maxpacket: 32 [ 728.587023][T15269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.673225][T15268] gspca_main: tv8532-2.14.0 probing 0545:808b [ 728.681098][T15269] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 728.708175][T15269] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 728.717817][T15269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.742897][T15269] usb 3-1: Product: syz [ 728.747385][T15269] usb 3-1: Manufacturer: syz [ 728.752565][T15269] usb 3-1: SerialNumber: syz [ 728.769357][T15268] usb 5-1: USB disconnect, device number 101 [ 728.777014][T15269] usb 3-1: config 0 descriptor?? [ 729.001170][T15605] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 729.013906][T15269] usb 3-1: USB disconnect, device number 114 [ 729.255998][T15268] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 729.458483][T15268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.475409][T15268] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 729.511237][T15268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.551456][T15268] usb 5-1: config 0 descriptor?? [ 729.655407][T15217] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 729.805603][T15217] usb 2-1: Using ep0 maxpacket: 16 [ 729.814784][T15217] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 729.825612][T15217] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 729.840037][T15217] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.856056][T15217] usb 2-1: config 1 interface 0 has no altsetting 0 [ 729.871715][T15217] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 729.884670][T15217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.916816][T15217] usb 2-1: Product: syz [ 729.921186][T15217] usb 2-1: Manufacturer: syz [ 729.926762][T15217] usb 2-1: SerialNumber: syz [ 729.935510][T15269] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 729.965465][ T7786] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 729.991427][T15268] hid_parser_main: 150 callbacks suppressed [ 729.991449][T15268] hid-led 0003:1294:1320.0018: unknown main item tag 0x0 [ 730.028255][T15268] hid-led 0003:1294:1320.0018: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 730.087145][T15268] hid-led 0003:1294:1320.0018: Riso Kagaku Webmail Notifier initialized [ 730.105546][T15269] usb 1-1: Using ep0 maxpacket: 32 [ 730.115524][ T7786] usb 3-1: Using ep0 maxpacket: 8 [ 730.125097][ T7786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 730.135002][T15269] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 730.148805][ T7786] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 730.157573][T15269] usb 1-1: can't read configurations, error -22 [ 730.263408][ T7786] usb 3-1: config 8 has an invalid interface number: 158 but max is 0 [ 730.272256][ T7786] usb 3-1: config 8 has no interface number 0 [ 730.279052][ T7786] usb 3-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 730.329436][ T7786] usb 3-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 730.345743][T15269] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 730.355591][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.363647][ T7786] usb 3-1: Product: syz [ 730.405759][ T7786] usb 3-1: Manufacturer: syz [ 730.410543][ T7786] usb 3-1: SerialNumber: syz [ 730.510779][T15632] random: crng reseeded on system resumption [ 730.635456][T15269] usb 1-1: Using ep0 maxpacket: 32 [ 730.653221][T15269] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 730.694313][T15269] usb 1-1: can't read configurations, error -22 [ 730.808177][T15628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.817099][T15628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.850257][T15269] usb usb1-port1: attempt power cycle [ 730.875068][T15218] usb 5-1: USB disconnect, device number 102 [ 730.885167][T15254] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 731.006954][T15254] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 731.123328][T15254] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 731.247924][T15269] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 731.290058][T15269] usb 1-1: Using ep0 maxpacket: 32 [ 731.306475][ T7786] sierra 3-1:8.158: Sierra USB modem converter detected [ 731.310784][T15269] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 731.321989][T15269] usb 1-1: can't read configurations, error -22 [ 731.324905][ T7786] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 731.345599][ T7786] usb 3-1: USB disconnect, device number 115 [ 731.372674][ T7786] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 731.394938][ T7786] sierra 3-1:8.158: device disconnected [ 731.457326][T15269] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 731.482862][T15217] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 731.496381][T15269] usb 1-1: Using ep0 maxpacket: 32 [ 731.509838][T15217] usb 2-1: USB disconnect, device number 51 [ 731.524677][T15269] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 731.532593][T15217] usblp0: removed [ 731.555434][T15269] usb 1-1: can't read configurations, error -22 [ 731.566599][T15269] usb usb1-port1: unable to enumerate USB device [ 731.586505][T15641] loop2: detected capacity change from 0 to 7 [ 731.593583][T15641] Dev loop2: unable to read RDB block 7 [ 731.599336][T15641] loop2: AHDI p1 p2 p3 [ 731.603524][T15641] loop2: partition table partially beyond EOD, truncated [ 731.612175][T15641] loop2: p1 start 1601398130 is beyond EOD, truncated [ 731.619995][T15641] loop2: p2 start 1702059890 is beyond EOD, truncated [ 731.853763][T15650] sctp: [Deprecated]: syz.3.2686 (pid 15650) Use of int in max_burst socket option deprecated. [ 731.853763][T15650] Use struct sctp_assoc_value instead [ 733.736185][T15217] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 733.816471][T15689] loop2: detected capacity change from 0 to 7 [ 733.856063][T15689] Dev loop2: unable to read RDB block 7 [ 733.863153][T15689] loop2: AHDI p1 p2 p3 [ 733.877984][T15689] loop2: partition table partially beyond EOD, truncated [ 733.895429][T15217] usb 2-1: device descriptor read/64, error -71 [ 733.895697][T15689] loop2: p1 start 1601398130 is beyond EOD, truncated [ 734.024290][T15689] loop2: p2 start 1702059890 is beyond EOD, truncated [ 734.163090][T15217] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 734.265974][ T7786] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 734.295403][T15217] usb 2-1: device descriptor read/64, error -71 [ 734.447455][ T7786] usb 1-1: Using ep0 maxpacket: 8 [ 734.462727][T15217] usb usb2-port1: attempt power cycle [ 734.480885][ T7786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 734.490600][ T7786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 734.508179][ T7786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 734.518146][ T7786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 734.528251][ T7786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.541372][ T7786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 734.551057][ T7786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.835798][T15217] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 734.905470][T15217] usb 2-1: device descriptor read/8, error -71 [ 735.145405][T15217] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 735.180037][T15217] usb 2-1: device descriptor read/8, error -71 [ 735.295642][T15217] usb usb2-port1: unable to enumerate USB device [ 735.363651][T15719] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 735.385631][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 735.425488][T15269] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 735.475455][ T7786] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 735.577607][T15269] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.597615][T15269] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 735.617236][T15269] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 735.631036][T15269] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.636012][ T7786] usb 5-1: device descriptor read/64, error -71 [ 735.640895][T15269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.655645][T15269] usb 3-1: Product: syz [ 735.695646][T15269] usb 3-1: Manufacturer: syz [ 735.705677][T15269] usb 3-1: SerialNumber: syz [ 735.722630][T15722] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 735.805274][T15722] 8021q: adding VLAN 0 to HW filter on device bond10 [ 735.843074][T15721] bond10: (slave gretap2): making interface the new active one [ 735.852016][T15721] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 735.917975][ T7786] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 735.927901][T15218] usb 1-1: USB disconnect, device number 97 [ 735.958727][T15217] delete_channel: no stack [ 735.980251][T15269] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 736.000950][T15269] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 736.032167][T15269] usb 3-1: found format II with max.bitrate = 128, frame size=0 [ 736.062951][T15269] usb 3-1: 2:1: All rates were zero [ 736.075479][ T7786] usb 5-1: device descriptor read/64, error -71 [ 736.113376][T15269] usb 3-1: USB disconnect, device number 116 [ 736.174480][T12857] udevd[12857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.202599][ T7786] usb usb5-port1: attempt power cycle [ 736.565421][ T7786] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 736.649790][T15733] netlink: 'syz.0.2713': attribute type 10 has an invalid length. [ 736.660417][T15733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2713'. [ 736.669654][ T7786] usb 5-1: device descriptor read/8, error -71 [ 736.686257][ T30] audit: type=1326 audit(1760102428.903:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 736.750488][ T30] audit: type=1326 audit(1760102428.903:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 736.873661][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 736.882933][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2716'. [ 736.925662][ T30] audit: type=1326 audit(1760102429.073:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.079428][ T7786] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 737.127020][ T7786] usb 5-1: device descriptor read/8, error -71 [ 737.171204][ T30] audit: type=1326 audit(1760102429.073:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.260311][ T7786] usb usb5-port1: unable to enumerate USB device [ 737.300082][ T30] audit: type=1326 audit(1760102429.073:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.325713][ T30] audit: type=1326 audit(1760102429.073:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.371844][ T30] audit: type=1326 audit(1760102429.073:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.455375][ T30] audit: type=1326 audit(1760102429.073:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 737.631325][T15748] netlink: 'syz.1.2714': attribute type 10 has an invalid length. [ 737.639411][T15748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2714'. [ 737.657551][T15748] bridge0: port 3(dummy0) entered blocking state [ 737.664637][T15748] bridge0: port 3(dummy0) entered disabled state [ 737.675616][T15748] dummy0: entered allmulticast mode [ 737.701591][T15748] dummy0: entered promiscuous mode [ 738.058966][ T30] audit: type=1326 audit(1760102429.073:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 738.091703][ T30] audit: type=1326 audit(1760102429.073:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.3.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8f5f38eec9 code=0x7ffc0000 [ 738.660121][T15761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.345390][T15268] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 739.565396][T15268] usb 1-1: device descriptor read/64, error -71 [ 739.738877][T15780] loop2: detected capacity change from 0 to 7 [ 739.767596][T12857] Dev loop2: unable to read RDB block 7 [ 739.774585][T12857] loop2: AHDI p1 p2 p3 [ 739.785407][T12857] loop2: partition table partially beyond EOD, truncated [ 739.803853][T12857] loop2: p1 start 1601398130 is beyond EOD, truncated [ 739.826850][T12857] loop2: p2 start 1702059890 is beyond EOD, truncated [ 739.834814][T15780] Dev loop2: unable to read RDB block 7 [ 739.845219][T15780] loop2: AHDI p1 p2 p3 [ 739.850642][T15780] loop2: partition table partially beyond EOD, truncated [ 739.883130][T15780] loop2: p1 start 1601398130 is beyond EOD, truncated [ 739.892291][T15780] loop2: p2 start 1702059890 is beyond EOD, truncated [ 740.115205][T15218] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 740.255494][T15218] usb 5-1: device descriptor read/64, error -71 [ 740.495690][T15218] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 740.695752][T15218] usb 5-1: device descriptor read/64, error -71 [ 740.818309][T15800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.906397][T15218] usb usb5-port1: attempt power cycle [ 741.041874][ T7786] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 741.241113][ T7786] usb 3-1: Using ep0 maxpacket: 8 [ 741.250298][ T7786] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 741.260521][ T7786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 741.270428][T15218] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 741.278330][ T7786] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 741.288172][ T7786] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.306323][T15218] usb 5-1: device descriptor read/8, error -71 [ 741.312956][ T7786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 741.326589][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.334827][ T7786] usb 3-1: Product: syz [ 741.339288][ T7786] usb 3-1: Manufacturer: syz [ 741.345653][ T7786] usb 3-1: SerialNumber: syz [ 741.355262][T15812] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 741.365464][T15268] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 741.376010][ T7786] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 741.384962][ T7786] usbtest 3-1:1.0: Linux user mode ISO test driver [ 741.391962][ T7786] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 741.526955][T15268] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 741.536544][T15268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.545760][T15218] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 741.547021][T15268] usb 1-1: config 0 descriptor?? [ 741.568080][T15218] usb 5-1: device descriptor read/8, error -71 [ 741.676008][T15218] usb usb5-port1: unable to enumerate USB device [ 741.755550][T15270] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 741.885735][T15270] usb 2-1: device descriptor read/64, error -71 [ 742.126328][T15270] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 742.255517][T15270] usb 2-1: device descriptor read/64, error -71 [ 742.365942][T15270] usb usb2-port1: attempt power cycle [ 742.449232][T15268] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 742.460567][T15268] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 742.531068][T15268] asix 1-1:0.0: probe with driver asix failed with error -71 [ 742.547529][T15268] usb 1-1: USB disconnect, device number 100 [ 742.734481][T15270] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 742.756193][T15270] usb 2-1: device descriptor read/8, error -71 [ 743.105498][T15270] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 743.286455][T15270] usb 2-1: device descriptor read/8, error -71 [ 743.296245][T15846] misc userio: No port type given on /dev/userio [ 743.396053][T15270] usb usb2-port1: unable to enumerate USB device [ 743.595498][T15218] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 743.681484][ T7786] usb 3-1: USB disconnect, device number 117 [ 743.768228][T15218] usb 1-1: Using ep0 maxpacket: 16 [ 743.806102][T15218] usb 1-1: config 0 has no interfaces? [ 743.812970][T15218] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.835215][T15218] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.937872][T15218] usb 1-1: Manufacturer: syz [ 743.960506][T15218] usb 1-1: config 0 descriptor?? [ 744.168275][T15860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.327881][T15843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 744.719947][T15849] bridge0: port 4(bond0) entered blocking state [ 744.726390][T15849] bridge0: port 4(bond0) entered forwarding state [ 744.743801][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.756775][T15849] bridge0: port 3(dummy0) entered blocking state [ 744.764448][T15849] bridge0: port 3(dummy0) entered forwarding state [ 744.796422][T15864] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 744.915726][T15849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.305719][T15218] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 745.499402][T15218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.519692][T15218] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 745.552075][T15218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 745.568576][ T7786] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 745.588698][T15218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.637451][T15218] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 745.647216][T15218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.657096][T15218] usb 4-1: Product: syz [ 745.677390][T15218] usb 4-1: Manufacturer: syz [ 745.704929][T15218] usb 4-1: SerialNumber: syz [ 745.735470][ T7786] usb 5-1: Using ep0 maxpacket: 32 [ 745.762903][T15218] usb 4-1: config 0 descriptor?? [ 745.790134][ T7786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 745.813881][T15218] xbox_remote_probe: Unexpected endpoint_in [ 745.832004][ T7786] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 745.875760][ T7786] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 745.895132][ T7786] usb 5-1: Product: syz [ 745.905191][ T7786] usb 5-1: Manufacturer: syz [ 745.915154][ T7786] usb 5-1: SerialNumber: syz [ 746.048588][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.085626][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.571353][T15270] usb 4-1: USB disconnect, device number 98 [ 746.581981][ T7786] usb 5-1: config 0 descriptor?? [ 746.605538][T15876] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 746.617381][ T7786] hub 5-1:0.0: bad descriptor, ignoring hub [ 746.655462][ T7786] hub 5-1:0.0: probe with driver hub failed with error -5 [ 746.737318][T15218] usb 1-1: USB disconnect, device number 101 [ 746.904072][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 746.923606][T15895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2757'. [ 746.935660][ T7786] usb 5-1: USB disconnect, device number 111 [ 747.201693][T15898] loop2: detected capacity change from 0 to 7 [ 747.228755][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.235167][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.259475][T15898] Dev loop2: unable to read RDB block 7 [ 747.302854][T15898] loop2: unable to read partition table [ 747.319640][T15898] loop2: partition table beyond EOD, truncated [ 747.335539][T15898] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 747.867596][T15909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.891971][T15909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.925618][T15270] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 747.944791][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2761'. [ 748.095536][ T7786] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 748.255628][T15218] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 748.286722][ T7786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.306971][ T7786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.351676][ T7786] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 748.376089][ T7786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.402871][ T7786] usb 3-1: config 0 descriptor?? [ 748.476795][T15218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.489650][T15270] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.495042][T15218] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 748.515908][T15270] usb 1-1: config 0 interface 0 has no altsetting 0 [ 748.528942][T15218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.538530][T15270] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 748.607833][T15218] usb 2-1: config 0 descriptor?? [ 748.616073][T15218] pwc: Askey VC010 type 2 USB webcam detected. [ 748.630139][T15270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.684816][T15270] usb 1-1: config 0 descriptor?? [ 748.745037][ T7786] usbhid 3-1:0.0: can't add hid device: -71 [ 748.764197][ T7786] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 748.803540][ T7786] usb 3-1: USB disconnect, device number 118 [ 749.027209][T15218] pwc: recv_control_msg error -32 req 02 val 2b00 [ 749.224747][T15218] pwc: recv_control_msg error -32 req 02 val 2700 [ 749.248322][T15218] pwc: recv_control_msg error -32 req 02 val 2c00 [ 749.282294][T15218] pwc: recv_control_msg error -32 req 04 val 1000 [ 749.305639][T15930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2769'. [ 749.325333][T15218] pwc: recv_control_msg error -32 req 04 val 1300 [ 749.338744][T15218] pwc: recv_control_msg error -32 req 04 val 1400 [ 749.354057][T15218] pwc: recv_control_msg error -32 req 02 val 2000 [ 749.367102][T15218] pwc: recv_control_msg error -32 req 02 val 2100 [ 749.382872][T15218] pwc: recv_control_msg error -32 req 04 val 1500 [ 749.448560][T15218] pwc: recv_control_msg error -71 req 02 val 2500 [ 749.465932][T15218] pwc: recv_control_msg error -71 req 02 val 2400 [ 749.473979][T15218] pwc: recv_control_msg error -71 req 02 val 2600 [ 749.490502][T15218] pwc: recv_control_msg error -71 req 02 val 2900 [ 749.523268][T15902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.546785][T15218] pwc: recv_control_msg error -71 req 02 val 2800 [ 749.578062][T15218] pwc: recv_control_msg error -71 req 04 val 1100 [ 749.623165][T15902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.625626][T15218] pwc: recv_control_msg error -71 req 04 val 1200 [ 749.657304][T15902] support for the xor transformation has been removed. [ 749.701065][T15218] pwc: Registered as video103. [ 749.728421][T15939] loop7: detected capacity change from 0 to 7 [ 749.737123][T15218] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 749.826168][T15218] usb 2-1: USB disconnect, device number 60 [ 750.127288][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 750.136250][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 750.136443][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 750.146433][T15939] Dev loop7: unable to read RDB block 7 [ 750.160756][T15939] loop7: unable to read partition table [ 750.166997][T15939] loop7: partition table beyond EOD, truncated [ 750.174545][T15939] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 750.221650][T15953] team1: entered promiscuous mode [ 750.226901][T15953] team1: entered allmulticast mode [ 750.275572][T15269] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 750.286827][T15953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2776'. [ 750.296719][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2776'. [ 750.448023][T15269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.463509][T15269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.478727][T15269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 750.492247][T15269] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 750.502631][T15269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.515002][T15269] usb 4-1: config 0 descriptor?? [ 750.615597][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'. [ 750.823056][T15270] usbhid 1-1:0.0: can't add hid device: -71 [ 750.831544][ T5197] Dev loop6: unable to read RDB block 1 [ 750.849263][T15270] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 750.870703][ T5197] loop6: unable to read partition table [ 750.891199][ T5197] loop6: partition table beyond EOD, truncated [ 750.930325][ T7786] IPVS: starting estimator thread 0... [ 750.955815][T15270] usb 1-1: USB disconnect, device number 102 [ 751.046999][T15972] IPVS: using max 30 ests per chain, 72000 per kthread [ 751.219398][T15269] usbhid 4-1:0.0: can't add hid device: -71 [ 751.233527][T15269] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.260261][T15269] usb 4-1: USB disconnect, device number 99 [ 751.801437][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 752.155588][ T7786] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 752.229453][T15995] netlink: 35468 bytes leftover after parsing attributes in process `syz.3.2786'. [ 752.240031][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'. [ 752.412251][ T7786] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 752.433553][ T7786] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 752.519636][ T7786] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 752.529325][ T7786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.585393][ T7786] usb 5-1: Product: syz [ 752.594695][ T7786] usb 5-1: Manufacturer: syz [ 752.601375][ T7786] usb 5-1: SerialNumber: syz [ 752.765617][ T7786] usb 5-1: config 0 descriptor?? [ 752.857267][ T7786] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 754.085972][T15269] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 754.215464][T15270] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 754.235366][ T7786] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 754.254641][T15269] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.365570][ T7786] usb 1-1: device descriptor read/64, error -71 [ 754.479881][T15269] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 754.489162][T15269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 754.497823][T15269] usb 4-1: Product: syz [ 754.502153][T15269] usb 4-1: Manufacturer: syz [ 754.508299][T15269] usb 4-1: SerialNumber: syz [ 754.553146][T15270] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.563494][T15270] usb 3-1: config 0 interface 0 has no altsetting 0 [ 754.570439][T15270] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 754.581282][T15270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.611973][T15270] usb 3-1: config 0 descriptor?? [ 754.645564][ T7786] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 754.726096][T15269] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 754.853685][ T7786] usb 1-1: device descriptor read/64, error -71 [ 754.965874][ T7786] usb usb1-port1: attempt power cycle [ 755.257284][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.277359][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.409080][T15269] usb 5-1: USB disconnect, device number 112 [ 755.472390][ T7786] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 755.565221][T16035] support for the xor transformation has been removed. [ 755.579450][ T7786] usb 1-1: device descriptor read/8, error -71 [ 755.723485][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'. [ 755.741342][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'. [ 755.836081][ T7786] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 755.869406][ T7786] usb 1-1: device descriptor read/8, error -71 [ 756.043613][ T7786] usb usb1-port1: unable to enumerate USB device [ 757.286163][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 757.421321][ T5197] Dev loop6: unable to read RDB block 1 [ 757.435899][T15270] usbhid 3-1:0.0: can't add hid device: -71 [ 757.441942][T15270] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 757.450342][ T5197] loop6: unable to read partition table [ 757.499771][T15270] usb 3-1: USB disconnect, device number 119 [ 757.520536][ T5197] loop6: partition table beyond EOD, truncated [ 757.738684][T16067] rtc_cmos 00:00: Alarms can be up to one day in the future [ 758.065466][T15270] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 758.245493][T15270] usb 5-1: Using ep0 maxpacket: 32 [ 758.256727][T15270] usb 5-1: config 0 has no interfaces? [ 758.267913][T15270] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 758.286824][T15270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.308908][T15270] usb 5-1: config 0 descriptor?? [ 758.831298][T16082] loop2: detected capacity change from 0 to 7 [ 758.843928][T12857] Dev loop2: unable to read RDB block 7 [ 758.849694][T12857] loop2: AHDI p1 p2 p3 [ 758.854175][T12857] loop2: partition table partially beyond EOD, truncated [ 758.862538][T12857] loop2: p1 start 1601398130 is beyond EOD, truncated [ 758.870124][T12857] loop2: p2 start 1702059890 is beyond EOD, truncated [ 758.878628][T16082] Dev loop2: unable to read RDB block 7 [ 758.886341][T16082] loop2: AHDI p1 p2 p3 [ 758.890628][T16082] loop2: partition table partially beyond EOD, truncated [ 758.898438][T16082] loop2: p1 start 1601398130 is beyond EOD, truncated [ 758.905447][T16082] loop2: p2 start 1702059890 is beyond EOD, truncated [ 760.128349][ T7786] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 760.318829][ T7786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.351704][ T7786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 760.372717][ T7786] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 760.409815][ T7786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.440624][ T7786] usb 2-1: config 0 descriptor?? [ 760.877805][T15218] usb 5-1: USB disconnect, device number 113 [ 761.160638][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.245655][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.385500][T16109] support for the xor transformation has been removed. [ 761.649868][T15218] usb 4-1: USB disconnect, device number 100 [ 761.661579][T15218] usblp0: removed [ 762.362702][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 762.362720][ T30] audit: type=1326 audit(1760102454.583:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.447758][ T30] audit: type=1326 audit(1760102454.583:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.578255][ T30] audit: type=1326 audit(1760102454.583:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.659944][T16121] bond11: option lacp_rate: invalid value (108) [ 762.681912][T16121] bond11 (unregistering): Released all slaves [ 762.698453][ T30] audit: type=1326 audit(1760102454.583:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.723560][ T30] audit: type=1326 audit(1760102454.583:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.747287][ T30] audit: type=1326 audit(1760102454.583:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.771056][ T30] audit: type=1326 audit(1760102454.583:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.793723][ T30] audit: type=1326 audit(1760102454.643:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.833450][ T30] audit: type=1326 audit(1760102454.643:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 762.879007][T16128] vlan2: entered promiscuous mode [ 762.889225][ T30] audit: type=1326 audit(1760102454.703:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16117 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8d2b38eec9 code=0x7ffc0000 [ 763.213393][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2826'. [ 763.581706][ T5197] Dev loop6: unable to read RDB block 1 [ 763.582292][ T7786] usbhid 2-1:0.0: can't add hid device: -71 [ 763.593571][ T5197] loop6: unable to read partition table [ 763.594097][ T7786] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 763.698336][ T7786] usb 2-1: USB disconnect, device number 61 [ 763.702083][ T5197] loop6: partition table beyond EOD, truncated [ 763.781947][T16150] team1: left promiscuous mode [ 764.495217][T16164] sctp: [Deprecated]: syz.0.2834 (pid 16164) Use of int in max_burst socket option deprecated. [ 764.495217][T16164] Use struct sctp_assoc_value instead [ 765.575419][ T7786] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 765.715532][ T7786] usb 3-1: device descriptor read/64, error -71 [ 765.965363][ T7786] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 765.995418][T15218] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 766.286200][ T7786] usb 3-1: device descriptor read/64, error -71 [ 766.317204][T15218] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 766.328024][T15218] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 766.365495][T15218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.407998][ T7786] usb usb3-port1: attempt power cycle [ 766.479015][T15218] usb 5-1: config 0 has no interface number 0 [ 766.486591][T15218] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 766.498007][T15218] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 766.508277][T15218] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 766.521748][T15218] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 766.531211][T15218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.547393][T15218] usb 5-1: config 0 descriptor?? [ 766.629530][T15218] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 766.786563][T15254] usb 5-1: Failed to submit usb control message: -71 [ 766.792228][T15218] usb 5-1: USB disconnect, device number 114 [ 766.800605][T15254] usb 5-1: unable to send the bmi data to the device: -71 [ 766.808016][T15254] usb 5-1: unable to get target info from device [ 766.852907][ T7786] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 766.852939][T15254] usb 5-1: could not get target info (-71) [ 766.877391][ T7786] usb 3-1: device descriptor read/8, error -71 [ 766.884216][T15254] usb 5-1: could not probe fw (-71) [ 767.115662][ T7786] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 767.165825][ T7786] usb 3-1: device descriptor read/8, error -71 [ 767.305694][T15270] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 767.305768][ T7786] usb usb3-port1: unable to enumerate USB device [ 767.465693][T15270] usb 1-1: Using ep0 maxpacket: 32 [ 767.696843][T15270] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 767.705416][T15270] usb 1-1: config 0 has no interface number 0 [ 767.734332][T15270] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 767.743913][T15270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.761379][T15270] usb 1-1: Product: syz [ 767.804712][T15270] usb 1-1: Manufacturer: syz [ 767.813634][T15270] usb 1-1: SerialNumber: syz [ 767.873229][T15270] usb 1-1: config 0 descriptor?? [ 767.909090][T15270] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 768.555038][T16231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2850'. [ 769.034613][T15270] gspca_topro: reg_w err -110 [ 769.068716][T15270] gspca_topro: Sensor soi763a [ 769.217682][T15269] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 769.488739][T15269] usb 4-1: config 0 has no interfaces? [ 769.495383][T15269] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 769.505432][T15269] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 769.513436][T15269] usb 4-1: Manufacturer: syz [ 769.601842][T16238] sctp: [Deprecated]: syz.4.2853 (pid 16238) Use of int in max_burst socket option deprecated. [ 769.601842][T16238] Use struct sctp_assoc_value instead [ 769.637620][T15269] usb 4-1: config 0 descriptor?? [ 770.105992][ T7786] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 770.226714][T16248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.238230][T16248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.488284][ T7786] usb 2-1: Using ep0 maxpacket: 8 [ 770.641743][ T7786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 770.679562][ T7786] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 770.688729][ T7786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.704361][ T7786] usb 2-1: Product: syz [ 770.724592][ T7786] usb 2-1: Manufacturer: syz [ 770.741111][ T7786] usb 2-1: SerialNumber: syz [ 770.767704][ T7786] usb 2-1: config 0 descriptor?? [ 770.887667][ T7786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 771.095447][ T7786] gspca_zc3xx: reg_w_i err -71 [ 771.341976][T15218] usb 4-1: USB disconnect, device number 101 [ 771.371760][T16252] lo: entered promiscuous mode [ 771.383741][T16252] tunl0: entered promiscuous mode [ 771.389995][T16252] gre0: entered promiscuous mode [ 771.414620][T16252] gretap0: entered promiscuous mode [ 771.428415][T16252] erspan0: entered promiscuous mode [ 771.437847][T16252] ip_vti0: entered promiscuous mode [ 771.444243][T16252] ip6_vti0: entered promiscuous mode [ 771.452041][T16252] sit0: entered promiscuous mode [ 771.466563][T16252] ip6tnl0: entered promiscuous mode [ 771.474396][T16252] ip6gre0: entered promiscuous mode [ 771.483493][T16252] syz_tun: entered promiscuous mode [ 771.491785][T16252] ip6gretap0: entered promiscuous mode [ 771.509886][T16252] bridge0: entered promiscuous mode [ 771.517900][T16252] vcan0: entered promiscuous mode [ 771.524470][T16252] bond0: entered promiscuous mode [ 771.530687][T16252] bond_slave_0: entered promiscuous mode [ 771.538202][T16252] bond_slave_1: entered promiscuous mode [ 771.547757][T16252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.559615][T16252] team0: entered promiscuous mode [ 771.564867][T16252] team_slave_0: entered promiscuous mode [ 771.571332][T16252] team_slave_1: entered promiscuous mode [ 771.579906][T16252] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.593420][T16252] bridge0: port 3(dummy0) entered blocking state [ 771.600022][T16252] bridge0: port 3(dummy0) entered forwarding state [ 771.613387][T16252] nlmon0: entered promiscuous mode [ 771.637817][T16252] caif0: entered promiscuous mode [ 771.642971][T16252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.695576][ T7786] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 771.702095][ T7786] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 771.730626][ T7786] usb 2-1: USB disconnect, device number 62 [ 771.811336][T15219] usb 1-1: USB disconnect, device number 107 [ 771.905394][T15218] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 772.826359][T15218] usb 4-1: Using ep0 maxpacket: 16 [ 772.863429][T15218] usb 4-1: config 222 has an invalid interface number: 31 but max is 0 [ 772.876004][T15218] usb 4-1: config 222 has no interface number 0 [ 772.882899][T15218] usb 4-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 772.920387][T15218] usb 4-1: config 222 interface 31 has no altsetting 0 [ 772.943323][T15218] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 772.965898][T15218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.973924][T15218] usb 4-1: Product: syz [ 773.014610][T15269] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 773.049218][T15218] usb 4-1: Manufacturer: syz [ 773.060029][T15218] usb 4-1: SerialNumber: syz [ 773.078751][T16253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 773.175394][T15269] usb 5-1: Using ep0 maxpacket: 16 [ 773.378709][T15269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 773.389073][T15269] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 773.442294][T15269] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 773.472833][T15269] usb 5-1: can't read configurations, error -71 [ 773.501632][T15218] ldusb 4-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 773.518652][T15218] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 773.537874][T15218] usb 4-1: USB disconnect, device number 102 [ 773.564799][T15218] ldusb 4-1:222.31: LD USB Device #0 now disconnected [ 773.685891][T15224] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 773.858137][T15224] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.868422][T15224] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 773.889000][T15224] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.903183][T15224] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.923783][T15224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.968411][T15224] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 774.231587][T16289] sctp: [Deprecated]: syz.3.2868 (pid 16289) Use of int in max_burst socket option deprecated. [ 774.231587][T16289] Use struct sctp_assoc_value instead [ 774.335718][T15269] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 774.475452][T15269] usb 5-1: device descriptor read/64, error -71 [ 774.505693][ T8750] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 774.585665][T15269] usb usb5-port1: attempt power cycle [ 774.667819][ T8750] usb 2-1: config 0 has no interfaces? [ 774.678121][ T8750] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 774.687545][ T8750] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 774.700833][ T8750] usb 2-1: Manufacturer: syz [ 774.711166][ T8750] usb 2-1: config 0 descriptor?? [ 774.945445][T15269] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 774.976676][T15269] usb 5-1: device descriptor read/8, error -71 [ 775.144597][T16295] syzkaller1: entered promiscuous mode [ 775.151039][T16295] syzkaller1: entered allmulticast mode [ 775.165820][T16295] macvlan2: entered allmulticast mode [ 775.171936][T16295] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 775.182920][T16295] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 775.225531][T15269] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 775.246085][T15269] usb 5-1: device descriptor read/8, error -71 [ 775.355834][T15269] usb usb5-port1: unable to enumerate USB device [ 776.386039][T15269] usb 3-1: USB disconnect, device number 124 [ 776.515952][T15224] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 776.697867][T15224] usb 4-1: Using ep0 maxpacket: 16 [ 776.717723][T15224] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 776.737373][T15224] usb 4-1: config 0 has no interface number 0 [ 776.759250][T15224] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 776.793172][T15224] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 776.825638][T15224] usb 4-1: config 0 interface 41 has no altsetting 0 [ 776.854124][ T7546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 776.856418][T15224] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 776.884032][ T7546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 776.886414][T15224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.909580][ T7546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 776.918830][ T7546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 776.926576][ T7546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.008293][T15224] usb 4-1: Product: syz [ 777.022645][T15224] usb 4-1: Manufacturer: syz [ 777.042401][T15224] usb 4-1: SerialNumber: syz [ 777.081191][T15224] usb 4-1: config 0 descriptor?? [ 777.105232][T16300] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 777.118401][T16300] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 777.234256][T15269] usb 2-1: USB disconnect, device number 63 [ 777.371797][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 777.381768][T16300] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 777.455395][ T8750] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 777.465615][T16300] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 777.478958][T15246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.648489][ T8750] usb 5-1: Using ep0 maxpacket: 32 [ 777.660498][ T8750] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.663003][T15224] Error reading MAC address [ 777.730997][ T8750] usb 5-1: config 0 has no interface number 0 [ 777.749291][T15224] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 777.753424][ T8750] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 777.782464][T15246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 777.793295][ T8750] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 777.803381][ T8750] usb 5-1: Product: syz [ 777.812393][ T8750] usb 5-1: Manufacturer: syz [ 777.820114][T16319] dummy0: left allmulticast mode [ 777.826392][T16319] dummy0: left promiscuous mode [ 777.867563][T15269] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 777.869163][T16319] bridge0: port 3(dummy0) entered disabled state [ 777.887093][ T8750] usb 5-1: SerialNumber: syz [ 777.904636][T15224] usb 4-1: USB disconnect, device number 103 [ 777.920602][ T8750] usb 5-1: config 0 descriptor?? [ 777.943000][ T8750] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 777.955855][ T8750] usb 5-1: selecting invalid altsetting 1 [ 777.969358][T16319] bridge_slave_1: left allmulticast mode [ 777.975777][T16319] bridge_slave_1: left promiscuous mode [ 777.981579][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.993160][ T8750] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 778.001267][T16319] bridge_slave_0: left allmulticast mode [ 778.021501][ T8750] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 778.029588][T16319] bridge_slave_0: left promiscuous mode [ 778.055449][ T8750] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 778.064016][T15269] usb 2-1: Using ep0 maxpacket: 16 [ 778.065893][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.069375][ T8750] usb 5-1: media controller created [ 778.085736][T15269] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 778.093906][T15269] usb 2-1: config 0 has no interface number 0 [ 778.105375][T15269] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 778.178464][ T8750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.187177][T15269] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 778.230202][T15269] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 778.253813][T15269] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 778.273500][ T8750] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 778.286000][T15269] usb 2-1: Product: syz [ 778.290916][T15269] usb 2-1: SerialNumber: syz [ 778.295848][ T8750] zl10353_read_register: readreg error (reg=127, ret==-71) [ 778.307319][ T8750] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 778.314898][T15269] usb 2-1: config 0 descriptor?? [ 778.323684][T15269] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 778.342410][T15269] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input34 [ 778.385614][ T8750] usb 5-1: USB disconnect, device number 119 [ 778.488124][T15246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 778.618261][T15246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 778.815321][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 778.822424][ C1] ------------[ cut here ]------------ [ 778.828768][ C1] URB ffff888143b2b300 submitted while active [ 778.835665][ C1] WARNING: CPU: 1 PID: 16313 at drivers/usb/core/urb.c:380 usb_submit_urb+0xf8c/0x18b0 [ 778.845359][ C1] Modules linked in: [ 778.851376][ C1] CPU: 1 UID: 0 PID: 16313 Comm: syz.1.2876 Not tainted syzkaller #0 PREEMPT(full) [ 778.861834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 778.871916][ C1] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 778.877473][ C1] Code: 00 00 00 e8 46 3f c6 fa e9 25 f1 ff ff e8 3c 3f c6 fa c6 05 f3 d8 8e 08 01 90 48 c7 c7 c0 73 12 8c 48 89 de e8 35 5c 89 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 16 3f c6 fa c6 05 57 10 a5 08 01 41 [ 778.897346][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010046 [ 778.903423][ C1] RAX: e08adcdb1fd74b00 RBX: ffff888143b2b300 RCX: 0000000000040000 [ 778.911390][ C1] RDX: ffffc900023c1000 RSI: 0000000000006229 RDI: 000000000000622a [ 778.919367][ C1] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 778.927334][ C1] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000820 [ 778.935303][ C1] R13: ffff8880216fc830 R14: ffff888143b2b308 R15: dffffc0000000000 [ 778.943286][ C1] FS: 0000555591ba7500(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 778.952218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.958796][ C1] CR2: 00002000003ad030 CR3: 00000000788cc000 CR4: 00000000003526f0 [ 778.966765][ C1] Call Trace: [ 778.970041][ C1] [ 778.972880][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 778.978253][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 778.984149][ C1] ? kcov_remote_start+0x97/0x7f0 [ 778.989170][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 778.994551][ C1] __usb_hcd_giveback_urb+0x373/0x540 [ 778.999933][ C1] dummy_timer+0x85f/0x44c0 [ 779.004469][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 779.009847][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 779.015587][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.020531][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.025468][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.030402][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 779.035597][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 779.041596][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 779.047306][ C1] ? read_tsc+0x9/0x20 [ 779.051395][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 779.057243][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 779.062369][ C1] handle_softirqs+0x283/0x870 [ 779.067150][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 779.071919][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 779.077209][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 779.082418][ C1] __irq_exit_rcu+0xca/0x1f0 [ 779.087002][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 779.092200][ C1] irq_exit_rcu+0x9/0x30 [ 779.096432][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 779.102067][ C1] [ 779.104988][ C1] [ 779.107922][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.113926][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 779.120444][ C1] Code: 74 05 e8 3b 6c 79 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 41 f6 65 8b 05 bc 28 43 07 85 c0 74 40 48 c7 04 24 0e 36 [ 779.140058][ C1] RSP: 0018:ffffc9001018fa00 EFLAGS: 00000206 [ 779.146131][ C1] RAX: e08adcdb1fd74b00 RBX: 0000000000000a02 RCX: e08adcdb1fd74b00 [ 779.154185][ C1] RDX: 0000000000000006 RSI: ffffffff8d7e8894 RDI: 0000000000000001 [ 779.162151][ C1] RBP: ffffc9001018fa90 R08: ffffffff8f9e1277 R09: 1ffffffff1f3c24e [ 779.170118][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c24f R12: dffffc0000000000 [ 779.178091][ C1] R13: ffff888144baca00 R14: ffffffff8edadee0 R15: 1ffff92002031f40 [ 779.186075][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 779.192406][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 779.197787][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 779.203173][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 779.209085][ C1] dummy_pullup+0x19b/0x200 [ 779.213595][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 779.218625][ C1] usb_gadget_disconnect_locked+0x143/0x4b0 [ 779.224523][ C1] gadget_unbind_driver+0xc4/0x430 [ 779.229644][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 779.235376][ C1] device_release_driver_internal+0x46f/0x800 [ 779.241447][ C1] driver_detach+0x1f3/0x2d0 [ 779.246047][ C1] bus_remove_driver+0x226/0x2f0 [ 779.251013][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 779.256766][ C1] raw_release+0xd7/0x260 [ 779.261116][ C1] ? __pfx_raw_release+0x10/0x10 [ 779.266080][ C1] __fput+0x44c/0xa70 [ 779.270074][ C1] task_work_run+0x1d4/0x260 [ 779.274778][ C1] ? __pfx_task_work_run+0x10/0x10 [ 779.279900][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 779.285367][ C1] exit_to_user_mode_loop+0xe9/0x130 [ 779.290659][ C1] do_syscall_64+0x2bd/0xfa0 [ 779.295256][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.301317][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.307476][ C1] ? clear_bhb_loop+0x60/0xb0 [ 779.312152][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.318036][ C1] RIP: 0033:0x7fd0b378eec9 [ 779.322446][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.342049][ C1] RSP: 002b:00007fd0b3b0fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 779.350464][ C1] RAX: 0000000000000000 RBX: 00000000000bdcd7 RCX: 00007fd0b378eec9 [ 779.358427][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 779.366387][ C1] RBP: 00007fd0b39e7da0 R08: 0000000000000001 R09: 0000000ab3b0fe7f [ 779.374359][ C1] R10: 0000001b2c020000 R11: 0000000000000246 R12: 00007fd0b39e5fac [ 779.382321][ C1] R13: 00007fd0b39e5fa0 R14: ffffffffffffffff R15: 00007fd0b3b0fca0 [ 779.390454][ C1] [ 779.393466][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 779.400746][ C1] CPU: 1 UID: 0 PID: 16313 Comm: syz.1.2876 Not tainted syzkaller #0 PREEMPT(full) [ 779.410107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 779.420328][ C1] Call Trace: [ 779.423610][ C1] [ 779.426447][ C1] dump_stack_lvl+0x99/0x250 [ 779.431036][ C1] ? __asan_memcpy+0x40/0x70 [ 779.435628][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.440826][ C1] ? __pfx__printk+0x10/0x10 [ 779.445423][ C1] vpanic+0x237/0x6d0 [ 779.449409][ C1] ? __pfx_vpanic+0x10/0x10 [ 779.453918][ C1] panic+0xb9/0xc0 [ 779.457659][ C1] ? __pfx_panic+0x10/0x10 [ 779.462090][ C1] __warn+0x31b/0x4b0 [ 779.466086][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 779.471039][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 779.475979][ C1] report_bug+0x2be/0x4f0 [ 779.480307][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 779.485233][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 779.490162][ C1] ? usb_submit_urb+0xf8e/0x18b0 [ 779.495089][ C1] handle_bug+0x84/0x160 [ 779.499335][ C1] exc_invalid_op+0x1a/0x50 [ 779.503845][ C1] asm_exc_invalid_op+0x1a/0x20 [ 779.508686][ C1] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 779.514223][ C1] Code: 00 00 00 e8 46 3f c6 fa e9 25 f1 ff ff e8 3c 3f c6 fa c6 05 f3 d8 8e 08 01 90 48 c7 c7 c0 73 12 8c 48 89 de e8 35 5c 89 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 16 3f c6 fa c6 05 57 10 a5 08 01 41 [ 779.533822][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010046 [ 779.539889][ C1] RAX: e08adcdb1fd74b00 RBX: ffff888143b2b300 RCX: 0000000000040000 [ 779.547904][ C1] RDX: ffffc900023c1000 RSI: 0000000000006229 RDI: 000000000000622a [ 779.555866][ C1] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 779.563830][ C1] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000820 [ 779.571802][ C1] R13: ffff8880216fc830 R14: ffff888143b2b308 R15: dffffc0000000000 [ 779.579962][ C1] ? usb_submit_urb+0xf8b/0x18b0 [ 779.584895][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 779.590351][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 779.596242][ C1] ? kcov_remote_start+0x97/0x7f0 [ 779.601264][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 779.606664][ C1] __usb_hcd_giveback_urb+0x373/0x540 [ 779.612042][ C1] dummy_timer+0x85f/0x44c0 [ 779.616571][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 779.621951][ C1] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 779.627694][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.632648][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.637674][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 779.642612][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 779.648330][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 779.654332][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 779.660402][ C1] ? read_tsc+0x9/0x20 [ 779.664473][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 779.670281][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 779.675486][ C1] handle_softirqs+0x283/0x870 [ 779.680249][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 779.685011][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 779.690294][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 779.695494][ C1] __irq_exit_rcu+0xca/0x1f0 [ 779.700086][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 779.705287][ C1] irq_exit_rcu+0x9/0x30 [ 779.709523][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 779.715155][ C1] [ 779.718076][ C1] [ 779.720997][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.726976][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 779.733477][ C1] Code: 74 05 e8 3b 6c 79 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c3 9a 41 f6 65 8b 05 bc 28 43 07 85 c0 74 40 48 c7 04 24 0e 36 [ 779.753075][ C1] RSP: 0018:ffffc9001018fa00 EFLAGS: 00000206 [ 779.759141][ C1] RAX: e08adcdb1fd74b00 RBX: 0000000000000a02 RCX: e08adcdb1fd74b00 [ 779.767106][ C1] RDX: 0000000000000006 RSI: ffffffff8d7e8894 RDI: 0000000000000001 [ 779.775067][ C1] RBP: ffffc9001018fa90 R08: ffffffff8f9e1277 R09: 1ffffffff1f3c24e [ 779.783032][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c24f R12: dffffc0000000000 [ 779.790997][ C1] R13: ffff888144baca00 R14: ffffffff8edadee0 R15: 1ffff92002031f40 [ 779.798980][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 779.805310][ C1] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 779.810686][ C1] usb_hcd_poll_rh_status+0x406/0x620 [ 779.816060][ C1] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 779.821959][ C1] dummy_pullup+0x19b/0x200 [ 779.826458][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 779.831480][ C1] usb_gadget_disconnect_locked+0x143/0x4b0 [ 779.837376][ C1] gadget_unbind_driver+0xc4/0x430 [ 779.842488][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 779.848212][ C1] device_release_driver_internal+0x46f/0x800 [ 779.854280][ C1] driver_detach+0x1f3/0x2d0 [ 779.858867][ C1] bus_remove_driver+0x226/0x2f0 [ 779.863812][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 779.869560][ C1] raw_release+0xd7/0x260 [ 779.873886][ C1] ? __pfx_raw_release+0x10/0x10 [ 779.878820][ C1] __fput+0x44c/0xa70 [ 779.882806][ C1] task_work_run+0x1d4/0x260 [ 779.887403][ C1] ? __pfx_task_work_run+0x10/0x10 [ 779.892518][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 779.897994][ C1] exit_to_user_mode_loop+0xe9/0x130 [ 779.903283][ C1] do_syscall_64+0x2bd/0xfa0 [ 779.907871][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.913928][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.920073][ C1] ? clear_bhb_loop+0x60/0xb0 [ 779.924747][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.930632][ C1] RIP: 0033:0x7fd0b378eec9 [ 779.935039][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.954652][ C1] RSP: 002b:00007fd0b3b0fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 779.963153][ C1] RAX: 0000000000000000 RBX: 00000000000bdcd7 RCX: 00007fd0b378eec9 [ 779.971210][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 779.979174][ C1] RBP: 00007fd0b39e7da0 R08: 0000000000000001 R09: 0000000ab3b0fe7f [ 779.987148][ C1] R10: 0000001b2c020000 R11: 0000000000000246 R12: 00007fd0b39e5fac [ 779.995319][ C1] R13: 00007fd0b39e5fa0 R14: ffffffffffffffff R15: 00007fd0b3b0fca0 [ 780.003391][ C1] [ 780.006727][ C1] Kernel Offset: disabled [ 780.011068][ C1] Rebooting in 86400 seconds..