last executing test programs: 2m44.904395771s ago: executing program 1 (id=991): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000000)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r9, &(0x7f0000000040), r8, 0x0, 0x800000000ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000100)='W\x00', 0x2}) 2m42.367352933s ago: executing program 1 (id=996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 2m41.069459741s ago: executing program 1 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000100)={0x1, 0x7c, 0xfffffffffffffffd, 0x1, 0xffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) unshare(0x22020600) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000004100001200000000b9800000c00f3235000800000f"], 0x41}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000000)={0x1f, 0x0, 0x7}) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000fbe66e5a97e17afbd826acfac598852ef1681dbc27255895f333ffc9eccb38", @ANYRES16=r2, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900fbfffffffcffffff08000500070000001400040070696d726567000000000000000000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2m40.507308471s ago: executing program 1 (id=1003): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000100000014f200000000861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_io_uring_setup(0x30b8, &(0x7f000000cb00)={0x0, 0x76af, 0x8, 0x0, 0xe}, &(0x7f000000cb80), &(0x7f000000cbc0)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f000000cc00)=[0xffffffffffffffff], 0x1) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="a69c2ec659a3"], 0xfdef) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xaf1f, 0x80, 0x44, 0x1a8}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x44, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0xc1, 0x48, 0x8e, 0x10, 0x451, 0x5416, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x2, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0xfc, 0x0, 0xf6, 0x7e, 0x50, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f01826"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6, 0x400}, {0x6, 0x24, 0x1a, 0xf, 0x24}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000440)='./file0\x00') syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400) 2m38.348239695s ago: executing program 1 (id=1009): syz_emit_ethernet(0x293, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "390e50", 0x25d, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@routing={0x3a, 0xa, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @dev={0xfe, 0x80, '\x00', 0xb}, @loopback]}, @routing={0x33, 0xa, 0x2, 0x3, 0x0, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @local]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffb, [@ipv4={'\x00', '\xff\xff', @empty}, @loopback]}, @fragment={0x3c, 0x0, 0x40, 0x1, 0x0, 0x17, 0x68}, @fragment={0x6c, 0x0, 0x7, 0x0, 0x0, 0x3, 0x64}, @fragment={0x2, 0x0, 0x9, 0x0, 0x0, 0xa, 0x64}, @srh={0x2, 0xa, 0x4, 0x5, 0x8, 0x48, 0x8, [@dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, @mcast2]}, @fragment={0x67, 0x0, 0xe0, 0x0, 0x0, 0x7, 0x64}, @dstopts={0x84, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x53}, @pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x7, 0x4, [0x100000000, 0x0, 0x10001, 0x5, 0x9, 0x40, 0x7fffffff]}}, @pad1, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xfff}, @generic={0x2, 0x79, "8fc1a5815abce7d28778048e68f07b363e6fa4cf2f51c3b3b96688a5b513343c7b6659796fa039e7e0f912d825554ab2e36232ea9a75c412a79be1b487556ecaf8e78f14dd6d70eedefdb94c46e4c69bb69a95b591a33ed35ae945b50f5afdeac38d063c929d773eb3a4529e35be69fc1b947affe98409a392"}, @jumbo={0xc2, 0x4, 0x2}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x0, 0x0, 0xb, 0x2, 0x2, 0x3, 0x0, 0x2, 0x7, 0x0, 0x1, 0xfff, 0x200, 0x0, 0x4e21, 0x4e22}, 0x0, 0x4}, 0x1, 0x4}, 0x4}}, [0x0]}}}}}}, 0x0) 2m38.013567614s ago: executing program 1 (id=1010): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x23, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x9, "021041bf"}, @global=@item_4={0x3, 0x1, 0x0, "08ea49e1"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x7, "63171808"}, @local=@item_012={0x1, 0x2, 0x6, '_'}, @global=@item_4={0x3, 0x1, 0x7, "91859a15"}, @global=@item_012={0x1, 0x1, 0x2, "ae"}]}}, 0x0}, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000100)=0x8, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x28}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2m37.899092922s ago: executing program 32 (id=1010): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x23, {[@main=@item_4={0x3, 0x0, 0x8, "881c7c75"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x9, "021041bf"}, @global=@item_4={0x3, 0x1, 0x0, "08ea49e1"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x7, "63171808"}, @local=@item_012={0x1, 0x2, 0x6, '_'}, @global=@item_4={0x3, 0x1, 0x7, "91859a15"}, @global=@item_012={0x1, 0x1, 0x2, "ae"}]}}, 0x0}, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000100)=0x8, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x28}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7.628281535s ago: executing program 4 (id=1569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x4008031, 0xffffffffffffffff, 0x8344e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) fchdir(r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88901) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x8840) r5 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r5, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x250) getcwd(&(0x7f0000000100)=""/196, 0xc4) 7.14569544s ago: executing program 4 (id=1573): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4c6800, 0x0) r3 = syz_io_uring_setup(0x6724, &(0x7f0000000140)={0x0, 0xf4c1, 0x2000, 0x0, 0x1d2, 0x0, r2}, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x4004, @fd=r0, 0xcc1e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000240)=""/76, 0x4c}, {&(0x7f0000000480)=""/110, 0x6e}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/193, 0xc1}], 0x6, 0x3, 0x1, {0x0, r5}}) pwrite64(r3, &(0x7f0000000800)="a9d8d2bb84b40519b27a34eb82a4a4611b0ac6d191274792302efe930018a44f7f01593360d915f1e25e0f683c1714d1796e54cc2070541bc8648eff5c25ba1717be682661dbfdd44536a7b6de9da0953212370df8a9bcc7b7e67324250ba7878c2ee0bcdc0af3", 0x67, 0x6d52) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, 0xf, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x2f1) 7.122457412s ago: executing program 2 (id=1574): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x1f) 7.066979363s ago: executing program 2 (id=1575): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x9, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x1e}) flock(r2, 0x1) 5.690842061s ago: executing program 2 (id=1580): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 4.003777741s ago: executing program 2 (id=1587): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00025e00577b0000aa20461636b9"], 0x48}}, 0xe063f32d777ae41e) 3.812179746s ago: executing program 2 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x6, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0x1f, 0x6, "15f596d839ebe6d1c6d8e565ff153704811fde3ef02832e636fd2f"}]}, @NFT_MSG_NEWTABLE={0x154, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x99, 0x6, "b6670ab0b9a565924ac0cbf5ee0e69976e58ff8f95a89e752e56d241a1b82135c332c825b6a2b1aab17f67015b4994d8902da73d6724393b5d442ee99dd28616b84389ba8dd266283e953bb2981260cfafddbc80c536b780ab5f91e266d577edf72951299be6fdd931adf4eb0761a245ac4f374dccf6832611640ae1468b060da623078be422f5ca60b45498238d2fd589c0aedcf3"}, @NFTA_TABLE_USERDATA={0x65, 0x6, "926e7e5e06bd0e82c2c8dcb9ca154e99d3332a75fe1382c2873640f33543a85584594bfdbf366999159331248e5740ffbaff0e38670fd4665b1d6456f0ea53d3af69ca4836683016656a19c345e33c734881e24b123b5a4291997fd9425f929ae2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1dc}}, 0x0) 3.783877119s ago: executing program 4 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x250, 0xa8, 0xfeffffff, 0x250, 0x1a8, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) mq_open(&(0x7f0000000080)='@\x00', 0x80, 0x4, &(0x7f0000000480)={0x200, 0xd412, 0x8, 0x4}) 3.754644798s ago: executing program 4 (id=1590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000500)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x20f5, 0x40, 0x0, 0x0, 0x2, 0x1, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x5, 0x1ff}, {0x0, 0x1000}, {}, {0x7, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4, 0x4}], '\x00', 0x7}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000500)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x20f5, 0x40, 0x0, 0x0, 0x2, 0x1, 0xff], [0x1, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x5, 0x1ff}, {0x0, 0x1000}, {}, {0x7, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {}, {}, {0xd4, 0x4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1ed480, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1ed480, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20042805, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20042805, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r5, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000240)={0x2, 0x4a21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="814716882734ed0ec9137f353d9f9fb14644d67ed14b5e0166a4c9b04500", 0x1e}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010100}}}], 0x38}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000780)="ebc48a261a74352370ad7ce03dee59ad25f36b87788ac711511ead8e9fb536fe74ba2c17275ecce36ccb94c0988efbed6d5fd5be23d0f5f914036ec950f6d5a2793c46c006462ca1aee7fd332910f354be7d80d77123f702350ddf88d96e", 0x5e}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="240000000000000000000000070000008907acac14142a940707bcac1414bb00001f000000000000"], 0x28}}, {{&(0x7f0000000840)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000880)="ba47e7eab345e6a3dea118a58b76ddd0d725467c4c1ef763386150b82d42ecc36e9c2833426ce9b6dfaddcc9ba501715ecfe151261e5e802bb49f144c28ef3372c09349bf5b1115bbb88518f40aa88d11be38059a267363a03ebd09993db289ee195dc70de0fa05ca113c36455cefb810ed11b850de3b65ffa5dbbc14d81703e3391", 0x82}, {&(0x7f0000000940)="1666557c09cdf9656f7228f19499bedb8d20f82717f8a363d27d5d2bcdef457816c81036039fefde209c99fefd577d4c032083ecbcd54696cfb8c273faa9d22dceee418fb40538c240c63a1aad67917c03c6998c42b489c01e4eef229429937d0f77a12d1eb631e2003663d7e70d87a8a874917a9d7f4e57af8012dcdbda40930c5186f9bc5e", 0x86}, {&(0x7f0000000a00)="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", 0x1000}], 0x3, &(0x7f0000001a40)=ANY=[@ANYRESHEX], 0x188}}, {{&(0x7f0000001c00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xb, 0x0}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001c40)="72dc75e0935c205b9031001eef8bc731d92af8ccbd4a0e7678dcafa38239da45320319bfe4ead1b2232952d76f570143c289c6f6ec26dea55edee5bc102aaaccf3cf572bf71cda08d6e8dbfaa7f0a60e9c5aac17040fdd1ce545f082f8d722ea1ec86888c94c697c97c07ea75b9eb2074bd9d9c43712baf6", 0x78}, {&(0x7f0000001cc0)="da44075876042aecb0d8589d5082ec1f070d71540bd1373da7e306b147e5d53e864d30e5cb2a6ebe73e699caf4d8623f56061ff47cacf611f1a932ea07f0651dbf883b0b203ae5cc83599342bb0ea68850e8bc751005581777de0141ee7fc8dd2362a4510ebe13f228743901de10fa27486de0a26314b074ce21608a718275fd6df7dc0680e708006d5f116e8251cce3f027a937b727d357aabd6496faf515fc43afafd1a9e9c54229a4f3e801da931e3bc6bf63828678bb05844fb2", 0xbc}, {&(0x7f0000001d80)="6026169ffef744671bf642e987bc9a41ea995ccadbd98492fb3de7643d41b95e3ee8bf5079d1cb59814d9c2702024cccec9b567caac44c7fd2fc6e84226f96c36e2d1b6b037025c87dead5601fcac7da963169927312b2d8f9c37b13281a34c069f2b9554a723d28f24bd59a726a3378839f2e6508ba1fffcb23aa60fb73752844b312bc8e135671a623ba4f61e262816b25", 0x92}], 0x3, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x3, [{0x2, 0x5, "3669d3"}, {0x2, 0x3, "ec"}, {0x1, 0x4, "943e"}]}, @timestamp={0x44, 0x24, 0x26, 0x0, 0x2, [0x0, 0xffff0001, 0x6, 0x28, 0x5, 0x5, 0x3, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x5, [{@remote, 0xdc9}, {@loopback, 0x8}, {@loopback, 0xf}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}}, {{&(0x7f0000001f40)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001f80)="c2dcc7653eb7e640374698e99bde841cafc6f9ecbf6910b4057ea8ad97a75c135e67e20a04f1df561cfe030fbb11e35f63e7cce940f65bb3b757af24fa7b77514f26838887957013dd9233f3cfa052c4c4daec3035de36744510721e5cb02c157b0e9165850b81e6d0c557546ca20514770884556aa858e14968c41007bb0ab0b14297c8f1de0f8398927baa2ed40f04b316c9f99bb71f59b22e52d6c690864cd6c57a0ac9622f8be0f433211cc76eeccfee7194c365bfe9dd9df1b483daf88b9c55eb46046956614ad192f34d57801873c6fb05b7ab85c8049dda0fb6f05e4dc96231760c9bd0d3171fba498d49f26f7d6a210da530f33002b5e470fd2bdd45306c183eedca3380ac770efe37362e38b34855826ac306999f0fd9f910b17e8213f42d15e201539870a0bf9246f37137ede2fadd47eb551d98d55c41f87a615c312e404e37dc1d5db603249bbf51f821169ba65685f61992837356a221ea0c5634eaa2691b0a3f563f0deb0950c542a0282ee78b29011fa9000486c04625f85086b43176a14042ca4b7ce048b03620136bd14263eb9b3f0bf70dbac05e41919e170a87701d5606803c14b0bdfc839691b34f99ad3312e272f61659c8b5db32a538e7b236e7f36641d8af1e5f8e4fc010b5a6d3e3bcbd0d107ab5a960e45d8deaeb5b7009f22656c3b5bea4e25af7a6e9e207a9391255c0b660b0ea99fb0307db87fbb5a8cb4d1e1158da165cc337ba741e83480d5b4c36f318787df79ead46e0834431dea7a85621feb058d17b57faf9ac8a9268d448962186d63ce1db7eb9b585a3dd6d6de1f315eb0b8fd96f6d01e4af2df2668ecf87bbd895ff950a9482bafedd01e50d6c3751d91b5df280a507bb1c2ed661d32cbe45d4e7ba82b0add9a0080a38eb7c08573ba8031441d229855c38529d716dfcf3f922fba0dbc427886f3aef5acaf85caf1c9e2a018a61b0065678033bbc4f53cb4c91ae330c6d299811a045b51eb9b4f8b2374d6ac56bbbf0a9adbd3d1cde3fd5afa99dc0261a99ff72524c6fc5c2cc40a6a3f65fd734f3614100b5550cc1118008f107956b73e1437cae5d11729c42e1a1ab93d206616aefd7caf990780d8a36fbaf4a8e9a36bbc356c909c94c76b2ae80c5aa6cca4e1ec5b9a77f4ae88a2d715abed8bf0ec2d9a4c35bdd009e03a51bae41401fc92acdee361fa7b1829d6011f6cad07b8d054cb23150c86bdf30c14f3332e69336cb39cc350253606ba81405d660b2146da4ff281aaf4a44b96226c42fe5937a017522e4c68302e880d7d225ef1105450cbc3486b68b79a1d54d8b59a9fd4797602cbc489e0be045e0c012ee3290f5cd22756d073b411b6d56c68eaa0a597cb784d2b0cac04088d0de1fd85ef9b7be0eb0eb630b765ede34de5d200a212c8ae5705c3bac6b4494b05b6002d837b45db7bd19c692794b87267262c792bd1da1c591ee0973f7cc480b44857eb4d7b7045b87e2940f28be7c2f776c74cc0eabcda91ce9f7cb78fd9ded860a84c228356e0a5128dc08b11418883c0fe0f0261862bb1a0669c287cb041713f4c45b7b5e2bda1bcc32a97632d54f7dcfbc726ad1e12c3fc5bfc0d0b598d5c62c66b568acb0de31e4111a507934320814ff350487b9848fc49ef8d4a442b31801f9484a052174557f2ed76a6960705561cbe711faa1deb47abd1835e37ddf2fa4d546323ffcdca2f4ae77467c0cc6534cf763c84dede74ec87c29246a177d408285d37ff113fe6831ab50d2cb78734de7761306fdcbffe0da70bf44c9fb4fa1da511a2d1ccd65a997e5abe75a9e5fa8b70f1e7662b6e7186e1f1d0b7c864375c62e14236b50ae33ba861b133c8166c4f97d31ec2521c9c642d23ebde5fb990db7412376ab6bf3c4b5e96a1ec56c62b0534a2a651f95463f458a1e09666a24494d90e8e12daecd2ffc4ae571e4dc77b355d565070f31323b85bc09736fc24e5c0806b822b45f7b63fa89168ada7fe44c78dae77a13197b2d50a9cbc1cfc31cbc35855af3dd47c74769696254b2a5e0b7bd1da7898b25ea9f236e65f7111be30eb673c2b2e2762ee4012cef68fd4f5d0ff0f3097918d333a8dbc1e47a9add786f6852cec47a625b8b4df096d96eaed1df6746b5b8126c14748a1671d4d5b3f94b1f0c66250c42d8bc1460274abd6ad09d2d34fb1774b32d9266e084b6c8a07f20baa642af6c2fd85c86755a5e26e9dd0a0371386da023d481e384475b9b0d5f869c5776e8aa33d2b42a4e499c9b1adaf62ec163500191db50006255aeb376c8c3b22b82dfc3d6525f06d7036a908cdc8711e04d0583f33fbc396f41b1b9ef21fc320aad1c0b6ab815d095e4c8ef9f39bbd0d41464ef5e7c655bc6021428c806efd03b031de81e6aa30a585adfda57002c9c25ac73569861ceb02bf12d59cab8d47b199906b56541b7d2cce497cc6099b2cb29dd93930fb5f3a4c2fda500d3168976a55cb529f70517baf6125daecce58c6e9d57557dfef21f2a45c53b1b22c6d2d9b091bad987c294a26280db3546095b17061e61c6ebf752792c960bc89c99757273663a1350552241dd2700c28ef4cb171e6e8f9c547da1d8b09ac475a32a5f90d6f02a819f8b062d345712d40f5a47fdb05e74b4aa14ac25e9921298ebbcb54849ee801d663a7336ab49af4d121e7fd3d1a2e595abeec17e23e280f1d401a3b52504b8563226fa4254827e3320b41a7a63f6d23ed431fae80e52cac489adf0fdf44bc0cfe322324ec5e4c7818b795a39fba122b22f5daf2e2862c14affa14dbc8507da2124c75d18969dd60ad07e0eaae020a837e8a1c774db4054591bbda1b9844b91f30f72af7cbb4cd824e5208f645d1f6fcfa42455c185b8e121cb881a12c991349c45455b898c9978e0fcd984f080391ce0c426e502085991f71854bfced9b900d7f4cff87f6895945a25ab8a687bed7f0d47f931e42557c1dd3afd5c1ee6e2e8f2f8e0ca926f890972478391a6458f02969613161c9e082dc6ce5b7a5363d56ab68c66290d4d344f7d6888e9e9436062344bf8a053ba611150cc32d92515800f146d087437d881096acedf0414ed93a4dc2bb3097f8ab01e8b93a65171f14ca10610895c4931aaeee49e7fdbb160444c52aa342395a373983e494e2b85bcda65f9058e64873292f24d2686b22e098b8bcd61e000cd594856c62bcdb01857fd2b13effe715c58a430f393d68e76cee83bef6f74ce767fcf75a12bd4f1cb687a088d39482eae1c65923921f8253fbe3ce8ccfe13f6877bb9f34299d1549d8987ef82227cf8b2e7a026f290cb20e9ac6d4c0f8ce874ba7d0e956771af222fc5311676125eb328f683068dc2c76cfa753c5fe7e4180a1057aba52b39195d413800698a582bb6789c7a3e73cf29728172c49b55addedf56a458fcec16ddfb5c507d74b3896d3a7e7aba23a044984af793a51d63920fe025d19df7ad942e6fdb041814446731e03dd79d852de6daa401d065004b1bbdaf46db4442d9a053c725a0e062b38d1e6bcedf53c0ab5cc822fd28a16f10e7c60d8769b283c74fca3cd832c2e2bdf35b23554fd77b767a4648140e2a3b0045eae67faf2368b9a083d382c18fb71f12a2c3935b4750001a850eec6c8a2c37ebe9765710ddaf91db6fb4ab47985e0c945c2b8c2451c3c3c1a77b34be32bfd823e9f0d4f33bf942af3184a4343d605c823c652f0755327b8800147f4f3400bb9b682038e0d8a5d116ddd9358ca9d9a42d40a197aad08ca204bd0add7b54e12db13e2ebfd22d7257c78ff84b3a739c9025a55e48eb38b32298a1467749d08bbbacbb515fd53c985d9ea1b631d97c9815435ca150aeda0f3e3126d4b46a07aeab587e4e7f4604635388602e07d73a1c8cb144cbfc7a2bc1ab628a3d0b860314adac2e71252ff1a48ddd35ed377d38b6dd185cfee509731d52a654de2a6bd79f0d71fddbad066e630e1dcbb83961af304b8aa133182a9d0806397c3534c70ee1625435376707f385994f460bcbc7d28332c65070a8ea032bd6188d9ebe37d266bfed952985d47a17ef9172c0d332e945aed795464978232e8d183da8538c6f2dd0d050b3e4fe7cf75d4f79cb7cfa57c23a03ca163c9d7212c6c93b1c98727476d7b723c71d519d122574585a93656bd603aaa9f0155ff8200223e878a4b9878228789960db5781a024d2bad00ca960479e1a60e347e2dbc95b240a9c2c6d38637c2d4d6df9fb540548588e680cb5d39107d60ef6eafa8477337cfbe2a0cc7390c96b919a6f557717d8895de68d89fbb69e1ae6acece05291e925282c81dd9b9b48ecf981cf820121b180152fe242801c063f523ab24b8b9c49e8c1cd889f61fb4c0939e70f5c6c77a95a01a1d6142ac16e80bf0316bac89ee1627243346c37e26bf9d3d8da5b6eca7aa05465d0811990591b10eb795d4ff19235d986cefd6dea8a99bd15f56ce1ddce11ecc06ae2438f407294e30e2b4f7d11e35e663806278fae237a21261a4c04ed367ee66431d1810b33e3b0eb6e1561d3cdef8d19c52443faec9b7ee350593acf34a88cace219e40565ddc8673189fc2824e6392041aa1be2063a98c42087addf38fe4028d646dd90bdcfe517c987f60a05626ce3619601424504cec9186cdb3fc275471d136803b56fcada86a8089aaf79d0d4305e14b7635a6c45822879b02f8adc5906fd75b0dea58e4a30aa923f52d855ca9ae9f02b74858dd280b6afde25aa16c9a5c3bbeead90d436613a1e18d933970c27d929d76e9cf2e433075f557c174faac16c2314fbc8f7b9e14d78c070cf7e7ed1a820270156f6bef1e7c15e0e5ded13e87e2eb9742bcdd63f9375e7164b46208878c3a6e376aafbea01b0e8cd58ee292d0a8a5955fe94230b2945221d7bd43c1d3697906ea05d6984668504f2458dc3bf020bd31b8f32e4f7077fe6530dddfb181c10e9b55518c2c7e328e74ca2ef62337803e41fac1c773637324e771b5597b39c4d1e95b484ec36b4dcad6a6260f6d14e3899abec36192dc2386fff273b1a00a596917c4fcfa53107482c6c694adc7d90a5b3d1c33eb4285df2d4d53a2609c73f61f2de2c12874584b0da98e14062806d7af701837b78cd052de25b208db7951853855a3e2b448bd951f6a1371a25952290c7f15449dfc58699487aa444d1875d076b01f449c63ce26f2a4186fe61c151c427675491a8097c830a46cf2b76b249797ac2ae12dc33ac0b1e4218ec1d35b23a3226a27ac1b6b2a0924a3f9c229565edf65228d66e7f79f4c0c372e1a5be37c6f1ac7e8bd6c7d457183acccc5cc02ded956cd9a42851d8e44ef73fce47dd5cab505c493926ed166139caaa0827695a07b20899ce4391823b2085f502b9c9841d58527965705b4b15af7b5af079bbf6923285476a1a6a86fc07a4a7b3e8fd19899bf75a1837d6bb03715052a36a1d28ac87b90c5c02d4af0bd10dd37b4fdf0d1cf2afad122950cd7bbae0fb4d24c4166fbd3d0651459039e16ca5d167aacbfe1c09f42419b1ec93730170720c4a83aad9f4225e99cb073e36c9d357fe4acefc0ee6118f3f7a71ce22c2039651994ab17c38acf426125eb85ba8b55d98d0396e38260b97e5741651c4e552da2514f65e8aa8cf1987adc915081ca99ae95e8eb879e8be49e1b8bcf839648f41f1b24dde5ec848a23d7dbe8833667528e0b4dbefe762c13aafe4bcc6c0fb993e6056bfa0028fc6064424289dff2e92b8d33632f4b35cb09cbdd96dd7a5599b5a321fef60158cf9afe2e9d6e15008f5091eaf7cc6c9aec2b82b6221e96d50", 0x1000}, {&(0x7f0000002f80)="cc040d033ef10f1ce01bfea34f1340b5d6e2210ccb34d683923907fe82ed626b2eeb2d2bb1a6339a48de2c7be61d41f11e73fcaf1ba973207e07c9a9e093e1eb674f62909958c4c94bb834c0e06aba4e8ada285dabb76012c229fa120b03fa60c5892fefec13231684ff21a9bba343f9d107c5a97ebb286df3178c9bb6c942152ee98cf3926537db704e6847661c6cffbb3787267cfc18f84c33625e82c1ee6b70bb", 0xa2}, {&(0x7f0000003380)="dd08101d9b2b227beb8ea2b2031105c51cd94b47f942937a36a19e93fe556aa911d416e290c7e50314865b9509fad2293141c7fbd7c930496d2edb699b1fea0685870b3c53619868cb7cfff057b652c20a8486aabe2ef98ad4c266dedd6a5c368766e07c3a06383609f67c386ef91c68b68f5921a181a4957990690bb48aedfd5b64f4c9e1ad1d6697957bbcc9a3ddf4d1d91a0f9fba3b0622f36e62a7c74fc847ff4690e5b06084dbf35708b1b64d6e325fd47b9b74b08ffb87c56bcb1050487697386eddf28719db6428fe1657fe864482f35472652dc72628d73f18f90236eebafcebcc0bbd5e30e885239940dd9a66c2e78ba003b4b8b4a9cf6ed095663d9aa2d0143b59ce0ab1b5acd7e4ca98", 0x10f}], 0x3, &(0x7f0000003100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x86, 0x10, "bbad14052f3562148d8a0504d14e"}, @timestamp_prespec={0x44, 0x2c, 0x31, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6f8}, {@remote, 0x3}, {@local, 0xd6}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xf}]}]}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x98, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xc, [@multicast1, @local, @multicast2]}, @lsrr={0x83, 0x23, 0x98, [@local, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0xc7, 0x3, 0x2, [{@local, 0x7}, {@broadcast, 0x6}, {@multicast2, 0x200}, {@rand_addr=0x64010102, 0x660b1593}, {@empty, 0x5}, {@remote, 0xd}, {@multicast1, 0x7}, {@loopback, 0x6}, {@private=0xa010102, 0xfffffff7}, {@multicast2, 0x214c}]}]}}}], 0x128}}], 0x5, 0x20000000) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000009, 0x11, r9, 0x180000000) syz_io_uring_submit(0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44044) (async) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 3.512352658s ago: executing program 0 (id=1591): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x3e, {0x1, 0x0, 0xe, 0x3, 0x3, 0x7ff}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.383344339s ago: executing program 2 (id=1592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x253, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_int(r1, 0x29, 0xa7, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "03000006", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "03000006", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) (async) unshare(0x2040400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022220000008806e53f93b2938f8d0b42965f4d070900be0083000000"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0022220000008806e53f93b2938f8d0b42965f4d070900be0083000000"], 0x0}, 0x0) 3.264812092s ago: executing program 0 (id=1593): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x24}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async) r3 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000480)="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", 0x160, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) (async) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$netlink(0x10, 0x3, 0x15) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) (async) writev(r4, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x48}) (async) ustat(0x801, &(0x7f0000000300)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r7], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) sendmsg$nl_route(r6, 0x0, 0x8044) 2.880229203s ago: executing program 4 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0xffffffba, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 2.878129802s ago: executing program 3 (id=1595): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x25dfdbfe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in=@loopback, 0x2, 0x4, 0x2, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe800000000000000000000001a800007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.808148335s ago: executing program 3 (id=1596): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 2.770151398s ago: executing program 4 (id=1597): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/189, 0xbd) fsopen(0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x1c, 0x7b, 0xa1, 0x40, 0x14aa, 0x225, 0xe732, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x1, 0x20, 0x10, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0x88, 0xb3, 0x77, 0x6, [@hid_hid={0x9, 0x21, 0x3, 0xb8, 0x1, {0x22, 0xef6}}]}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}, {0x0, 0x0}]}) 2.748283968s ago: executing program 3 (id=1598): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x101, 0x81) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x40000000, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) (async, rerun: 64) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) (rerun: 64) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000140)={0x0, "c42e68848c23f06c24533283c4761272f298e3e99dc1450727d16a1d245b6d11"}) (async, rerun: 32) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r6, &(0x7f0000001340)=[{&(0x7f0000001e80)='\t', 0x1}], 0x1) (async) fadvise64(r6, 0x18, 0x1800, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000b00)=0x4, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x5, 0xa, 0x0, 0x1, 0x5}}) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000380)={0x0, {0x1, 0x1}}) (async, rerun: 64) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r9 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904", @ANYRES8=r8, @ANYRES32], 0x0) syz_usb_disconnect(r9) 2.659855681s ago: executing program 3 (id=1599): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x40, 0x40, 0x9, 0x9, {{0x32, 0x4, 0x3, 0x9, 0xc8, 0x66, 0x0, 0xf8, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0xc, 0x1, [{0x0, 0x3, 'Y'}, {0x6, 0x3, "8b"}]}, @cipso={0x86, 0x29, 0x0, [{0x2, 0x9, "cb095d9fe41f67"}, {0x5, 0x7, "cefb63ca52"}, {0x7, 0x8, "49b80c3dee5b"}, {0x2, 0x8, "f503c2aa8ad9"}, {0x0, 0x3, "84"}]}, @timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0x8, [{@private=0xa010100, 0x5}]}, @rr={0x7, 0x7, 0x9b, [@remote]}, @cipso={0x86, 0x35, 0x3, [{0x2, 0xa, "ad3cc68f5ff4e511"}, {0x5, 0x10, "ac072a39b97f250138e4d1120c9f"}, {0x0, 0x10, "e502dbf7edff47359195cb191049"}, {0x2, 0x5, "9d0b11"}]}, @lsrr={0x83, 0x1f, 0xdf, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @lsrr={0x83, 0x17, 0x10, [@dev={0xac, 0x14, 0x14, 0x3d}, @empty, @loopback, @private=0xa010100, @local]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x94, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8155}, 0x4000001) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000200)={0x0, 0xfffffdd7, @value=0xfffffffffffffc01}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x28, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x19, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r13, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x400000, 0x5], [0x1000, 0x0, 0x0, 0x80], [0x0, 0xfffffffffffffffd, 0x800000000, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r14, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r15}) close_range(r2, 0xffffffffffffffff, 0x0) 2.267838512s ago: executing program 0 (id=1600): syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822b01) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) (async) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$FICLONE(r0, 0x40049409, r0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.976431284s ago: executing program 0 (id=1602): r0 = syz_usb_connect(0x2, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010102c05f560882052001cd9c0102030109024a00020b0b6009090b100900800c4c03090403"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x22, 0x6, &(0x7f0000000000)="b0ed02509cf3") 1.454665969s ago: executing program 3 (id=1604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private}, {@dev}, {@loopback}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x306, 0x10, 0x819, 0x4, {{0x20, 0x4, 0x0, 0xf, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, @multicast2, @private=0xa010101, {[@ssrr={0x89, 0x27, 0x5a, [@loopback, @empty, @loopback, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_prespec={0x44, 0x2c, 0xa3, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0xfa35}, {@remote, 0x2}, {@broadcast, 0x85fc}, {@rand_addr=0x64010102, 0x5}]}, @lsrr={0x83, 0x17, 0x18, [@loopback, @loopback, @private=0xa010102, @remote, @multicast2]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newchain={0x40, 0x64, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {0x0, 0xfff2}, {0x3, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x88}}]}, 0x40}}, 0x20004080) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 1.231939703s ago: executing program 3 (id=1605): socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)={0x200, 0x2}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x11, r0, 0x68b85000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'fo\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r5, r6}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 760.322064ms ago: executing program 5 (id=1608): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = io_uring_setup(0xc8e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffc, 0x361}) r2 = io_uring_setup(0x26a9, &(0x7f00000004c0)={0x0, 0x1cb5, 0x2, 0x3, 0x7e, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 709.329668ms ago: executing program 5 (id=1609): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80880) (async) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80880) fanotify_init(0x0, 0x800) (async) r2 = fanotify_init(0x0, 0x800) fanotify_mark(r2, 0x1, 0x40001043, r0, 0x0) vmsplice(r0, &(0x7f00000002c0), 0x0, 0x15) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000a80)={0x10, 0x0, r4}, 0x10) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000a80)={0x10, 0x0, r4}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x29, 0xceaf, 0x8000000, 0x9, 0x2, 0x7, 0x9, 0x0, 0x0, 0x80, 0x800}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x29, 0xceaf, 0x8000000, 0x9, 0x2, 0x7, 0x9, 0x0, 0x0, 0x80, 0x800}}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) (async) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0xb9ba6d95ddfd4d01) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000140)=""/124, 0x7c}], 0x1, 0x9, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000580000000a0a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800024000000002050003000000000008000140000000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000580000000a0a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800024000000002050003000000000008000140000000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000084) 640.084953ms ago: executing program 5 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3b, 0x9, 0x4070bd27, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x34}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x10) 512.066154ms ago: executing program 5 (id=1611): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000001480)={@local, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, "1ed6e1", 0x14, 0x6, 0x774114d41ec99669, @empty, @remote, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xfffd}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)="7ae393defc03016c6a07e1f190a05aa8655097f2b7aac8024790319b78ed92102d62473bebf63a598fe869bcfe85f9eca38ae387c4c0a8e3c3bb2be5508f468845133cd7cbf448db1d26a2c61d024190c8760b1aea3bb0487055f1baf392a4415f8a8dec25c8f49c53a04739df08", 0x6e}, {&(0x7f0000000280)="a66cab0286ff64e19164a9fce1eb714ff68856a523cc5b7216a60efba807c8adc071a494bd596ef06012d360527a12acac8252672a15ee249ed2ac3e8f14c31f044386da02078a8ed8b0432b58dbe9890a5508cbd78364301668a0ff38cfaa6b6de47772c72510946e9be7baa7b08f00827086dfc72b0f261ac1d2228c42a3419c02e7bd7786fb74c6a8fbc46240023c8be3207ae7a19eb3454a9974", 0x9c}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) 511.34803ms ago: executing program 0 (id=1612): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) r3 = eventfd2(0xc44, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000b1b9c3a96f26ca51ae75c79b033f789898408dded0eaea018e5bbcd02547901ec076ee0c8ddda582992884fc02dba89a8c099b68c84555861e0b0cf86fcf57b67e8cd94e57d9b7bdacebfd56e106a308338129dee4c58caf58144232eace6add2ea7f2857ecd535ebe0e820fe3e7efdba69798864854075d78b003208affa6a3f6681d1d33f053421ed3c8e4a48b000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) (async, rerun: 32) close(r3) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES64=r8, @ANYRESDEC=r6, @ANYRES8=r0, @ANYRES32=r9, @ANYRESDEC=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20010040}, 0x26f70b72c88eefac) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) pwrite64(r1, &(0x7f00000001c0)="a948d71247efcb05aee335f8c6bac3826d452f722c9c9927fb41f72425fcf13f84a6666cb243ab64b82f069bb4f254c3b3c88f118f61e9036cb9b6a65d4f880a8c2a56143b5d5efa65e494261046f9ecbc8c1caa342ad723c621cbb8ac8139450abe81bc972f3018a38d016e0326d2ebec631ce2dc23284286bd5dc4a65da8faff17cac7116348d2085fd1b7c6128d2d0753466ed367bd9e0cd73ca8ecf80003b857021dacc8c5f076302cf35984c05bbf0666bde2ae108c2d6a101b08319e7e44d5bccda64fe9e505ebcec6", 0xcc, 0x5) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xbb7ff0d3e5b6bfce}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000", @ANYRES16=r10, @ANYBLOB="000129bd7000fddbdf2564000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4001c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket(0x1e, 0x4, 0x0) connect$tipc(r11, &(0x7f0000000040)=@id, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2a0400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="18040000", @ANYRES16=r12, @ANYBLOB="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"], 0x418}, 0x1, 0x0, 0x0, 0x40c4}, 0x40080) (async) sendmmsg$unix(r11, &(0x7f0000004400), 0x400000000000203, 0x101d0) 368.777694ms ago: executing program 5 (id=1613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000280)={0xeeef0000, 0x118000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x1000}, @fd, @ptr={0x70742a85, 0x11, 0x0, 0x0, 0x1, 0x49}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x440}], 0x0, 0x0, 0x0}) 250.662508ms ago: executing program 5 (id=1614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e4aa92082053300578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="319a000064984fa599f49b10366ef6ebff000000ffff", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 0s ago: executing program 0 (id=1615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000c900}, 0xc881) connect$unix(r4, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r4, 0x0, &(0x7f0000000040)) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)) dup(r2) (async) r5 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): ode=0x7ffc0000 [ 377.494487][ T30] audit: type=1326 audit(1755357841.596:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 377.545699][ T30] audit: type=1326 audit(1755357841.596:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.5.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86cad90b07 code=0x7ffc0000 [ 378.008639][T11032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.325701][ T9509] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 378.362156][ T7019] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 378.545637][ T9509] usb 3-1: Using ep0 maxpacket: 8 [ 378.551544][ T7019] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 378.602589][T11046] vivid-001: disconnect [ 378.622097][ T7019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.633303][ T9509] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 378.681783][ T9509] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 378.703615][ T7019] usb 4-1: Product: syz [ 378.707838][ T7019] usb 4-1: Manufacturer: syz [ 378.716600][ T5912] hid_parser_main: 6 callbacks suppressed [ 378.716616][ T5912] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 378.744004][T11045] vivid-001: reconnect [ 378.748734][ T5912] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.752152][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.782023][ T7019] usb 4-1: SerialNumber: syz [ 378.805462][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812431][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.834971][ T7019] usb 4-1: config 0 descriptor?? [ 378.866786][ T7019] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 378.874638][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.901999][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.978238][T11051] loop6: detected capacity change from 0 to 7 [ 379.033064][T11051] Dev loop6: unable to read RDB block 7 [ 379.038796][T11051] loop6: AHDI p1 p2 [ 379.043184][T11051] loop6: partition table partially beyond EOD, truncated [ 379.050953][T11051] loop6: p1 start 926365495 is beyond EOD, truncated [ 379.099450][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.135847][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 379.151563][ T9509] usb 3-1: config 168 interface 0 has no altsetting 0 [ 379.159953][ T9509] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 379.168391][ T9509] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 379.248187][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 379.283515][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.326309][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.338314][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.395523][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 379.438439][ T9509] usb 3-1: config 168 interface 0 has no altsetting 0 [ 379.461032][ T9509] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 379.471143][ T9509] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 379.507648][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 379.567312][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.585090][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.599923][ T9509] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 379.615666][ T9509] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 379.629908][ T9509] usb 3-1: config 168 interface 0 has no altsetting 0 [ 379.646191][ T9509] usb 3-1: string descriptor 0 read error: -22 [ 379.655976][ T9509] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.665621][ T9509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.742320][ T9509] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 379.856878][T11058] netlink: 'syz.0.1235': attribute type 2 has an invalid length. [ 380.000283][ T9509] usb 3-1: USB disconnect, device number 87 [ 380.125765][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 380.125888][ T30] audit: type=1326 audit(1755357844.586:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.175724][ T30] audit: type=1326 audit(1755357844.586:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.201993][ T30] audit: type=1326 audit(1755357844.626:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.208258][T11037] adutux: No device or device unplugged -19 [ 380.229942][ T30] audit: type=1326 audit(1755357844.626:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.261150][ T30] audit: type=1326 audit(1755357844.626:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.290244][ T30] audit: type=1326 audit(1755357844.636:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25b58e7eb code=0x7ffc0000 [ 380.317599][ T30] audit: type=1326 audit(1755357844.636:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25b58e7eb code=0x7ffc0000 [ 380.345991][ T30] audit: type=1326 audit(1755357844.636:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa25b5c14a5 code=0x7ffc0000 [ 380.377515][T11039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.398192][ T30] audit: type=1326 audit(1755357844.836:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 380.459168][ T30] audit: type=1326 audit(1755357844.836:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.3.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 381.108481][ T7019] gspca_sunplus: reg_r err -71 [ 381.115804][ T7019] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 381.125291][ T7019] usb 4-1: USB disconnect, device number 94 [ 382.262085][ T5912] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 382.270066][ T5947] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 382.422140][ T5912] usb 4-1: device descriptor read/64, error -71 [ 382.442223][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 382.449150][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.460644][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.472147][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 382.702350][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.722116][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.759285][ T5947] usb 5-1: config 0 descriptor?? [ 382.771942][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 382.795851][ T5947] hub 5-1:0.0: USB hub found [ 382.809912][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.823199][ T5912] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 382.860959][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.917996][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.965436][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.976433][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.991190][ T5947] hub 5-1:0.0: 1 port detected [ 382.996180][ T5912] usb 4-1: device descriptor read/64, error -71 [ 383.025355][ T10] usb 3-1: config 0 descriptor?? [ 383.112170][ T5912] usb usb4-port1: attempt power cycle [ 383.485178][ T5912] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 383.507779][ T10] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 383.550888][ T5912] usb 4-1: device descriptor read/8, error -71 [ 383.560468][ T10] microsoft 0003:045E:07DA.001C: no inputs found [ 383.568707][ T10] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 383.655317][ T10] hub 5-1:0.0: activate --> -90 [ 383.681641][ T7019] usb 3-1: USB disconnect, device number 88 [ 383.802238][ T5912] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 383.823303][ T5912] usb 4-1: device descriptor read/8, error -71 [ 383.861692][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.870670][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.884368][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 383.893868][T11080] openvswitch: netlink: EtherType 0 is less than min 600 [ 383.932168][ T5912] usb usb4-port1: unable to enumerate USB device [ 383.982083][ T9509] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 384.102511][ T5947] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 384.106378][ T7019] usb 5-1: USB disconnect, device number 91 [ 384.132016][ T9509] usb 6-1: Using ep0 maxpacket: 8 [ 384.138600][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 384.148290][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 384.160816][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.172550][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.184428][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.195852][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.207503][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 384.229061][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 384.242562][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 384.250132][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 384.261562][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.273552][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.285939][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.297230][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.297760][ T5947] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.310122][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 384.332742][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 384.344097][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 384.354087][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 384.368226][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.390323][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.400732][ T5947] usb 1-1: Product: syz [ 384.405941][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.406612][ T5947] usb 1-1: Manufacturer: syz [ 384.428374][ T5947] usb 1-1: SerialNumber: syz [ 384.438459][T11110] netlink: 'syz.2.1249': attribute type 2 has an invalid length. [ 384.518013][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.529816][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.537533][ T5947] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 384.544841][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 384.566723][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 384.578091][ T9509] usb 6-1: string descriptor 0 read error: -22 [ 384.587105][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.588269][ T9509] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 384.608515][ T9509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.700185][ T9509] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 384.822821][ T5947] usb 1-1: USB disconnect, device number 89 [ 384.861822][ T9509] usb 6-1: USB disconnect, device number 12 [ 385.123470][T11103] adutux: No device or device unplugged -19 [ 385.486849][T11118] lo: entered promiscuous mode [ 385.499715][T11118] tunl0: entered promiscuous mode [ 385.515206][T11118] gre0: entered promiscuous mode [ 385.528276][T11118] gretap0: entered promiscuous mode [ 385.539941][T11118] erspan0: entered promiscuous mode [ 385.553010][T11118] ip_vti0: entered promiscuous mode [ 385.565175][T11118] ip6_vti0: entered promiscuous mode [ 385.578710][T11118] sit0: entered promiscuous mode [ 385.590141][T11118] ip6tnl0: entered promiscuous mode [ 385.604462][T11118] ip6gre0: entered promiscuous mode [ 385.617103][T11118] syz_tun: entered promiscuous mode [ 385.627150][T11118] ip6gretap0: entered promiscuous mode [ 385.639883][T11118] bridge0: entered promiscuous mode [ 385.671714][T11118] vcan0: entered promiscuous mode [ 385.682432][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 385.703485][T11118] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 385.727581][T11118] team0: entered promiscuous mode [ 385.742846][T11118] team_slave_0: entered promiscuous mode [ 385.752443][T11118] team_slave_1: entered promiscuous mode [ 385.758336][ T10] ath9k_htc: Failed to initialize the device [ 385.773397][ T5947] usb 1-1: ath9k_htc: USB layer deinitialized [ 385.784483][T11118] dummy0: entered promiscuous mode [ 385.802984][T11118] nlmon0: entered promiscuous mode [ 386.092297][T11118] caif0: entered promiscuous mode [ 386.097594][T11118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.922687][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 387.092469][ T10] usb 1-1: device descriptor read/64, error -71 [ 387.332325][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 387.462273][ T10] usb 1-1: device descriptor read/64, error -71 [ 387.572653][ T10] usb usb1-port1: attempt power cycle [ 387.737463][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1260'. [ 387.922051][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 387.953922][ T10] usb 1-1: device descriptor read/8, error -71 [ 388.042080][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 388.192084][ T10] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 388.201949][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 388.208854][ T5912] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 388.223397][ T10] usb 1-1: device descriptor read/8, error -71 [ 388.229804][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 388.254088][ T5912] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 388.279787][ T5912] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 388.316881][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.334239][ T10] usb usb1-port1: unable to enumerate USB device [ 388.348482][ T5912] usb 6-1: Product: syz [ 388.365650][ T5912] usb 6-1: Manufacturer: syz [ 388.371093][ T5912] usb 6-1: SerialNumber: syz [ 388.387229][ T5912] usb 6-1: config 0 descriptor?? [ 388.394317][T11153] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 388.427619][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 388.501318][ T5912] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 388.508681][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 388.668554][ T7019] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 389.142080][ T9509] usb 6-1: USB disconnect, device number 13 [ 389.148798][ T9509] mcba_usb 6-1:0.0 can0: device disconnected [ 389.192480][ T7019] usb 3-1: Using ep0 maxpacket: 32 [ 389.200339][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 389.200361][ T30] audit: type=1326 audit(1755357853.496:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11178 comm="syz.3.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x0 [ 389.246608][ T7019] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 389.309012][ T7019] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.347262][ T7019] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 389.450386][ T30] audit: type=1326 audit(1755357853.906:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 389.455735][ T7019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.472979][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.555942][ T30] audit: type=1326 audit(1755357853.956:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 389.633063][ T7019] usb 3-1: config 0 descriptor?? [ 389.639439][ T30] audit: type=1326 audit(1755357853.956:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 389.741214][ T30] audit: type=1326 audit(1755357853.956:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 389.808151][ T30] audit: type=1326 audit(1755357853.956:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 389.876188][T11181] loop6: detected capacity change from 0 to 7 [ 389.951682][T11181] Dev loop6: unable to read RDB block 7 [ 389.959503][T11181] loop6: unable to read partition table [ 389.968792][T11181] loop6: partition table beyond EOD, truncated [ 389.975993][T11181] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 389.986063][ T30] audit: type=1326 audit(1755357853.956:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 390.027210][ T30] audit: type=1326 audit(1755357853.956:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 390.070509][ T30] audit: type=1326 audit(1755357853.956:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 390.289371][ T30] audit: type=1326 audit(1755357853.956:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0698ebe9 code=0x7ffc0000 [ 390.312830][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 390.482360][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 390.489892][T11205] netlink: 'syz.0.1273': attribute type 30 has an invalid length. [ 390.524370][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 390.549816][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 390.563069][ T7019] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 390.584756][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 390.604119][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 390.640125][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.692220][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.712480][ T9509] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 390.745794][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 390.771609][T11211] bridge1: entered promiscuous mode [ 390.781177][ T7019] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -71 [ 390.801480][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.831983][ T10] usb 6-1: config 0 descriptor?? [ 390.842561][ T9509] usb 4-1: device descriptor read/64, error -71 [ 390.986871][ T7019] usb 3-1: USB disconnect, device number 89 [ 391.058371][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 391.075139][ T10] usb 6-1: USB disconnect, device number 14 [ 391.081962][ T9509] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 391.097377][ T10] usblp0: removed [ 391.211979][ T9509] usb 4-1: device descriptor read/64, error -71 [ 391.325778][ T9509] usb usb4-port1: attempt power cycle [ 391.562459][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 391.602904][ T7019] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 391.681951][ T9509] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 391.711928][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 391.716104][ T9509] usb 4-1: device descriptor read/8, error -71 [ 391.727338][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 391.744419][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 391.753539][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 391.753810][ T7019] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 391.775328][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.839803][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 391.859602][T11220] fuse: Bad value for 'fd' [ 392.462820][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.477121][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 392.486920][ T7019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.502943][ T7019] usb 1-1: config 0 descriptor?? [ 392.517410][ T7019] pwc: Philips SPC 900NC USB webcam detected. [ 392.569203][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.592064][ T9509] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 392.603882][ T10] usb 6-1: config 0 descriptor?? [ 392.653061][ T9509] usb 4-1: device descriptor read/8, error -71 [ 392.767005][ T9509] usb usb4-port1: unable to enumerate USB device [ 392.837315][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 393.042995][ T10] usb 6-1: USB disconnect, device number 15 [ 393.056332][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.082690][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.138710][T11233] usblp0: removed [ 393.176372][ T7019] pwc: send_video_command error -71 [ 393.184457][ T7019] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 393.192317][ T7019] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 393.272143][ T7019] usb 1-1: USB disconnect, device number 94 [ 393.376961][T11239] fuse: Bad value for 'fd' [ 394.071995][ T9509] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 394.376649][ T9509] usb 1-1: config index 0 descriptor too short (expected 65426, got 146) [ 394.438920][ T9509] usb 1-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 394.477081][ T9509] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 394.531479][T11241] loop6: detected capacity change from 0 to 63 [ 394.548482][ T9509] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 394.559739][ T7265] buffer_io_error: 25 callbacks suppressed [ 394.559754][ T7265] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.595474][T11241] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.610468][ T7265] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.620315][T11255] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.631747][ T7265] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.652226][T11241] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.661505][T11240] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.673020][ T7265] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.684523][T11241] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.698417][ T7265] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.764566][ T9509] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.969818][ T9509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 395.026912][ T9509] usb 1-1: SerialNumber: syz [ 395.354971][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.363786][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.932134][T11265] tipc: Enabled bearer , priority 10 [ 397.069848][T11273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.092165][ T7019] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 397.264182][ T7019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 397.766541][ T7019] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 397.813665][ T7019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.966210][ T7019] usb 6-1: config 0 descriptor?? [ 397.973077][ T5912] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 397.987519][ T9509] usb 1-1: USB disconnect, device number 95 [ 398.142554][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 398.158293][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.197513][ T5912] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 398.222320][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.232351][ T10] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 398.248820][ T5912] usb 5-1: config 0 descriptor?? [ 398.264700][ T5912] usb 5-1: bad CDC descriptors [ 398.280235][ T5912] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 398.308521][ T5912] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 398.318650][ T5912] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 398.385540][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.422662][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 398.434227][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.444443][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 398.458984][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 398.468315][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 398.478307][ T10] usb 4-1: Manufacturer: syz [ 398.483146][ T9509] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 398.523202][ T10] usb 4-1: config 0 descriptor?? [ 398.590688][ T7019] usbhid 6-1:0.0: can't add hid device: -71 [ 398.599327][T11277] program syz.4.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.611811][ T7019] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 398.624171][ T7019] usb 6-1: USB disconnect, device number 16 [ 398.662845][ T9509] usb 1-1: Using ep0 maxpacket: 16 [ 398.704219][ T9509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 398.744962][ T9509] usb 1-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 398.761016][ T9509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.779838][ T9509] usb 1-1: config 0 descriptor?? [ 398.836588][ T5912] usb 5-1: USB disconnect, device number 92 [ 398.842966][ T10] rc_core: IR keymap rc-hauppauge not found [ 398.853305][ T10] Registered IR keymap rc-empty [ 398.865340][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 398.892252][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 398.913948][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 398.927334][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 398.942561][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 398.963273][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 398.982557][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.002075][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.022094][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.042334][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.062030][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.081994][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.102420][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.122578][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 399.154676][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 399.165386][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 399.182000][ T5912] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 399.205989][ T9509] usbhid 1-1:0.0: can't add hid device: -71 [ 399.223715][ T9509] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 399.243161][ T10] usb 4-1: USB disconnect, device number 103 [ 399.254764][ T9509] usb 1-1: USB disconnect, device number 96 [ 399.352663][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 399.366770][ T5912] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 399.378108][ T5912] usb 5-1: config 0 has no interface number 0 [ 399.384725][ T5912] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 399.395069][ T5912] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 399.405832][ T5912] usb 5-1: config 0 interface 41 has no altsetting 0 [ 399.414851][ T5912] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 399.424846][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.433716][ T5912] usb 5-1: Product: syz [ 399.438036][ T5912] usb 5-1: Manufacturer: syz [ 399.443040][ T5912] usb 5-1: SerialNumber: syz [ 399.455712][ T5912] usb 5-1: config 0 descriptor?? [ 399.470460][T11294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 399.479868][T11294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 399.705337][T11294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 399.771303][ T5912] dm9601 5-1:0.41: probe with driver dm9601 failed with error -71 [ 399.813690][ T5912] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 399.885412][ T5912] usb 5-1: USB disconnect, device number 93 [ 400.162021][ T10] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 400.576724][ T10] usb 1-1: device descriptor read/64, error -71 [ 400.936973][ T10] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 401.167662][ T10] usb 1-1: device descriptor read/64, error -71 [ 401.342228][ T10] usb usb1-port1: attempt power cycle [ 401.622070][ T7019] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 401.712531][ T10] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 401.757774][ T10] usb 1-1: device descriptor read/8, error -71 [ 401.784545][ T7019] usb 5-1: Using ep0 maxpacket: 8 [ 401.864081][ T7019] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 401.880760][ T7019] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 401.896284][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 401.909127][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.932106][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.974036][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 402.002320][ T10] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 402.010962][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 402.121278][ T10] usb 1-1: device descriptor read/8, error -71 [ 402.145898][ T7019] usb 5-1: config 168 interface 0 has no altsetting 0 [ 402.200917][ T7019] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 402.232748][ T10] usb usb1-port1: unable to enumerate USB device [ 402.322646][ T7019] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 402.433680][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 402.522740][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.544714][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 402.745672][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 402.760614][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 402.788430][ T7019] usb 5-1: config 168 interface 0 has no altsetting 0 [ 402.999671][ T7019] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 403.009432][ T7019] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 403.022248][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 403.042925][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.055612][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.072063][ T7019] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 403.086878][ T7019] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 403.101036][ T7019] usb 5-1: config 168 interface 0 has no altsetting 0 [ 403.133154][ T7019] usb 5-1: string descriptor 0 read error: -22 [ 403.139557][ T7019] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 403.169139][ T7019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.184349][ T7019] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 403.234811][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 403.403725][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 403.671984][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 403.824217][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 403.846837][ T5947] usb 5-1: USB disconnect, device number 94 [ 403.862722][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 403.894276][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 403.934966][T11390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.972685][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.002313][ T10] usb 4-1: config 0 descriptor?? [ 404.059769][T11351] adutux: No device or device unplugged -19 [ 404.258579][ T10] ath6kl: Failed to submit usb control message: -71 [ 404.270566][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 404.288972][ T10] ath6kl: Unable to send get target info: -71 [ 404.441244][ T10] ath6kl: Failed to init ath6kl core: -71 [ 404.457412][T11396] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (33) [ 404.461531][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 404.700283][ T10] usb 4-1: USB disconnect, device number 104 [ 404.722592][T11396] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 404.763130][T11399] loop2: detected capacity change from 0 to 7 [ 404.773711][T11399] Dev loop2: unable to read RDB block 7 [ 404.779320][T11399] loop2: unable to read partition table [ 404.788841][T11399] loop2: partition table beyond EOD, truncated [ 404.814327][T11399] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.289481][T11409] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 405.297639][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1324'. [ 405.650191][ T7019] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 405.837367][ T7019] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 405.849378][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.892321][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 405.932232][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.965047][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 405.975124][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.006566][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.035195][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.044476][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.075439][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.122602][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.131660][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.142693][ T9509] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 406.180678][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.268764][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.280142][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.293327][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.323117][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.336949][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.349068][ T9509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.360684][ T9509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.371101][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.378307][ T9509] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 406.391969][ T9509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.405920][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.417537][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.429141][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.437260][ T9509] usb 6-1: config 0 descriptor?? [ 406.463360][ T7019] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.484286][ T7019] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.521960][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 406.531354][ T7019] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.549784][ T7019] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.561401][ T7019] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.570987][ T7019] usb 4-1: Product: syz [ 406.591210][ T7019] usb 4-1: Manufacturer: syz [ 406.601299][ T7019] usb 4-1: SerialNumber: syz [ 406.675541][ T7019] usb 4-1: config 0 descriptor?? [ 406.686102][ T7019] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 406.717738][T11427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1330'. [ 406.861923][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 406.870487][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.037202][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.048696][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.111636][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.203955][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.274727][ T9509] usbhid 6-1:0.0: can't add hid device: -71 [ 407.291355][ T9509] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 407.336764][ T9509] usb 6-1: USB disconnect, device number 17 [ 407.362211][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.413448][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 407.444843][ T10] usb 1-1: Manufacturer: syz [ 407.523046][ T10] usb 1-1: config 0 descriptor?? [ 408.112486][ T10] rc_core: IR keymap rc-hauppauge not found [ 408.132338][ T10] Registered IR keymap rc-empty [ 408.152806][ T7019] usb 4-1: USB disconnect, device number 105 [ 408.160530][ T7019] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 408.162981][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.174451][ T5947] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 408.233107][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.263293][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 408.313796][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 408.350510][T11447] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 408.473517][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.501493][ T5947] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.515342][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.536949][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.554569][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.565506][ T5947] usb 6-1: config 0 descriptor?? [ 408.591547][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 408.598043][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.642301][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.672296][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.722152][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.782051][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 408.852600][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.135060][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.150526][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 409.163896][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 409.171942][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 409.179067][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 409.187405][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 409.196325][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 409.208023][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 409.219066][ T10] usb 1-1: USB disconnect, device number 101 [ 409.239292][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 409.310110][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 409.322508][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 409.330463][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 409.400700][ T5947] pwc: recv_control_msg error -32 req 04 val 1500 [ 409.417766][ T5947] pwc: recv_control_msg error -32 req 02 val 2500 [ 409.425687][ T5947] pwc: recv_control_msg error -32 req 02 val 2400 [ 409.436634][ T5947] pwc: recv_control_msg error -32 req 02 val 2600 [ 409.467684][ T5947] pwc: recv_control_msg error -32 req 02 val 2900 [ 409.487218][ T5947] pwc: recv_control_msg error -32 req 02 val 2800 [ 409.942070][ T10] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 410.107328][ T10] usb 5-1: string descriptor 0 read error: -22 [ 410.116854][ T10] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 410.136289][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.161265][ T10] usb 5-1: config 0 descriptor?? [ 410.298402][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.766650][T11391] Set syz1 is full, maxelem 65536 reached [ 411.029611][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 411.040323][ T5947] pwc: Registered as video103. [ 411.064785][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 411.097184][ T5947] usb 6-1: USB disconnect, device number 18 [ 411.174993][ T7019] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 411.220075][T11478] bridge0: entered promiscuous mode [ 411.231468][T11478] bridge0: entered allmulticast mode [ 411.342021][ T7019] usb 4-1: Using ep0 maxpacket: 32 [ 411.373403][ T7019] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 411.385787][ T7019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 411.397828][ T7019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 411.418523][ T7019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 411.433958][ T7019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 411.456058][ T7019] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 411.468013][ T7019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.481920][ T9509] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 411.489692][ T7019] usb 4-1: Product: syz [ 411.498226][ T7019] usb 4-1: Manufacturer: syz [ 411.507799][ T7019] usb 4-1: SerialNumber: syz [ 411.522354][ T7019] usb 4-1: config 0 descriptor?? [ 411.658334][ T9509] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 411.686207][ T9509] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 411.696986][ T9509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.731628][ T9509] usb 3-1: Product: syz [ 411.753780][ T9509] usb 3-1: Manufacturer: syz [ 411.803838][ T9509] usb 3-1: SerialNumber: syz [ 411.830955][ T9509] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 411.986805][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 411.995670][ T7019] input input41: Device does not respond to id packet M [ 412.008002][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 412.015550][ T7019] input input41: Device does not respond to id packet P [ 412.030836][T11472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.049761][T11472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.059855][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.068950][ T7019] input input41: Device does not respond to id packet B [ 412.076878][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.095875][ T7019] input input41: Device does not respond to id packet N [ 412.106006][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.128727][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.136110][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.147646][ T7019] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 412.159957][ T7019] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 412.206053][ T7019] usb 4-1: USB disconnect, device number 106 [ 412.431317][T11478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 412.447029][ T9509] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 412.471996][ T5947] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 412.488010][ T9509] usb 3-1: USB disconnect, device number 90 [ 412.632235][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 412.651949][ T5947] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 412.661650][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.670418][ T5947] usb 1-1: Product: syz [ 412.675160][ T5947] usb 1-1: Manufacturer: syz [ 412.679942][ T5947] usb 1-1: SerialNumber: syz [ 412.688028][ T5947] usb 1-1: config 0 descriptor?? [ 412.805751][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 412.834555][T11490] tipc: Started in network mode [ 412.839686][T11490] tipc: Node identity , cluster identity 4711 [ 412.847796][T11490] tipc: Failed to obtain node identity [ 412.854922][T11490] tipc: Enabling of bearer rejected, failed to enable media [ 412.865089][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 412.882581][ T10] dib0700: firmware download failed at 7 with -22 [ 413.068283][T11490] syzkaller0: entered promiscuous mode [ 413.101433][ T10] usb 5-1: USB disconnect, device number 95 [ 413.111135][T11490] syzkaller0: entered allmulticast mode [ 413.203854][ T5185] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 413.205583][ T5947] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 413.212665][ T5185] Bluetooth: hci4: Injecting HCI hardware error event [ 413.226928][ T5185] Bluetooth: hci4: hardware error 0x00 [ 413.297370][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.330882][ T5947] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 413.351459][ T5947] usb 1-1: media controller created [ 413.406097][T11487] dtv5100: wlen = 0, aborting. [ 413.419720][T11487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.482276][T11487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.581088][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.836243][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.858261][T11507] binder: 11504:11507 unknown command 0 [ 413.864706][T11507] binder: 11504:11507 ioctl c0306201 200000000180 returned -22 [ 413.907354][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.559543][ T5947] zl10353_read_register: readreg error (reg=127, ret==0) [ 414.605125][ T5947] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 414.646548][ T5947] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 414.770496][ T5947] usb 1-1: USB disconnect, device number 102 [ 415.016754][ T5947] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 415.378562][ T5185] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 415.629920][T11537] 8021q: VLANs not supported on ip6_vti0 [ 415.678791][T11537] $Hÿ: (slave dummy0): Releasing backup interface [ 415.795864][T11537] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 415.895018][T11537] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 415.995604][T11537] team0: Port device team_slave_0 removed [ 416.009657][T11537] team0: Port device team_slave_1 removed [ 416.025034][T11537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.037434][T11537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.055397][T11537] $Hÿ: (slave wlan1): Releasing backup interface [ 416.097143][T11537] team0: Port device batadv1 removed [ 417.413445][ T5947] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 417.573247][ T5947] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 417.583138][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.640152][ T5947] usb 5-1: config 0 descriptor?? [ 417.921735][ T5947] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 417.930272][ T5947] [drm:udl_init] *ERROR* Selecting channel failed [ 417.977823][ T5947] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 417.999983][ T5947] [drm] Initialized udl on minor 2 [ 418.025494][ T5947] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.063576][ T5947] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 418.078432][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.086910][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 418.115247][ T5947] usb 5-1: USB disconnect, device number 96 [ 418.693477][T11580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.701137][T11580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.730800][T11580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.737464][T11580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.271910][ T9509] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 419.552347][ T9509] usb 5-1: Using ep0 maxpacket: 8 [ 419.580081][ T9509] usb 5-1: config 116 has an invalid descriptor of length 161, skipping remainder of the config [ 419.635933][ T9509] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 1 [ 419.676023][ T9509] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 419.687958][ T9509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.697391][ T9509] usb 5-1: Product: syz [ 419.714311][ T9509] usb 5-1: Manufacturer: syz [ 419.719107][ T9509] usb 5-1: SerialNumber: syz [ 419.982229][ T5947] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 420.003475][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 420.092129][ T9509] usb 5-1: USB disconnect, device number 97 [ 420.128070][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 420.151064][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 420.162904][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 420.175916][ T5947] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.177866][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1378'. [ 420.241937][ T5947] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.266746][ T5947] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.278687][ T5947] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.601477][ T5947] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.705768][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.721967][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 420.804574][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 420.810766][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 420.902027][ T7019] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 420.992230][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 421.012925][ T1210] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 421.024468][ T5947] usb 6-1: GET_CAPABILITIES returned 0 [ 421.030095][ T5947] usbtmc 6-1:16.0: can't read capabilities [ 421.123857][ T7019] usb 1-1: Using ep0 maxpacket: 8 [ 421.131944][ T10] usb 4-1: device descriptor read/64, error -71 [ 421.150625][ T7019] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 421.159921][ T7019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.168017][ T7019] usb 1-1: Product: syz [ 421.172506][ T7019] usb 1-1: Manufacturer: syz [ 421.193697][T11644] binder: 11640:11644 unknown command 0 [ 421.200594][T11644] binder: 11640:11644 ioctl c0306201 200000000180 returned -22 [ 421.799342][ T9509] usb 6-1: USB disconnect, device number 19 [ 421.864949][ T1210] usb 5-1: config index 0 descriptor too short (expected 65426, got 146) [ 421.874602][ T1210] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 421.890396][ T7019] usb 1-1: SerialNumber: syz [ 421.895502][ T1210] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 421.914115][ T7019] usb 1-1: config 0 descriptor?? [ 421.919166][ T1210] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 421.930824][ T7019] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 421.943357][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 421.952343][ T1210] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 421.961937][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 421.970884][ T1210] usb 5-1: SerialNumber: syz [ 422.092074][ T10] usb 4-1: device descriptor read/64, error -71 [ 422.203796][ T10] usb usb4-port1: attempt power cycle [ 422.624546][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 422.652554][ T10] usb 4-1: device descriptor read/8, error -71 [ 423.050468][T11654] netlink: 'syz.2.1385': attribute type 2 has an invalid length. [ 423.094061][T11655] netlink: 'syz.5.1386': attribute type 2 has an invalid length. [ 423.126117][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 423.163588][ T10] usb 4-1: device descriptor read/8, error -71 [ 423.273168][ T10] usb usb4-port1: unable to enumerate USB device [ 423.610270][ T7019] gspca_sonixj: i2c_w8 err -71 [ 423.812319][ T7019] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 423.839968][ T1210] usb 5-1: USB disconnect, device number 98 [ 423.846996][ T7019] usb 1-1: USB disconnect, device number 103 [ 424.172257][T11660] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1387'. [ 424.365710][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 424.375571][T11662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.704671][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 424.704691][ T30] audit: type=1326 audit(1755357889.166:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11663 comm="syz.4.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c40f8ebe9 code=0x0 [ 424.796036][ T30] audit: type=1326 audit(1755357889.166:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11663 comm="syz.4.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c40f8ebe9 code=0x0 [ 424.850921][T11664] kvm: pic: non byte read [ 424.872377][T11664] kvm: pic: level sensitive irq not supported [ 424.872445][T11664] kvm: pic: non byte read [ 424.893611][T11666] netlink: 'syz.0.1390': attribute type 12 has an invalid length. [ 424.902696][T11664] kvm: pic: level sensitive irq not supported [ 424.902759][T11664] kvm: pic: non byte read [ 424.985135][T11664] kvm: pic: level sensitive irq not supported [ 424.985203][T11664] kvm: pic: non byte read [ 424.998181][T11664] kvm: pic: level sensitive irq not supported [ 424.998245][T11664] kvm: pic: non byte read [ 425.071450][T11664] kvm: pic: level sensitive irq not supported [ 425.071517][T11664] kvm: pic: non byte read [ 425.088570][T11664] kvm: pic: level sensitive irq not supported [ 425.088635][T11664] kvm: pic: non byte read [ 425.100130][T11664] kvm: pic: level sensitive irq not supported [ 425.100224][T11664] kvm: pic: non byte read [ 425.112191][T11664] kvm: pic: level sensitive irq not supported [ 425.112256][T11664] kvm: pic: non byte read [ 425.210624][T11682] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.237012][T11682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1392'. [ 425.875894][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1396'. [ 428.164803][T11717] ip6erspan0: entered allmulticast mode [ 428.822295][ T7019] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 428.984135][ T7019] usb 3-1: Using ep0 maxpacket: 8 [ 428.991494][ T7019] usb 3-1: unable to get BOS descriptor or descriptor too short [ 429.030123][ T7019] usb 3-1: config 5 has an invalid interface number: 184 but max is 3 [ 429.050852][ T7019] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 429.062284][ T7019] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 429.071390][ T7019] usb 3-1: config 5 has no interface number 0 [ 429.079046][ T7019] usb 3-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 429.093577][ T7019] usb 3-1: config 5 interface 184 has no altsetting 0 [ 429.104209][ T7019] usb 3-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 429.113803][ T7019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.142088][ T7019] usb 3-1: Product: syz [ 429.165974][ T7019] usb 3-1: Manufacturer: syz [ 429.189217][ T7019] usb 3-1: SerialNumber: syz [ 429.236495][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 429.460104][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.469036][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.502117][ T9509] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 429.538716][T11744] netlink: 'syz.3.1408': attribute type 2 has an invalid length. [ 429.551505][T11744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.595367][ T7019] ftdi_sio 3-1:5.184: FTDI USB Serial Device converter detected [ 429.642721][ T7019] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 429.652087][ T9509] usb 1-1: Using ep0 maxpacket: 8 [ 429.662932][ T9509] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 429.695270][ T9509] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 429.709916][ T7019] usb 3-1: USB disconnect, device number 91 [ 429.722476][ T7019] ftdi_sio 3-1:5.184: device disconnected [ 429.728375][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.744208][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.757797][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.771700][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.785587][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 429.820923][ T9509] usb 1-1: config 168 interface 0 has no altsetting 0 [ 429.839155][ T9509] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 429.849483][ T9509] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 429.880442][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.906464][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.945224][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.967163][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.999188][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 430.041931][ T9509] usb 1-1: config 168 interface 0 has no altsetting 0 [ 430.051330][ T9509] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 430.070580][ T9509] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 430.088597][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 430.102472][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.131016][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.171965][ T9509] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.181497][T11770] bridge1: entered allmulticast mode [ 430.204113][ T9509] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 430.227920][ T9509] usb 1-1: config 168 interface 0 has no altsetting 0 [ 430.230369][T11770] dvmrp8: entered allmulticast mode [ 430.238363][ T9509] usb 1-1: string descriptor 0 read error: -22 [ 430.247963][ T9509] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 430.271705][ T9509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.298002][ T9509] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 430.499469][ T9509] usb 1-1: USB disconnect, device number 104 [ 430.619962][T11785] vlan2: entered allmulticast mode [ 431.031810][T11769] bridge1: left allmulticast mode [ 431.062211][T11769] dvmrp8: left allmulticast mode [ 431.871943][ T9511] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 431.879678][ T9509] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 432.027609][ T9509] usb 6-1: device descriptor read/64, error -71 [ 432.064081][ T9511] usb 5-1: not running at top speed; connect to a high speed hub [ 432.073123][ T9511] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 432.083300][ T9511] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 432.102162][ T9511] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.121656][ T9511] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.142012][ T9511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.164440][ T9511] usb 5-1: Product: syz [ 432.182719][ T9511] usb 5-1: Manufacturer: syz [ 432.187477][ T9511] usb 5-1: SerialNumber: syz [ 432.302041][ T5947] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 432.331918][ T9509] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 432.472139][ T9509] usb 6-1: device descriptor read/64, error -71 [ 432.472156][ T5947] usb 1-1: device descriptor read/64, error -71 [ 432.517697][ T9511] usb 5-1: 0:2 : does not exist [ 432.564928][ T9511] usb 5-1: USB disconnect, device number 99 [ 432.632312][ T9509] usb usb6-port1: attempt power cycle [ 432.632883][ T7265] udevd[7265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.722228][ T5947] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 432.768349][T11834] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1432'. [ 432.790376][T11834] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 432.872351][ T5947] usb 1-1: device descriptor read/64, error -71 [ 432.992088][ T9509] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 432.992268][ T5947] usb usb1-port1: attempt power cycle [ 433.028413][ T9509] usb 6-1: device descriptor read/8, error -71 [ 433.035393][ T9511] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 433.138796][T11844] tipc: Enabled bearer , priority 0 [ 433.148164][T11844] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 433.157601][T11844] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 433.167281][T11844] tipc: Resetting bearer [ 433.176898][ T6865] tipc: Resetting bearer [ 433.202244][ T9511] usb 5-1: Using ep0 maxpacket: 16 [ 433.209342][ T9511] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 433.221653][ T9511] usb 5-1: config 0 has no interface number 0 [ 433.229084][ T9511] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 433.249952][ T9511] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.264293][ T9511] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 433.274651][ T9511] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 433.287529][ T9511] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 433.297671][ T9509] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 433.307019][ T9511] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 433.315338][ T9511] usb 5-1: Product: syz [ 433.319695][ T9511] usb 5-1: Manufacturer: syz [ 433.326859][ T9511] usb 5-1: SerialNumber: syz [ 433.341935][ T5947] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 433.342769][ T9511] usb 5-1: config 0 descriptor?? [ 433.360651][ T9509] usb 6-1: device descriptor read/8, error -71 [ 433.367701][ T5947] usb 1-1: device descriptor read/8, error -71 [ 433.375024][T11832] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 433.451997][ T7019] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 433.472146][ T9509] usb usb6-port1: unable to enumerate USB device [ 433.610613][ T9511] usb 5-1: USB disconnect, device number 100 [ 433.616958][ T7019] usb 4-1: Using ep0 maxpacket: 32 [ 433.622086][ T5947] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 433.632777][ T7019] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 433.641580][ T7019] usb 4-1: config 0 has no interface number 0 [ 433.650120][ T7019] usb 4-1: config 0 interface 89 has no altsetting 0 [ 433.653344][ T5947] usb 1-1: device descriptor read/8, error -71 [ 433.659171][ T7019] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 433.673257][ T7019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.681356][ T7019] usb 4-1: Product: syz [ 433.686515][ T7019] usb 4-1: Manufacturer: syz [ 433.691239][ T7019] usb 4-1: SerialNumber: syz [ 433.700598][ T7019] usb 4-1: config 0 descriptor?? [ 433.713548][ T7019] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 433.723310][ T7019] em28xx 4-1:0.89: Video interface 89 found: bulk [ 433.772142][ T5947] usb usb1-port1: unable to enumerate USB device [ 434.423007][ T7019] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 434.500916][T11860] binder: 11852:11860 unknown command 0 [ 434.507044][T11860] binder: 11852:11860 ioctl c0306201 200000000180 returned -22 [ 435.847910][T11881] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 435.894712][T11881] batadv2: entered promiscuous mode [ 435.901734][T11881] team0: Port device batadv2 added [ 436.073767][T11881] hub 9-0:1.0: USB hub found [ 436.079977][T11881] hub 9-0:1.0: 1 port detected [ 436.173466][T11844] tipc: Resetting bearer [ 436.209183][ T7019] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 436.222006][ T7019] em28xx 4-1:0.89: board has no eeprom [ 436.359168][ T7019] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 436.374239][ T7019] em28xx 4-1:0.89: analog set to bulk mode. [ 436.403470][ T9511] em28xx 4-1:0.89: Registering V4L2 extension [ 436.433935][ T7019] usb 4-1: USB disconnect, device number 111 [ 436.472386][ T7019] em28xx 4-1:0.89: Disconnecting em28xx [ 436.587481][ T9511] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 436.611981][ T9511] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 436.631938][ T9511] em28xx 4-1:0.89: No AC97 audio processor [ 436.662914][ T9511] usb 4-1: Decoder not found [ 436.678895][ T9511] em28xx 4-1:0.89: failed to create media graph [ 436.807221][ T9511] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 436.852871][ T9511] em28xx 4-1:0.89: Registering snapshot button... [ 436.860265][ T9511] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input42 [ 436.990181][ T9511] em28xx 4-1:0.89: Remote control support is not available for this card. [ 437.026504][ T7019] em28xx 4-1:0.89: Closing input extension [ 437.046148][ T7019] em28xx 4-1:0.89: Deregistering snapshot button [ 437.162840][ T7019] em28xx 4-1:0.89: Freeing device [ 437.244125][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 437.502274][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 437.519568][ T10] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 437.535406][ T10] usb 5-1: config 0 has no interface number 0 [ 437.560848][ T10] usb 5-1: too many endpoints for config 0 interface 115 altsetting 99: 111, using maximum allowed: 30 [ 437.612625][ T10] usb 5-1: config 0 interface 115 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 437.670893][ T10] usb 5-1: config 0 interface 115 has no altsetting 0 [ 437.700735][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 437.720933][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.749747][ T10] usb 5-1: Product: syz [ 437.775240][ T10] usb 5-1: Manufacturer: syz [ 437.789628][ T10] usb 5-1: SerialNumber: syz [ 437.819935][ T10] usb 5-1: config 0 descriptor?? [ 438.257485][T11921] binder: 11917:11921 unknown command 0 [ 438.263413][T11921] binder: 11917:11921 ioctl c0306201 200000000180 returned -22 [ 438.473623][ T5947] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 438.621942][ T5947] usb 3-1: device descriptor read/64, error -71 [ 438.870150][ T5947] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 439.030990][ T5947] usb 3-1: device descriptor read/64, error -71 [ 439.142272][ T5947] usb usb3-port1: attempt power cycle [ 439.481973][ T5947] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 439.502867][ T5947] usb 3-1: device descriptor read/8, error -71 [ 439.762190][ T5947] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 439.793152][ T5947] usb 3-1: device descriptor read/8, error -71 [ 439.887493][ T10] speedtch 5-1:0.115: speedtch_bind: data interface not found! [ 439.902165][ T10] speedtch 5-1:0.115: usbatm_usb_probe: bind failed: -19! [ 439.911138][ T5947] usb usb3-port1: unable to enumerate USB device [ 439.944976][ T10] usb 5-1: USB disconnect, device number 101 [ 440.256631][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.269167][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.598402][T11967] binder: 11962:11967 unknown command 0 [ 441.606870][T11967] binder: 11962:11967 ioctl c0306201 200000000180 returned -22 [ 442.850589][T11985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 442.891909][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 443.031936][ T7019] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 443.053558][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.086218][ T10] usb 5-1: config 81 has an invalid interface number: 13 but max is 0 [ 443.115017][ T10] usb 5-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 443.138825][ T10] usb 5-1: config 81 has no interface number 0 [ 443.147439][ T10] usb 5-1: config 81 interface 13 has no altsetting 0 [ 443.156229][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 443.165392][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.173602][ T10] usb 5-1: Product: syz [ 443.177817][ T10] usb 5-1: Manufacturer: syz [ 443.182596][ T10] usb 5-1: SerialNumber: syz [ 443.193586][ T7019] usb 4-1: Using ep0 maxpacket: 8 [ 443.207978][ T7019] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 443.228100][ T7019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.236889][ T7019] usb 4-1: Product: syz [ 443.241730][ T7019] usb 4-1: Manufacturer: syz [ 443.251237][ T7019] usb 4-1: SerialNumber: syz [ 443.266765][ T7019] usb 4-1: config 0 descriptor?? [ 443.283502][ T7019] gspca_main: sq930x-2.14.0 probing 2770:930c [ 443.372168][ T9511] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 443.509396][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.531072][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.665807][ T9511] usb 1-1: Using ep0 maxpacket: 16 [ 443.672970][ T9511] usb 1-1: config 6 has an invalid interface number: 152 but max is 3 [ 443.681323][ T9511] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 443.698446][ T9511] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 443.721929][ T9509] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 443.762512][ T7019] gspca_sq930x: reg_r 001f failed -71 [ 443.784565][ T7019] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 443.793194][ T9511] usb 1-1: config 6 has no interface number 0 [ 443.801641][ T9511] usb 1-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 443.805683][ T7019] usb 4-1: USB disconnect, device number 112 [ 443.824785][ T9511] usb 1-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 443.838804][ T9511] usb 1-1: config 6 interface 152 has no altsetting 0 [ 443.856421][ T9511] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 443.870165][ T9511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.878780][ T9511] usb 1-1: Product: syz [ 443.883872][ T9509] usb 6-1: Using ep0 maxpacket: 8 [ 443.923367][ T9511] usb 1-1: Manufacturer: syz [ 443.928466][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 443.937270][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 443.949207][ T9511] usb 1-1: SerialNumber: syz [ 443.974251][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 444.030330][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.129146][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.216688][ T9511] ushc 1-1:6.152: probe with driver ushc failed with error -71 [ 444.230152][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.294697][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.313173][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 444.327571][ T9511] usb 1-1: USB disconnect, device number 109 [ 444.338460][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 444.348956][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 444.361546][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 444.378622][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.471752][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.487557][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.500354][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.514238][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 444.523241][ T9509] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 444.531267][ T9509] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 444.557590][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 444.578304][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.709454][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.742489][ T9509] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 444.772545][ T9509] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.824317][ T9509] usb 6-1: config 168 interface 0 has no altsetting 0 [ 444.842030][ T9509] usb 6-1: string descriptor 0 read error: -22 [ 444.848719][ T9509] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 444.859329][ T9509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.900125][ T9509] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 445.097656][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.132434][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.147209][ T5947] usb 6-1: USB disconnect, device number 24 [ 445.553162][T11995] kvm: pic: non byte write [ 445.574573][ T10] qmi_wwan 5-1:81.13: bogus CDC Union: master=0, slave=1 [ 445.597752][ T10] qmi_wwan 5-1:81.13: probe with driver qmi_wwan failed with error -22 [ 445.610388][ T10] usb 5-1: USB disconnect, device number 102 [ 445.952141][T12027] adutux: No device or device unplugged -19 [ 445.961785][T12023] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 445.983053][T12023] $Hÿ: entered promiscuous mode [ 446.711932][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 446.989957][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 446.999655][ T10] usb 5-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 447.012074][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.025598][ T10] usb 5-1: New USB device found, idVendor=0781, idProduct=0007, bcdDevice= 0.05 [ 447.042067][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.060324][ T10] usb 5-1: Product: syz [ 447.070657][ T10] usb 5-1: Manufacturer: syz [ 447.080538][ T10] usb 5-1: SerialNumber: syz [ 447.096058][ T10] usb 5-1: config 0 descriptor?? [ 447.242150][ T1210] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 447.362075][ T9509] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 447.411911][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 447.421799][ T1210] usb 1-1: config 0 has an invalid interface number: 250 but max is 1 [ 447.431935][ T1210] usb 1-1: config 0 has no interface number 1 [ 447.438266][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.456579][ T1210] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 447.469166][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.477569][ T1210] usb 1-1: Product: syz [ 447.508116][ T1210] usb 1-1: Manufacturer: syz [ 447.512875][ T1210] usb 1-1: SerialNumber: syz [ 447.571964][ T9509] usb 4-1: Using ep0 maxpacket: 32 [ 447.579338][ T1210] usb 1-1: config 0 descriptor?? [ 447.586803][ T9509] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 447.594375][ T1210] usb 1-1: Found UVC 0.00 device syz (0408:3090) [ 447.610894][ T9509] usb 4-1: config 0 has no interface number 0 [ 447.613877][ T1210] usb 1-1: No valid video chain found. [ 447.650553][ T9509] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 447.712743][T12049] syzkaller0: entered promiscuous mode [ 447.718289][T12049] syzkaller0: entered allmulticast mode [ 447.726951][T12049] veth0_to_team: mtu less than device minimum [ 447.733764][ T9509] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 447.748117][ T9509] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 447.757532][ T9509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.765669][ T9509] usb 4-1: Product: syz [ 447.770060][ T9509] usb 4-1: Manufacturer: syz [ 447.775059][ T9509] usb 4-1: SerialNumber: syz [ 447.782426][ T9509] usb 4-1: config 0 descriptor?? [ 447.789805][T12043] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 447.803856][ T1210] usb 1-1: USB disconnect, device number 110 [ 447.823815][ T9509] smsc95xx v2.0.0 [ 447.849682][ T10] usb 5-1: USB disconnect, device number 103 [ 448.043597][T12043] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 448.243483][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 448.402323][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 448.415213][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.426557][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 448.435954][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.454886][ T10] usb 5-1: config 0 descriptor?? [ 448.462502][ T1210] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 448.516469][ T30] audit: type=1326 audit(1755357912.976:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.539180][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.572622][ T30] audit: type=1326 audit(1755357913.006:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.600054][ T30] audit: type=1326 audit(1755357913.006:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.632010][ T30] audit: type=1326 audit(1755357913.006:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.656555][ T1210] usb 6-1: Using ep0 maxpacket: 32 [ 448.670554][T12057] ======================================================= [ 448.670554][T12057] WARNING: The mand mount option has been deprecated and [ 448.670554][T12057] and is ignored by this kernel. Remove the mand [ 448.670554][T12057] option from the mount to silence this warning. [ 448.670554][T12057] ======================================================= [ 448.705800][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.716366][ T30] audit: type=1326 audit(1755357913.006:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.738875][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.784877][ T30] audit: type=1326 audit(1755357913.006:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.842189][ T1210] usb 6-1: unable to get BOS descriptor or descriptor too short [ 448.864255][ T1210] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 448.882342][ T1210] usb 6-1: can't read configurations, error -71 [ 448.892254][ T30] audit: type=1326 audit(1755357913.006:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 448.975217][ T30] audit: type=1326 audit(1755357913.006:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 449.012525][ T30] audit: type=1326 audit(1755357913.006:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 449.039482][ T30] audit: type=1326 audit(1755357913.006:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa25b58ebe9 code=0x7ffc0000 [ 450.137078][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 450.142298][T12063] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 450.144358][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.161768][ T10] usb 5-1: USB disconnect, device number 104 [ 450.167709][ T9509] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 450.186976][ T9509] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.205712][ T9509] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 450.223683][ T9509] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 450.238990][ T9509] usb 4-1: USB disconnect, device number 113 [ 450.733874][T12089] bridge1: entered allmulticast mode [ 450.817068][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1496'. [ 450.841687][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 451.381005][T12075] bridge1: left allmulticast mode [ 451.801916][ T9509] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 452.152659][ T9509] usb 1-1: Using ep0 maxpacket: 8 [ 452.209540][ T9509] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.220901][ T9509] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.311934][ T9509] usb 1-1: config 0 interface 0 has no altsetting 0 [ 452.322296][ T9509] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 452.367802][T12105] netlink: 'syz.4.1501': attribute type 3 has an invalid length. [ 452.465655][ T9509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.634488][ T9509] usb 1-1: config 0 descriptor?? [ 452.735306][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 452.882098][ T10] usb 5-1: device descriptor read/64, error -71 [ 453.067463][ T9509] kye 0003:0458:4018.001E: unknown main item tag 0x0 [ 453.074634][ T9509] kye 0003:0458:4018.001E: reserved main item tag 0xe [ 453.082483][ T9509] kye 0003:0458:4018.001E: item fetching failed at offset 15/133 [ 453.106839][ T9509] kye 0003:0458:4018.001E: parse failed [ 453.120269][ T9509] kye 0003:0458:4018.001E: probe with driver kye failed with error -22 [ 453.149421][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 453.291896][ T10] usb 5-1: device descriptor read/64, error -71 [ 453.396483][ T9509] usb 1-1: USB disconnect, device number 111 [ 453.424056][ T10] usb usb5-port1: attempt power cycle [ 453.772119][ T10] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 453.806021][ T10] usb 5-1: device descriptor read/8, error -71 [ 454.077262][ T9509] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 454.104372][T12130] fuse: Bad value for 'fd' [ 454.131958][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 454.152495][ T10] usb 5-1: device descriptor read/8, error -71 [ 454.222575][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 454.222595][ T30] audit: type=1326 audit(1755357918.686:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.257721][ T30] audit: type=1326 audit(1755357918.686:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.284201][ T9509] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.286370][ T10] usb usb5-port1: unable to enumerate USB device [ 454.293841][ T9509] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 454.311943][ T30] audit: type=1326 audit(1755357918.776:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.335299][ T9509] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.354783][ T9509] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.393403][ T30] audit: type=1326 audit(1755357918.776:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.429077][ T30] audit: type=1326 audit(1755357918.776:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.453110][ T30] audit: type=1326 audit(1755357918.796:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.478142][ T30] audit: type=1326 audit(1755357918.796:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.478401][ T9509] usb 1-1: string descriptor 0 read error: -22 [ 454.508988][ T30] audit: type=1326 audit(1755357918.796:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.533770][ T9509] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.546221][ T30] audit: type=1326 audit(1755357918.816:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.572375][ T9509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.585891][ T30] audit: type=1326 audit(1755357918.816:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.5.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86cad8ebe9 code=0x7ffc0000 [ 454.621376][ T9509] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 454.631970][ T9511] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 454.648291][ T9509] cdc_ncm 1-1:1.0: bind() failure [ 454.794176][ T9511] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.823098][ T9511] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 454.832536][ T9511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.840591][ T9511] usb 6-1: Product: syz [ 454.850754][ T9511] usb 6-1: Manufacturer: syz [ 454.855800][ T9511] usb 6-1: SerialNumber: syz [ 454.863535][ T9511] usb 6-1: config 0 descriptor?? [ 454.908358][ T9511] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 455.002064][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 455.132934][T12132] vlan2: entered allmulticast mode [ 455.138324][T12132] erspan0: entered allmulticast mode [ 455.146219][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.160437][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.169742][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 455.176641][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.188241][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.218529][ T1210] usb 6-1: USB disconnect, device number 27 [ 455.239191][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 455.263617][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 455.340642][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.429229][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.440334][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.502763][ T10] usb 4-1: Manufacturer: syz [ 455.541243][ T10] usb 4-1: config 0 descriptor?? [ 455.851913][ T10] rc_core: IR keymap rc-hauppauge not found [ 455.860923][ T10] Registered IR keymap rc-empty [ 455.898728][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 455.952134][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.004787][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 456.260832][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 456.297258][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.330351][ C0] rc rc0: IR event FIFO is full! [ 456.335358][ C0] rc rc0: IR event FIFO is full! [ 456.340326][ C0] rc rc0: IR event FIFO is full! [ 456.345285][ C0] rc rc0: IR event FIFO is full! [ 456.350235][ C0] rc rc0: IR event FIFO is full! [ 456.355179][ C0] rc rc0: IR event FIFO is full! [ 456.360126][ C0] rc rc0: IR event FIFO is full! [ 456.365083][ C0] rc rc0: IR event FIFO is full! [ 456.370044][ C0] rc rc0: IR event FIFO is full! [ 456.375070][ C0] rc rc0: IR event FIFO is full! [ 456.380022][ C0] rc rc0: IR event FIFO is full! [ 456.385193][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.391436][ C0] rc rc0: IR event FIFO is full! [ 456.396443][ C0] rc rc0: IR event FIFO is full! [ 456.401641][ C0] rc rc0: IR event FIFO is full! [ 456.406607][ C0] rc rc0: IR event FIFO is full! [ 456.411566][ C0] rc rc0: IR event FIFO is full! [ 456.416513][ C0] rc rc0: IR event FIFO is full! [ 456.421741][ C0] rc rc0: IR event FIFO is full! [ 456.426737][ C0] rc rc0: IR event FIFO is full! [ 456.431806][ C0] rc rc0: IR event FIFO is full! [ 456.438209][ C0] rc rc0: IR event FIFO is full! [ 456.443457][ C0] rc rc0: IR event FIFO is full! [ 456.448482][ C0] rc rc0: IR event FIFO is full! [ 456.453459][ C0] rc rc0: IR event FIFO is full! [ 456.458412][ C0] rc rc0: IR event FIFO is full! [ 456.463439][ C0] rc rc0: IR event FIFO is full! [ 456.468467][ C0] rc rc0: IR event FIFO is full! [ 456.473619][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.479720][T12173] rc rc0: two consecutive events of type space [ 456.492473][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.512076][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.531929][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.563258][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.627545][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.654675][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.722145][ T1210] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 456.731230][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.811458][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.851983][ T5947] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 456.863986][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 456.874515][ T1210] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 456.896559][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.909822][ T1210] usb 5-1: config 0 descriptor?? [ 456.935894][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 456.948707][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 456.960908][ T10] usb 4-1: USB disconnect, device number 114 [ 457.002431][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 457.028401][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 457.052942][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 457.147156][ T5947] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 457.158125][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 457.169101][ T5947] usb 3-1: Product: syz [ 457.233647][ T5947] usb 3-1: Manufacturer: syz [ 457.249334][ T5947] usb 3-1: SerialNumber: syz [ 457.333401][ T5947] usb 3-1: config 0 descriptor?? [ 457.411753][ T5947] hub 3-1:0.0: bad descriptor, ignoring hub [ 457.418615][ T5947] hub 3-1:0.0: probe with driver hub failed with error -5 [ 457.752604][ T5947] usb 3-1: USB disconnect, device number 96 [ 458.612100][ T5947] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 458.690050][T12128] syz.0.1505 (12128): drop_caches: 1 [ 458.727437][ T10] usb 1-1: USB disconnect, device number 112 [ 458.763276][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 458.770672][ T5947] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 458.780872][ T5947] usb 3-1: config 0 has no interface number 0 [ 458.787501][ T5947] usb 3-1: config 0 interface 161 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 458.806425][ T5947] usb 3-1: config 0 interface 161 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 458.839375][ T5947] usb 3-1: config 0 interface 161 altsetting 7 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 458.874512][ T5947] usb 3-1: config 0 interface 161 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 458.888564][ T5947] usb 3-1: config 0 interface 161 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.917688][ T5947] usb 3-1: config 0 interface 161 has no altsetting 0 [ 458.929718][ T5947] usb 3-1: New USB device found, idVendor=19d2, idProduct=1098, bcdDevice=7d.50 [ 458.947771][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.966565][ T5947] usb 3-1: Product: syz [ 458.972249][ T5947] usb 3-1: Manufacturer: syz [ 458.978256][ T5947] usb 3-1: SerialNumber: syz [ 459.010076][ T5947] usb 3-1: config 0 descriptor?? [ 459.033469][ T5947] option 3-1:0.161: GSM modem (1-port) converter detected [ 459.162387][ T10] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 459.387809][ T5947] usb 3-1: USB disconnect, device number 97 [ 459.593379][ T5947] option 3-1:0.161: device disconnected [ 459.791958][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 459.922602][ T10] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 459.946924][ T1210] usb 5-1: Cannot set MAC address [ 459.952471][ T1210] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 459.984825][ T1210] usb 5-1: USB disconnect, device number 109 [ 460.077287][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 460.097931][ T10] usb usb1-port1: attempt power cycle [ 460.149425][T12216] fuse: Unknown parameter 'fd'0x0000000000000004' [ 460.194832][ T9511] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 460.337502][T12219] binder: 12213:12219 unknown command 0 [ 460.343505][T12219] binder: 12213:12219 ioctl c0306201 200000000180 returned -22 [ 460.981988][ T10] usb 1-1: new low-speed USB device number 115 using dummy_hcd [ 461.177713][ T9509] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 461.202599][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 461.211980][ T9511] usb 4-1: Using ep0 maxpacket: 8 [ 461.220756][ T9511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.246880][ T9511] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.258664][ T9511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.306197][ T9511] usb 4-1: config 0 descriptor?? [ 461.332147][ T10] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 461.352155][ T9509] usb 6-1: Using ep0 maxpacket: 32 [ 461.363314][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 461.363697][ T9509] usb 6-1: config 0 has an invalid interface number: 145 but max is 1 [ 461.368976][ T10] usb usb1-port1: unable to enumerate USB device [ 461.386630][ T9509] usb 6-1: config 0 has an invalid interface number: 43 but max is 1 [ 461.416356][ T9509] usb 6-1: config 0 has no interface number 0 [ 461.424489][ T9509] usb 6-1: config 0 has no interface number 1 [ 461.430884][ T9509] usb 6-1: config 0 interface 145 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.453046][ T9509] usb 6-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 461.467339][ T9509] usb 6-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.482090][ T9509] usb 6-1: config 0 interface 145 has no altsetting 0 [ 461.489019][ T9509] usb 6-1: config 0 interface 43 has no altsetting 0 [ 461.501197][ T9509] usb 6-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 461.511368][ T9509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.527190][ T9509] usb 6-1: Product: syz [ 461.531990][ T9511] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 461.545369][ T9509] usb 6-1: Manufacturer: syz [ 461.550010][ T9509] usb 6-1: SerialNumber: syz [ 461.567296][ T9509] usb 6-1: config 0 descriptor?? [ 461.651949][ T7019] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 461.774970][T12216] fuse: Unknown parameter 'fd'0x0000000000000004' [ 461.802942][ T9509] keyspan_pda 6-1:0.145: required endpoints missing [ 461.815844][ T7019] usb 3-1: config 0 has no interfaces? [ 461.823858][ T9509] keyspan_pda 6-1:0.43: required endpoints missing [ 461.835501][ T7019] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.858151][ T7019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.879069][ T7019] usb 3-1: Product: syz [ 461.884753][ T9509] usb 6-1: USB disconnect, device number 28 [ 461.897147][ T7019] usb 3-1: Manufacturer: syz [ 461.902336][T12234] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[12234] [ 461.935973][ T7019] usb 3-1: SerialNumber: syz [ 461.952728][ T7019] usb 3-1: config 0 descriptor?? [ 461.979533][T12234] netlink: 'syz.4.1532': attribute type 6 has an invalid length. [ 462.013127][T12240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'. [ 462.079151][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 462.205307][T12244] netlink: 'syz.5.1535': attribute type 49 has an invalid length. [ 462.213346][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1535'. [ 462.284656][ T9511] usb 3-1: USB disconnect, device number 98 [ 462.291567][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1535'. [ 462.368819][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1535'. [ 463.013459][ T9511] usb 4-1: USB disconnect, device number 115 [ 463.392016][ T9511] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 463.553528][ T9511] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 463.562115][ T9511] usb 3-1: config 0 has no interface number 0 [ 463.577866][ T9511] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 463.591160][ T9511] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 463.610730][ T9511] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 463.674893][ T9511] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 463.685095][ T9511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.712008][ T9511] usb 3-1: Product: syz [ 463.726619][ T9511] usb 3-1: Manufacturer: syz [ 463.731267][ T9511] usb 3-1: SerialNumber: syz [ 463.782409][ T9511] usb 3-1: config 0 descriptor?? [ 463.791457][T12279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.803764][T12279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.068438][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 464.109523][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.134773][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.172589][T12279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.180387][T12279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.192070][ T9511] qmi_wwan 3-1:0.197: probe with driver qmi_wwan failed with error -22 [ 464.261980][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 464.269979][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 464.280611][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.311286][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.358737][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.374694][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.388279][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.403534][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.418533][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.429824][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.440076][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 464.448142][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.459451][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.469520][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 464.480464][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.494991][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.509302][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.524987][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.537011][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.553904][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.575323][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 464.584800][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 464.595265][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 464.596638][ T9511] usb 3-1: USB disconnect, device number 99 [ 464.626746][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 464.640140][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.675392][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.690826][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.707548][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 464.725246][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 464.735365][ T10] usb 6-1: string descriptor 0 read error: -22 [ 464.741990][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 464.764988][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.784132][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 465.040656][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 465.040676][ T30] audit: type=1326 audit(1755357929.496:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12313 comm="syz.4.1553" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c40f8ebe9 code=0x0 [ 465.129044][ T9509] usb 6-1: USB disconnect, device number 29 [ 465.182249][ T9511] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 465.344082][ T9511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 465.355359][ T9511] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 465.364897][ T9511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.376323][ T9511] usb 3-1: config 0 descriptor?? [ 465.386230][T12312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.800858][ T9511] elan 0003:04F3:0755.001F: unknown main item tag 0x0 [ 465.808925][ T9511] elan 0003:04F3:0755.001F: item fetching failed at offset 3/5 [ 465.820893][ T9511] elan 0003:04F3:0755.001F: Hid Parse failed [ 465.827035][ T9511] elan 0003:04F3:0755.001F: probe with driver elan failed with error -22 [ 466.002461][ T9509] usb 3-1: USB disconnect, device number 100 [ 466.931780][T12339] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1560'. [ 466.982415][T12340] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1560'. [ 467.135615][T12296] delete_channel: no stack [ 467.481592][T12359] binder: 12350:12359 unknown command 0 [ 467.487754][T12359] binder: 12350:12359 ioctl c0306201 200000000180 returned -22 [ 468.362219][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 468.521920][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 468.534534][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 468.548215][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.576143][ T10] usb 4-1: config 0 descriptor?? [ 468.582310][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 468.618056][ T10] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 468.833579][ T10] usb 4-1: qt2_attach - failed to power on unit: -71 [ 468.852243][ T10] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 468.886701][ T10] usb 4-1: USB disconnect, device number 116 [ 469.102284][ T9511] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 469.333424][ T9511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.344870][ T9511] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 469.405666][ T9511] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 469.465150][ T9511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 469.476437][ T9511] usb 5-1: SerialNumber: syz [ 469.539766][ T9511] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 469.620693][ T9511] usb-storage 5-1:1.0: USB Mass Storage device detected [ 470.302765][ T9511] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 470.345615][ T9511] scsi host1: usb-storage 5-1:1.0 [ 470.766917][T12432] binder: 12419:12432 unknown command 0 [ 470.772710][T12432] binder: 12419:12432 ioctl c0306201 200000000180 returned -22 [ 471.997544][T12443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 472.422944][ T9511] usb 5-1: USB disconnect, device number 110 [ 472.603292][T12456] input: syz1 as /devices/virtual/input/input44 [ 473.118305][T12464] tipc: Enabling of bearer rejected, already enabled [ 473.341929][ T9511] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 473.511989][ T9511] usb 3-1: Using ep0 maxpacket: 16 [ 473.520530][ T9511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.606366][ T9509] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 473.614508][ T9511] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.628242][ T9511] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.641333][ T9511] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.650798][ T9511] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.661066][ T9511] usb 3-1: config 0 descriptor?? [ 473.772043][ T9509] usb 5-1: Using ep0 maxpacket: 32 [ 473.779208][ T9509] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.791684][ T9509] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.801251][ T9509] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.809755][ T9509] usb 5-1: Product: syz [ 473.820484][ T9509] usb 5-1: Manufacturer: syz [ 473.825593][ T9509] usb 5-1: SerialNumber: syz [ 473.832458][ T9509] usb 5-1: config 0 descriptor?? [ 473.842448][T12481] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 473.853665][ T9509] hub 5-1:0.0: bad descriptor, ignoring hub [ 473.860197][ T9509] hub 5-1:0.0: probe with driver hub failed with error -5 [ 474.272016][ T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 474.344974][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.357463][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.365510][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.373485][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.382240][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.389683][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.400814][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.414191][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.429415][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.440658][ T9511] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 474.456471][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 474.460349][ T9511] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 474.480922][ T9511] microsoft 0003:045E:07DA.0020: no inputs found [ 474.487377][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 474.488482][ T10] usb 1-1: config 11 has an invalid interface number: 3 but max is 1 [ 474.496584][ T9511] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 474.535032][ T10] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 474.548203][ T10] usb 1-1: config 11 has 1 interface, different from the descriptor's value: 2 [ 474.563609][ T10] usb 1-1: config 11 has no interface number 0 [ 474.578842][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd [ 474.588059][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.598606][ T10] usb 1-1: Product: syz [ 474.602912][ T10] usb 1-1: Manufacturer: syz [ 474.607567][ T10] usb 1-1: SerialNumber: syz [ 474.792108][T12481] usb 5-1: reset high-speed USB device number 111 using dummy_hcd [ 474.857519][T12506] fuse: Unknown parameter 'fd00000000000000000000' [ 474.891638][ T10] usb 1-1: USB disconnect, device number 117 [ 474.916856][ T7265] udevd[7265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:11.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.968487][T12481] usb 5-1: device firmware changed [ 474.974599][ T9510] usb 5-1: USB disconnect, device number 111 [ 475.116903][ T9510] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 475.271984][ T9510] usb 5-1: Using ep0 maxpacket: 32 [ 475.283713][ T9510] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 475.336808][ T9510] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 475.355560][ T9510] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 475.371694][ T9510] usb 5-1: Product: syz [ 475.387335][ T9510] usb 5-1: config 0 descriptor?? [ 475.394384][T12494] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 475.424280][ T9510] hub 5-1:0.0: bad descriptor, ignoring hub [ 475.438991][ T9510] hub 5-1:0.0: probe with driver hub failed with error -5 [ 475.478474][T12524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.670421][T12531] binder: 12530:12531 ioctl c040aed5 200000000280 returned -22 [ 475.732105][ T9511] usb 5-1: USB disconnect, device number 112 [ 475.992122][ T1210] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 476.082424][ T31] INFO: task kworker/u8:13:6864 blocked for more than 143 seconds. [ 476.091087][ T31] Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 [ 476.112006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.120754][ T31] task:kworker/u8:13 state:D stack:22024 pid:6864 tgid:6864 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 476.143732][ T31] Workqueue: netns cleanup_net [ 476.153773][ T31] Call Trace: [ 476.163025][ T31] [ 476.166350][ T31] __schedule+0x1798/0x4cc0 [ 476.171910][ T1210] usb 6-1: Using ep0 maxpacket: 32 [ 476.180111][ T1210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.180447][ T31] ? do_raw_spin_lock+0x121/0x290 [ 476.190600][ T1210] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 476.190636][ T1210] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 476.214321][ T31] ? do_raw_spin_lock+0x121/0x290 [ 476.222957][ T1210] usb 6-1: config 0 interface 0 has no altsetting 1 [ 476.231973][ T1210] usb 6-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 476.236468][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.241468][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.257590][ T1210] usb 6-1: Product: syz [ 476.257621][ T31] ? __pfx___schedule+0x10/0x10 [ 476.261892][ T1210] usb 6-1: Manufacturer: syz [ 476.271551][ T1210] usb 6-1: SerialNumber: syz [ 476.278194][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.281168][ T1210] usb 6-1: config 0 descriptor?? [ 476.287102][ T31] ? schedule+0x91/0x360 [ 476.292556][ T1210] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.299085][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.311779][ T31] ? lock_release+0x4b/0x3e0 [ 476.320040][ T1210] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 476.321288][ T31] ? schedule+0x91/0x360 [ 476.350924][ T31] ? wq_worker_sleeping+0x63/0x250 [ 476.352708][ T7265] udevd[7265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.367630][ T31] schedule+0x165/0x360 [ 476.386429][ T31] afs_cell_purge+0x3d9/0x540 [ 476.396854][ T31] ? afs_net+0x45/0x270 [ 476.409402][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.421041][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 476.435782][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 476.438937][ T1210] usb 3-1: USB disconnect, device number 101 [ 476.450544][ T31] ? afs_net+0x45/0x270 [ 476.460691][ T31] afs_net_exit+0x50/0x100 [ 476.473637][ T31] ops_undo_list+0x49a/0x990 [ 476.478481][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 476.483908][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 476.489301][ T31] cleanup_net+0x4c5/0x800 [ 476.494087][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 476.499185][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.513141][ T10] usb 6-1: USB disconnect, device number 30 [ 476.533927][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 476.548622][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 476.558520][ T31] process_scheduled_works+0xade/0x17b0 [ 476.564922][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.571042][ T31] worker_thread+0x8a0/0xda0 [ 476.576017][ T31] ? __kthread_parkme+0x7b/0x200 [ 476.581651][ T31] kthread+0x70e/0x8a0 [ 476.585917][ T31] ? __pfx_worker_thread+0x10/0x10 [ 476.591172][ T31] ? __pfx_kthread+0x10/0x10 [ 476.595875][ T31] ? rcu_is_watching+0x15/0xb0 [ 476.600721][ T31] ? __pfx_kthread+0x10/0x10 [ 476.605541][ T31] ret_from_fork+0x3f9/0x770 [ 476.610181][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.615724][ T31] ? __switch_to_asm+0x39/0x70 [ 476.620786][ T31] ? __switch_to_asm+0x33/0x70 [ 476.625925][ T31] ? __pfx_kthread+0x10/0x10 [ 476.630610][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.635595][ T31] [ 476.638732][ T31] INFO: lockdep is turned off. [ 476.644413][ T31] NMI backtrace for cpu 0 [ 476.644442][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 476.644467][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.644480][ T31] Call Trace: [ 476.644487][ T31] [ 476.644496][ T31] dump_stack_lvl+0x189/0x250 [ 476.644526][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.644551][ T31] ? __pfx__printk+0x10/0x10 [ 476.644583][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 476.644607][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.644631][ T31] ? __pfx__printk+0x10/0x10 [ 476.644659][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.644693][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.644720][ T31] watchdog+0xf93/0xfe0 [ 476.644751][ T31] ? watchdog+0x1de/0xfe0 [ 476.644781][ T31] kthread+0x70e/0x8a0 [ 476.644818][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.644844][ T31] ? __pfx_kthread+0x10/0x10 [ 476.644868][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.644895][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.644921][ T31] ? __pfx_kthread+0x10/0x10 [ 476.644947][ T31] ret_from_fork+0x3f9/0x770 [ 476.644969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.644991][ T31] ? __switch_to_asm+0x39/0x70 [ 476.645019][ T31] ? __switch_to_asm+0x33/0x70 [ 476.645045][ T31] ? __pfx_kthread+0x10/0x10 [ 476.645071][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.645103][ T31] [ 476.645111][ T31] Sending NMI from CPU 0 to CPUs 1: [ 476.796394][ C1] NMI backtrace for cpu 1 [ 476.796415][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 476.796437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.796455][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 476.796485][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 476.796500][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 476.796517][ C1] RAX: 2e9019500c690c00 RBX: ffffffff81968308 RCX: 2e9019500c690c00 [ 476.796531][ C1] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 476.796543][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 476.796557][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38130 [ 476.796570][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 476.796581][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 476.796595][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.796607][ C1] CR2: 000055555c8a75c8 CR3: 0000000067012000 CR4: 00000000003526f0 [ 476.796622][ C1] Call Trace: [ 476.796630][ C1] [ 476.796637][ C1] default_idle+0x13/0x20 [ 476.796653][ C1] default_idle_call+0x74/0xb0 [ 476.796680][ C1] do_idle+0x1e8/0x510 [ 476.796699][ C1] ? __pfx_do_idle+0x10/0x10 [ 476.796719][ C1] ? do_idle+0x4ef/0x510 [ 476.796736][ C1] cpu_startup_entry+0x44/0x60 [ 476.796752][ C1] start_secondary+0x101/0x110 [ 476.796778][ C1] common_startup_64+0x13e/0x147 [ 476.796809][ C1] [ 476.797840][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.971666][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 476.983479][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.993719][ T31] Call Trace: [ 476.997040][ T31] [ 476.999994][ T31] dump_stack_lvl+0x99/0x250 [ 477.004802][ T31] ? __asan_memcpy+0x40/0x70 [ 477.009607][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.014930][ T31] ? __pfx__printk+0x10/0x10 [ 477.019555][ T31] vpanic+0x281/0x750 [ 477.023564][ T31] ? __pfx_vpanic+0x10/0x10 [ 477.028268][ T31] ? rcu_is_watching+0x15/0xb0 [ 477.033045][ T31] ? preempt_schedule+0xae/0xc0 [ 477.037904][ T31] ? preempt_schedule_common+0x83/0xd0 [ 477.043393][ T31] panic+0xb9/0xc0 [ 477.047143][ T31] ? __pfx_panic+0x10/0x10 [ 477.051576][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 477.057021][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 477.063186][ T31] watchdog+0xfd2/0xfe0 [ 477.067375][ T31] ? watchdog+0x1de/0xfe0 [ 477.071900][ T31] kthread+0x70e/0x8a0 [ 477.076074][ T31] ? __pfx_watchdog+0x10/0x10 [ 477.080861][ T31] ? __pfx_kthread+0x10/0x10 [ 477.085689][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.091016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.096258][ T31] ? __pfx_kthread+0x10/0x10 [ 477.100883][ T31] ret_from_fork+0x3f9/0x770 [ 477.105595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 477.110722][ T31] ? __switch_to_asm+0x39/0x70 [ 477.115586][ T31] ? __switch_to_asm+0x33/0x70 [ 477.120392][ T31] ? __pfx_kthread+0x10/0x10 [ 477.125108][ T31] ret_from_fork_asm+0x1a/0x30 [ 477.129912][ T31] [ 477.133384][ T31] Kernel Offset: disabled [ 477.137752][ T31] Rebooting in 86400 seconds..