last executing test programs: 8.423541958s ago: executing program 0 (id=1373): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b4", 0x1}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtaction={0x48, 0x76, 0x1, 0x60bd25, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) 7.793169303s ago: executing program 0 (id=1377): socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x57, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xe, 0x6}, {0x1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400"], 0x138}}, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xe5c, 0x80000) r8 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x7, 0x2, r8}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x5, 0x8a, 0x4, 0x1, 0xc5, 0x9, 0xb3, 0x77, 0x6, 0x6, 0x5, 0x0, 0x8, 0xff, 0x1, 0xec}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x9, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x1d7316}) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000002000)) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket(0x400000000010, 0x3, 0x0) 7.259288031s ago: executing program 3 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xfe0f, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) unshare(0x2c040600) (async) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000001600)) 7.196975775s ago: executing program 3 (id=1381): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001d40)="b9e403c6631e394958a05dc7cf1c", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x14, 0x1, 0x4, 0x5, 0x5730cd27, 0x5, 0x7}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001d40)="b9e403c6631e394958a05dc7cf1c", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x6, 0x14, 0x1, 0x4, 0x5, 0x5730cd27, 0x5, 0x7}, 0x0) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) 6.058899985s ago: executing program 4 (id=1387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 5.799122569s ago: executing program 4 (id=1389): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x6, 0x6, 0x5}) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async, rerun: 32) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) (async, rerun: 32) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async, rerun: 32) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async, rerun: 32) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) (async, rerun: 64) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x3}) (async, rerun: 64) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) 5.796796972s ago: executing program 3 (id=1390): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010019033dd608f80600b0a85d0102030109021b00010908b006090405090184435f070905d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fchdir(r0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010019033dd608f80600b0a85d0102030109021b00010908b006090405090184435f070905d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) 5.720150243s ago: executing program 4 (id=1391): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x3, 0x4, 0x13, 0x5, 0x2, 0xd, 0x3, 0x16, 0xfe, 0x2, 0xb4, 0x3, 0xc, 0x3}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x40000) 5.647355117s ago: executing program 4 (id=1392): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=@newsa={0xfc, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf9}}]}, 0xfc}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e9, 0x1000, 0x8, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 4.715335085s ago: executing program 1 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0xc, 0x40) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x5, 0x103, 0x2, {0x3f9, 0x9, 0x87, 0x9}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@allocspi={0x144, 0x16, 0x401, 0xfffffffe, 0x0, {{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x20000000, 0x33}, @in=@remote, {0x3, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x8, 0xffffffff}, [@migrate={0x50, 0x1b, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x33, 0x2, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x144}}, 0x20004808) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd590000000000210400002a3acc1981c3525b651cb12bc7235ef747cbe935af903e26629cf9ce3efc175ed329c59b8e0000d29bf7a3c0ef5fe5e64858d68758d22c9fe22cdf102da78f066712c4a64283396e2cf746f294a53c3d97ea3e473a01c349c541e482182f5083303b92350bcadb98f0d135eb9ef2174f1df1a5b61df03beb3f35b4605e618d15398c9676ddf8d729f4fe78b75333b4bc26b519b6d74de4c34053331734325270651e10d105bfb97df6dffa2a00"/199], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 4.677775414s ago: executing program 1 (id=1397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xe, "e0"}, @global=@item_012={0x1, 0x1, 0xa, "92"}, @global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0) r1 = gettid() syz_pidfd_open(r1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xe, "e0"}, @global=@item_012={0x1, 0x1, 0xa, "92"}, @global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0) (async) gettid() (async) syz_pidfd_open(r1, 0x0) (async) 4.523683725s ago: executing program 0 (id=1399): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x39, 0x2, 0x3a) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) msgget$private(0x0, 0x2ec) setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0}}], 0x1, 0x40010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00#\f!\x00'}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001040000000000000000beb126a300400000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 3.395372679s ago: executing program 0 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf2502000000080002000000000008000300050000001400010000000000000000e77811fa68000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r6 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) getpeername$qrtr(r2, &(0x7f0000000380), &(0x7f00000003c0)=0xc) futex_waitv(&(0x7f00000001c0)=[{0x1, &(0x7f0000000100)=0x100000001, 0x2}, {0x6, &(0x7f0000000180)=0x6, 0x2}], 0x2, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x84010}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x10000, 0x4f43}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c040}, 0x80) ftruncate(r6, 0x200000000004) syz_io_uring_setup(0x4bf3, &(0x7f0000000040)={0x0, 0xd47c, 0xf000, 0x5, 0x2c9}, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r8, &(0x7f0000000a00)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x11}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="c957f0", 0x3}, {0x0, 0x11}], 0x2}}], 0x2, 0x404c000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 3.377772491s ago: executing program 1 (id=1404): read(0xffffffffffffffff, &(0x7f0000000000)=""/14, 0xe) (async) r0 = gettid() (async) r1 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x37, 0x2}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, r2, &(0x7f0000000140)) (async) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000200)={{0x2, r5, r3, 0x0, r3, 0x1c0, 0x7}, 0x8, 0x7, 0x7, 0x200, 0xffffffffffffffff, r0, 0x5}) (async) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x1da, 0xe, 0x1}, 0x2a, [0x7, 0x9, 0xfffffffd, 0x200, 0x0, 0x4, 0x4, 0xffd, 0x2, 0x81, 0xd66, 0x8, 0x7f, 0x9, 0x800, 0xa90f, 0x399c, 0x800, 0x7, 0x7, 0xfffff5ab, 0x6, 0x8, 0x8, 0x1, 0xf1, 0x3, 0x6995ce55, 0x5, 0x7fffffff, 0x6, 0x0, 0xfffffffb, 0xca7, 0xfcb, 0x7ff, 0x7, 0x5, 0x0, 0xe00, 0x2, 0x4, 0x6, 0x5, 0x7, 0x5, 0x8, 0x5, 0x7, 0x3, 0x980d, 0x401, 0x3, 0x100, 0xe4, 0xea, 0x3, 0x5, 0x9, 0x6, 0x5, 0x5, 0x7ff, 0x90], [0x1, 0xffffff7f, 0x1, 0x4, 0x7f, 0x22d800, 0x9785, 0x8, 0x5, 0x1, 0x5, 0x2, 0xe0, 0x80, 0x100, 0x8, 0x6, 0x7, 0xc, 0xcce9, 0x5, 0x5, 0x7, 0x7ff, 0x7, 0x81, 0xa735, 0x1, 0x14, 0x4, 0x3, 0xfffffff7, 0x8, 0x7, 0x10000, 0x0, 0x9, 0xcbf, 0x64, 0x7ff, 0x4, 0x8, 0xbd, 0x4d0, 0x85, 0x4, 0x3, 0x10, 0x3, 0x81, 0x5, 0xd1, 0xf, 0x80000000, 0x4, 0x10, 0x9, 0x400, 0x1000, 0xc, 0x1, 0x8001, 0x3, 0x401], [0x6, 0x3, 0x615, 0x8c, 0xfffffff9, 0xf358, 0x5, 0x2, 0x10001, 0x4, 0x7, 0xffffffff, 0x6, 0x4, 0x2, 0x3, 0xfffffffe, 0x3, 0x10, 0x7, 0x10001, 0x4, 0x1, 0x4, 0x10001, 0x6921, 0x0, 0x2, 0x3, 0x8, 0x2, 0x1ff, 0x9, 0x77, 0x60000, 0xb34, 0xffffffa3, 0x9, 0x7fffffff, 0x8, 0xfffffffd, 0x6, 0x7, 0x4, 0x2, 0x4, 0x5, 0x1, 0x3ff, 0x8f58, 0x0, 0x19, 0x27, 0x6, 0x3, 0x8, 0x9ff, 0x7, 0xd569, 0x8000, 0x81, 0x8001, 0x5, 0xffff], [0x8, 0x6, 0x1, 0x100, 0x4, 0x0, 0x0, 0x6, 0x2, 0x8, 0xc25d, 0x2, 0x5, 0x9, 0xabc, 0x41, 0x9, 0xb, 0x6, 0x4, 0xe8b, 0x9, 0x4, 0x10, 0x5, 0x2, 0x1, 0x4, 0x80000000, 0x40, 0xbb0, 0x8, 0x7, 0x9, 0x101, 0x8, 0x7, 0x800, 0xfffff12e, 0x7, 0x531a, 0x21, 0xa744, 0x3, 0xffffffff, 0x4, 0x100, 0x5, 0x3, 0x101, 0x4, 0x81, 0x9, 0x2, 0x4c3beade, 0x8, 0x6, 0x3, 0x3a5a, 0x4, 0xb32, 0x6a4d, 0xfffffc00, 0x4]}, 0x45c) (async) r6 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x8, 0x2000) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000700)={0x9, 0x8, @value=0x114}) (async) r7 = openat$fuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x0, 0x413, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x10, 0x0, 0x4fa}}) (async) r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000840)='cpu.pressure\x00', 0x2, 0x0) r11 = dup3(r6, r10, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000880), &(0x7f00000008c0)=@v3={0x3000000, [{0x2, 0x1}, {0x0, 0x7}], r2}, 0x18, 0x3) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r11, 0x3b89, &(0x7f00000009c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, &(0x7f0000000900)="a48b407d988edf3eeaa2c725783c2dd4ba67a9894a3f5dffbf39b364ec26e8a8de93498f160925b8ed2b63a1cbc73ec8cb150bd8f2a57b45c817f11b53e2468363aac4c8d01d2d77e64fc093bb1a017c925a25229198a996c429b88edb1bccab56a8875e2e85be1e56a3c44b7191dc708894e7bb788742ae10794818da286520859e11d10be29d495a56a6cc9927d8ff6476a4683449749bd50823cd9157"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000a00)={0x10, 0x1, r12}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r7, 0x2f, 0x1, 0xfffffffc, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@cgroup=r11, r11, 0x8, 0x2011, r11, @value=r11, @void, @void, @void, r13}, 0x20) (async) r14 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r11, &(0x7f0000000bc0)={0x2c, 0x4, r9, 0x3b, r14}, 0x10) (async) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000c00)=""/74) (async) openat$binderfs(0xffffff9c, &(0x7f0000000c80)='./binderfs2/custom0\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000cc0)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x6}}, 0x101, 0x7}, 0x88) (async) ppoll(&(0x7f0000000e00)=[{}, {0xffffffffffffffff, 0x1324}, {r14, 0x1400}], 0x3, &(0x7f0000000e40)={0x77359400}, &(0x7f0000000e80)={[0x7ff, 0x1]}, 0x8) 3.039761956s ago: executing program 2 (id=1406): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = fspick(r3, &(0x7f0000000180)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='/\x00', 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x80000001) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) r6 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='rxrpc_peer\x00', r6, 0x0, 0x4}, 0x18) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000942000/0x3000)=nil, 0x3000, 0x1000003, 0x4010, 0xffffffffffffffff, 0x4000) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1b, {0xa, 0x0, 0x8, @empty}}, 0x24) 2.714236692s ago: executing program 3 (id=1407): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2659db42ccfca09a, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x1]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="07000000400000002400128089f009000100626f6e64000000001400028008000a000000000005"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000000240)) 2.458923562s ago: executing program 0 (id=1408): socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, 0x1, 0x0, @scatter={0x25, 0x0, 0x0}, &(0x7f0000000240)="a8", 0x0, 0x7fffffff, 0x0, 0x1, 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x188900, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r7 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) (async) close(0x3) (async) fcntl$addseals(r7, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000001c0)={r7, 0x1, 0x0, 0x8000}) close_range(r5, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4044845) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0xeeee0000}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xcc04b20ae0c98add}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44810}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) 2.375509706s ago: executing program 1 (id=1409): bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r8, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)='=', 0x1}], 0x2) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r0, &(0x7f0000000340), 0x41}]) 2.305368007s ago: executing program 4 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000019000100000a56b018d36f122d"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="140073e508000200090000000800010009000000"], 0x30}}, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r7 = socket$netlink(0x10, 0x3, 0x5) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'wg2\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000380)={0x1, 0x7, 0x7}) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x657e, 0x2, {0x5, @win={{0x7, 0xff, 0xac6f, 0x5}, 0x7, 0x3, 0x0, 0x0, 0x0, 0xd7}}, 0x59f}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r11, {0x9, 0xb}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x1, 0x1, 0xfc}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008050) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r14) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.144832033s ago: executing program 0 (id=1411): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x58, 0x60, 0xdd, 0x40, 0x5da, 0xa3, 0x9d36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5c, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0xe4, 0xe5, 0x61}}]}}]}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x34}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120004000000, 0x2, 0x500, 0x1, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x20000080000002}, 0x0, 0x0) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x1, 0x190000, 0xc24, {{0x10, 0x4, 0x0, 0x33, 0x40, 0x64, 0x0, 0x5, 0x2f, 0x0, @loopback, @broadcast, {[@end, @cipso={0x86, 0xb, 0x0, [{0x7, 0x5, "acd09a"}]}, @end, @ssrr={0x89, 0x13, 0xbb, [@rand_addr=0x64010101, @local, @remote, @loopback]}, @timestamp={0x44, 0x8, 0x29, 0x0, 0x9, [0x200]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005400128009000100626f6e64000000004400028008000300741900000800040000000000080009000200000008000b00", @ANYRES32=r9, @ANYBLOB="04000f004000000008001a00ac1414bb08001400060000000500150002000000"], 0x74}}, 0x0) 1.736982167s ago: executing program 3 (id=1412): unshare(0x2000800) (async) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1ff8}, 0x80) 1.734456996s ago: executing program 4 (id=1413): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x800, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x4010, r0, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) getsockname$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8400) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f0000000380)={'\x00', 0x4, 0x8000, 0xffffbc42, 0x9, 0x8000, r6}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000003c0)={{@host, 0x10004}, 0xe9, 0x4000000006, 0x1000006, 0xec}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) accept4(r5, 0x0, 0x0, 0x0) 1.527222759s ago: executing program 3 (id=1414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1e7c80, 0xa2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705a, 0x3}, {0x200, 0x7}]}}) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0x2, &(0x7f0000000140)={0x7, 0x6e, 0x0, 0x80080, 0xffffffffffffffff}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x2, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000100)=0x5) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, @value=0x3c480dc2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x4fc, 0x0, 0x25, 0x148, 0x340, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x1, 0x5, 0x0, 0x1], 0x4, 0x5}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "8aaa53abdcd262af029c792dd41e857557f11bf3df0f3adc717d2a04cbd4"}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x558) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 1.395197745s ago: executing program 2 (id=1415): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="550d813d3ec65c1130ad85f763ef441c127b6c6047e23566c4ba9ee1cbf19f1d899c20d279d7a6ff4fa28b82af2c985dac47a13f099986043c819685c41088ebf2959415c620a954782ec6094d6e05491cc7da6879ab7d5cdab1e7e33035aeacd287e7646e20b9024644f3690c0363949d2b16999a5efd32b91461160362a8c8396654bea971107007762e75ce748b8f", 0x90}, {&(0x7f0000000580)="193bea0d7396cffd5bbc451b9f739cc20849cf8992a6d6cdb2c91242f9193dacd465d80c149c8295d3777adfe183e0135457b76a7862b9c52982c847960ff03bfcd5ededc617300a788732ba508b776f82f1094cc7266a837a5d07e303ff425c0edbad8914ae32053bbb27eb74f6d22d011f8367e119f64b0a6fa24483", 0x7d}, {&(0x7f00000021c0)="3b7efc81598d1337566f266b28a67227aa0ea15c72844a641757f9ca1ad735a4b6e7c2a316081507c720979413155c36692560400af4bf4584d91bb7b88e5fde5742b5d534719ca5e6429ab053e2fc1c2cfd51872752e8c11fae068c2b225006c96d6dd291b166b6aa72e74cbf5307171b7bbb5b3f42a5c8825abbe820bcfd2df2601437761a97a507502590e1a35a03a7d0acfbf7ed3747bb710cbb01e47ec402c50154252f7881ae34e22cd0f32bef6c042430a943e28e1148a812c74df7dede79479279189c1431a732f00c41cff0fbe219fce679fe6c4a4021403e9e4cb59145de8b6d5556ac4ec11518264cc50dc0745df82bb3de24aa685c97393632d486a6d5495d1ccd72968dc823b76bc6a431d39c599019beae4065ab199a0e58f2210018e86e78d42630a6fd281bd4e0d57a311a3a95c68a9743a015b22f680323e5d0db1ef749b2ce20a306ac0cc50f9d1c1e9ec706e2f69308d587b6c2ce4f5d630f32b84ce1f0c98d114d2316c7432380a1136d21343de865d60a44f906f44620b501bf97c1d92a8c92e2a7dab65113f3120a68afa4e0a1f375566eaca87ec27d534d09d5a8d51a78f01fb88d89cbe232237e049a6a22e28db19877cafb0ac489cb0257e9bda5f99274f0714b2da2b6884f8ab899f04711e2a633c28826bee92ce6f08c93b67659298f5bc0b3db6054ff60ce70324323097661030f3263f8997398807295ad49b29c24473e1b1a4a872c3d104eac16e2f6f55fd55e33a8a6c2791fc06370c1233736731ffba5117edae42a4de00fd9fb4e84378a01275e30eeb028bb2fe9c7ccc6536b8b89a9029604426938bd38ee95bd3dc3e889a1594f4a1c199ff75419194c032f40af5d35f6f96b056ba53c9646072186dc68fb4b6cfa0b42442a75373b0409fd6a1d5a563d5d6c81f50cb457065e04a7499a363a95a856a8e83fd94b49c7e48d26a951a9c5abbfceda755bbe69f4c87f7c4bdbde90954fa0f610b50021cc5475fe57cad112263f4526429a8f8627544e5c112e495a94179c8700d231954e6208361565e32a66b9d9e1e77acafe31cb354a5da5319f631900b5f49fabc5d13e588dd3035e53659e98c92ab5783c5afa45360e8b13f9280173cf8a67482b139e284fe1a00399a1a5931ca7dc6f2e6d7758b35e99f1c7101fc3b6ba3665864a0f9950b04eed6cf1630d21e6e3c7ec772eb002c5c0dbd61cab18b395d905602c4b06e7a0f467fe811eb972301113c85ab2ae48dbbeb52817f984edda1e10bd76ae1eaef73cdb20e62b257dd9f000cf7fa41faf9a865e79232d47a0ed55672527010a53565f45d8b2c7f46fee21d0de519c6b44e977a00729baf28727574c87f60616a292121f011037630d1844f3e987a35eb9f75ebf1833dc4105be0374ba13b936f537c77f5c4da7210536a4b2d288c4b876e3bee4a5a7b907e2b68f4fe57621ebeed8e67114d28798054f5ec28d5382d6d057cf0d22dd31a0efb3e85a72ceceeab6823c2ec982788b2b697baf590eb9d2ead8085fecc6889520b05d52c958fdd3186639fa45c670ed34e9fe596efcab13a983144786df8ae480b7942c79889b76ee1ee00a630259bb675facbbfc568b20641a489b2a77a1de1ce3f2354afecdd1a9eded3d8f0d424664fcb41a5f41ae3820d6556dcad00fe75566a0bdc622ea30a9589c1c62bc8c6504d8dceb2463eaea94f4b0af90f4cc66ecc4073b1ce281dd1ba11e6e99732e2598c3bd9d54a97de27e9edd7f190c537b8d834f80f7f3840e7c144d9c1c84b5d14db9150ad2beba03d12b725c28b2f69060de81ee79b716eb61c88d838f6576947d3e75f944aef59d36cab6760764727ea9bb50808fe2c8802e9b29e133622258e289426e82c61c2bfbe4cb97c3e01fff8cfe9a10fdbb16f0e750bb32c5a69f697d9a7b5c83948d4830be98d85e5fc726e1d394c32aac5538e7ace167ac2477530e352fd08674ced2857a31d93364762946cfa7d7cf9a7eda02051de23dd00bbe86f95320a3c256802f43dfb44dafd0f9009b623a646fdbfee86ec3c25e2dde30cd382e8c34f5d2edf5693473380ed440fbddde3c176f69d28a895cae30aeae3f97fdd7cf95cf90c9b9da56478593f81c00b6d47a1302c72bdabb79fe654532d0547e831e009c1234a80272c7bf4acb55bfa3213b31d4c90e5a31714a0fefa7657e82ae604016235ad4d86894ad4957fdbbd48afdf04ac4982f49e9b8863ec78096edae3a07324082788c5a41150fa32717e6fefd813cfd1263c36427e46b02243630b16d99c2748cd4a53461d97fae82200de960d3a57f7b21172facabe6f7cd7540962116ad832590b6b90344dec56706f690a29f555e8554c1a9fb5cacf0a293c17e01e5896c68b30a6409a8c5662b6ee44c1c79a0956fe6693e257bbe9c04e2fef4d1360f838481fcb549a2e8125ee76264a815cf6cc10cd574977692c93c9fa799da93a28fceecd3248726d28dcb22893222ce63a03ab7a617e654c8d95d18b4d034bcc23ae701302844cf742c8737f53b4941ebccbb8d451ed5834cb0d02e9b8e459e1cbe5e030ae0023fdb56932986bdcb42c1f43efcf3460208dc6ff0c17971dea66d2c43360dc802c4dab95503e56ea52d8b41bc96c62977c5cae1f1e12cf0d0bc3c40cf3ed61f8cdadbfb6303b81e2b25b0add5546129c3c650142bc095062e0fc942b545d78d36111e64a188c6c02504df2eb1c0b998ed666737a7f149641369bb815a6a1f586cdb7bac7ca02dd27cbdfb7954b86e3c2ab0482fe3c5ea40d0b006e9c62d7f429c8443e47ed876c21e7e8b486a306264626e193c20941732eb1ce3a2f13b3dafa8fcecbc100b477e6875117d91d309b56157319014c476aad5e425e4d07e965a649525c1daf87bee35a397c02356c5f28672ada5f9c066826f3f13d9c225c1b857e3588cabae0cd8a6b407ee48e760b811b1ed1aed910156539ad38aae18523acc9500f86fa695f485e16d9906feb00b2e47f6ab0ed387046e4140bfe9bf088de8c29120a195026822a4854b9a01b0202e7b81407ae5b1185e42480b82aebdf6d60d1e4dd0ff4b93f778d36272ff2f8f1474d99ffa8e3700c8584461a63e1bfbaefc0a8e4e8def46e64f67cee51dce473dd8de9fe2ad519a6c3e31884df9ecd016a95eca50f0af4a13752f820add5c2ced827c105abf6f98d9cc01b1d921e966a9413381421725b9d1417b69f6b3e4380c54ec8e4fd2894963f1e279309c37135d27be5cfff8119223767a94ca39bcbbd623322aa4d9ec4c2544261c42200b0f946f840c8c5c240e973fabd4e5989a592feaad952b5347e76b4844d5db1b0ce7dee33eb83d76c32324b63b0e425430398f956f5d112377cab1471c559b3626f4daa3737ee3040ed0455a0efc4d2fddde113573614e3c2348063f63e44ea4e2b2600ad1156a01a27d5b2037870775f5bffeb27c0e0f4a702a3965a5179980c73154ee2e2ea3e0fddc2d539901f76c6792c079defb707b7ebf02228f360cbb3d5a2219d341a39acb7dc01cec07ddae22b09766be898be6f7dd5addb8e5c8e26b933d0be71d99207f949cb8fab37193bad7cd1078db728c7c38228dc2d5d3160b50148701682f7da406065f6a36329fd861c4a556a122e939e1422a5f40c2b58e54aa06919270434a7b58401907b0031a9b0bcab08d914ca5856e7daeaca5a0a38e102b7be19c10224742551ba6bda073d1af5d7cc6d6a8e5d16e3f1074537db3219907499a0c8cd8af95ceb45749558c12ac6d480740ab6029ad6688486d3e49867d105933d0210ee835c26ac21f0f5b15c9fd0d2eaccbae5df3634d24bfa66b57f6182faae5a05ab0c155feabecb5a53ef60ba6ffac15498cf5794b9a3d022ae56c1e6d1383c000fa505551997f9172e3a064886d2a37bcdc6cd5a3594e2754b32abf08276eb59aa5f9bdb6b48f89d679ef562d3f2be4f7717f0716abe1acd02047ece119a0f18d8e68d3d79fc76962d26288895ca8f3a15d4929f227e4158018114438e7b8301f6fef0b226fa692d2344d5772ac6a1d1f7669dbbc29616f72b374d7cc6266b2360c2eafb12fefbcc65d6051a6e4d850f45b549742a9f6902abc35a03ff6f772e0f82e95fd6d734b8e45440f81de6545489485b801defb2242d937f194654a60b76fbd1deb94d4c963581dbdbc2e1868bb68171f6fffee725642801241e309c8d8963cd7a20661356a8f7bac543ded39d0933f57c45cbd0f2c6fef3d27fc9ae33c3e6798ecc97d4110fb2ac62c6a60b29edf0c86c8b3e8bcb4bae9e0c86cbccf196f3c76a7b9c44fc9d20f4af68f2ee4aa5aa3ac39c4c3d9fa00b254fb45d8acac29c66e36454ec2aaad4d9b86e3110d591f4fe1b2d20f42e722d48518c0696330fb7f62fc34ca7fe1fdd82d313fc56753cf0756caacfb8c8ab08e2a1058754c88b2b375c2dac281ef06502dd17fd3f96c0dd93e278ca27b38fe7fee147cb7ee5c4570dc98abd8733430c2950b7629964b42bcd4ec9f8f5c8570886e6fc2a0afc1a1d49ec0b2e116be4da3e87e25b1efe525ed6bc9903578587383989e593e3bb0febe32c62d9f614406a0fdd9188bee9946d64c4bf58315570396c54760cac6e96562f3ae0db14922d9dc384568a8fb0ceaa4efe05a08c6c78e0b84fafd8b6f9bd3a17648e7c343d17eb7f70e74386b2c0dd28a9b665f30a6c0eb3ef5db2f88956cafa258257a6817f00c5953a75a2138a1a21108734778a716cbbbaf09a31108aa75a07a3164822688875cf342f825409dd123bc4b5b1f320cbde055a0f45f0c4d8cbd0b5936d1057906bc6a3b3d6cbe08baca20a48693a237f3324672716088d5e1b0ddeff5044d9b87094abc6f584ca56e63037cc0598c4575fb7dc3a748063b4edf4492316290d3c7fb1bdae0bf252a7c91c8222253c93325704ae4d8e8fb14d49e9bb84cfbd5b9c52a7d76a93297049501dcbdbdca1d79a6e0f4d08a6ce7c8dcd3babf41125b9b1318a3ada5125a6e1e63d2a930f42359ca719d90c8606bc9078f84b5246c1fe44bc7b2126547d8b2f31075365a19865291f9da173d100269e57491fd9cc9bf226d3f7ce215001cd4c373fe1535a6d8072e3455ee8a975f9f3a8fdb86b45873d2ddf82510bb42f014303d5462ed183c10684fc8b01111957d1478dc819a25f24257b37084859fbaaff9c582cf3230d2b8ce020142e7e9968477f0106e673040efd279155880cb80d7b69483ec31dd2622219fcab420a054cc086b97cefca2576473a73b422afa170d91198c3f1fbc121efed75390266972d99f3f6b8ba4115a1a60f7ef1ede45f6d452fc2b3d3485fa55a7d9a63465057807e02eacb530f2fbe00eb1561d66d6afa49cc8724a1bc682e30a83db435d67b42f0ddf15b3bfee41c74148974f7fae855935d120ba2e7cdfa27dea21f14e164597e5b93d15979e20264f6a116605d657d8b6316a1512f3cd56e7b49f46a8fe667ec87281b05f577fb440749cfee99681048f1be9e34d7be67e57d7f5b17f5715928a792517a6be97f40776c4011b3e1f6708afdf3cb141e5dd814d8f9f0d1a0c695251ebfc384a21de1121a95b64208a3895806458e60f470bab8182b96a8875f57831c5e76e5865ae7e14e1c2da603d25f0c5b6f3ee2eaf1444c94730a13647a3cb9c72c210253519da681390fce4712ca4bfe4f21e46494e4ca769617f671ad8842feb21428121815ff296168db1abe66ae4ab6d0fbd3770dc8b75fd656d11fd83e05ba4acac9a49de255dbb03839130c1d5023807892167378c2d6f387bc25af8d08a6d68fd34fe4337773df8e44b31b405d3b7473a892203bd2f1e471f70edc9988854b69162b7ebf3be33f92a365e", 0x1035}, {&(0x7f00000001c0)="a5cdfa60ca24e51ada98c276fbe0b517c606443a9cd2ec9e33ab70f0ab276d8fe16f8a624559036c84e29a1bb1a482b14a26dd04655e", 0x36}, {&(0x7f0000000f00)="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", 0x113}], 0x5, &(0x7f0000000600), 0x0, 0x40080}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000940)="93d869f65d3546aebf6fd3c84b07bb44d9a205a8b7415f01c67922c492c4af65f9cb74c84fe0b154539497d838fdf982119610ed281f58e33a7298a06f44c148e132f3d7e6017e08", 0x48}, {&(0x7f0000004200)="bef25357545be7dbc538935549a4f014c2ee25c5380e1b04cbff69810d145a6a6ae29d4a1a6973a2f5b60231ef8a756417235702eb8017f4076e7909f5a1d5be7c66755f4770d73f20464089d230a096d7a60034c3b26895a201f1541f80ed93afef28c8882973d007d444434551411431b9d01589bc787a8357dfb4b18764254c71b2ee5bc70e847f141b57c267b80cf330bec105d2423e3ef45066305664c14d817fc02c65ffd63ea666e6228304c0d5dcd77d321f1e8b1987b138dbf6fc35185aa4ce9c1a80779da2ce26f2d62cfeb437d669009edc0f8a8a525d10a5492a6dea70c814c44e2cfe5d64b1bea4bff4c91f42e8547b6a9f198f28cfd7146782c18e51d2c35affd9f8b37fadfa0e6af651daef83fcf485d6aba389fa76ecb44263d55635f92bd2dbca92706f9abd6e3c906eb32f8915c41049298296e5ef36de32156b1cf6bfeff546a63ac05a0e8246c5441bc32c16ccbd808a93ac2fc5137e9af382aa2f3d45d27ebfb61fa042de24af775128b2b52ab1a173dc606144bae55652e377cb409ef62ed559935bc0ef85d06488808e53448a2796253ad2222583a4146373452a479f6faf21b10d7ab80843aca829cde2944eeb96ca75a514335e9e544f074302bb0b8722cb2adfc8d1925b90b706700f9c11b299c08832647f7e971882a529acab108aef82a138b18c921d00a79d4c28a8fdc25a1232b149d4ced2e6873d21c5ba598fdb703e16f465bbe3558f99659bc3f5372dfa2e6c6ae132425896345c9ffa2e8eed028ac1ef0f79d52884bc2ec5a09b2baa43c5c22f5447758d6836411f26b138698165d15787d74d76d7b3fd28b3c6db472443b9ed0c4039189c6f1f14f291f614dfdd501fd9d56cbfb8bab94b4210d1e741c334fbad49064dc26b9125572068a3a5ccebd6a8d108ad54cff7e234a664a8df4e34317f6beb46c4d0f0659365d0671ff76a73b9fd29a5492625aec0eaa060034031fb0e68f86c74305340b29c2330d90fc6e62865186f69d9c3bb7c3f6267d67db244ed1d040e7f12cd7f941c26cdf182efea7173ae56da87776cebea05da56b3f79d72da139cc0d4034bffe7a4284034b6b60aa9aaaa63ba5c4051d3e141144b3413297d1588242bb4e61260970554ec059968966a18c296d239ae85b8e14b13300a1a7c6445f098807df19ef88f5c026982241e67b875bcb2abbf40416038597938da49669f489a0efc02ab7a5bf51f5224e45d1b289c9864a5eb9d357f0e56c904623daac3f4b1e58b260ca34257dc80a3383db8ba7d4b815535a149ea3a8abb22b5dbe673ca4b8fe7d87a4c9f68395db77844b00609f1e6bc2314ef64134ebd7ef153f1ab5078636b803eaa567fa483101fbde0499426e67df2530f00913a5380cb7fb7fbe6351a62b1ab14bcfa323da1cabe828d8f0d661209bbb24b07c4a5156d168711c920b1be0b5a99268b632eb0a5b686bbc68db7989aeb7d6e9ee549ea14a8fefab1a6bc184bd8f6ac6bf41406a6850ecc8e953b51f7c4fa578d8651841700aeecbdeb437d4938743b8283c4bd9c387c0ce23dc1287bb3f80ac20e4c3e50f604eff697826c054e1bb19f4f4edef3bd9ef539ae36d2f239d974896289345727b5b15df9375ed3798b370acf46d97d37652f7f2377852651b7e707190cd5ebaeca20f0be6ba7076e0acb4f0be243f90352bd27c77442aeb3c270e3222769f7b15d4c762905d94e1a28ce41646e96545e13a96509c3a67c5226eb19b4a0305a250aa2b5254c3e9d5af7b5cc7d11fc52d32d0ccbde184f081653f30b2f63bd0db504465d7f73f977da23d14372375e1396bbd037efce72a9acba9d67bd5e3c189e22fbec1ace6934be1b567e64cc724f2d1767d475623957ae3fcd291d380124aa938ddf5c14cf6d1e92ebda7d70c2f8c656897435572e684f12cbee7a213797b0d53de0e689c00f1fdc393f78c456e8fba167a953d7d340e69030fdd463785c0845c320ed944933893e2d618efbf1cac13f78472f33e6e48c5ad64b3bda6055e27c56c8ffa168241fe114ea719c30f3526740dca36a2ae848ce4324c944bc8c5fa29b5835c376ed290eb78f35460cc612dafae4dacef077849a37250b69d0d4ff21085b4b95eab320947dc89a57d86d12df88ed367b81dfe744313f889fc6d83947f7575ac6f0ca54b5bc2d68e6db02bdbc0e37443c970d673e372000f028b204420b499b5a4fb053033a41eacd7ef9f8e7b721d298c1bd44beac91d2e597f10628fe9ceed714e46c6a39ff67bf02c0a637239b456f1d8b1f6999af8093ddd87fd720a926f3638901759e2f1d2ac7ed1e6c9ccb987e24ab8d8e7b1e8862d9ffe6f6520e656b23ab3793fb2411da09fd6ad5d4585c3e8c0e2de1ccb3b21313f279adfd648bad7d1e59c7dd5a0ff87698d2ee5f9489281c1c1d29a32236afed27f8425dd85f106f7904fa6e9272a8377a2b54db498f08b5afc69e981919699d337cc437f31b39a16a02bca4066be4e707392ea02bd2d0bb3c6a079b97d46f42873832d04658de83efe9b2943c21cb98c92af76ebecb9c75a38cc599de55d1de8d5f0933373d1d8bb13636809c8e974486c5ada7150d42d7a1d73e1deee21a27a3049a9cdc6d11361bb4f98b29a2cf386b1e13f4dcb53ddf2a386076686325ccb8c4ec94a20f3fe6f7aff1ad0be6dea67493500f1078989d0f439edc5b8e594365101959b69a01b3e3c7e30cdfeafab206164ecac7719ec2d2eb04bd195d13ffb391f7b5316d2cabaaa019bb4923740bd948022232bbba15cc3124b6577b468f276e0fcf451e49383cf956691be78d98e8c860ebb0af3251560934f743f6ea0440bfee75c8ded83c3fedf4ff27150a335e73f50b6726021d2ec4d907dfe0cc3ac98490f6a0cd3af5db1d7ef20c34056395ee790f73b183c6ccbe2cd65e80de57f86cc550a48241899eb24455ce256198f16759ee0d062e940f4b6d5b8b055f6b43a8cd09f2abf7f5f7355507b746ba8839838c88d358eff01e60e53913c969a771b2166a4ea2a50733e0f58dde4f3f278a75d324d9dfa64d4e36e611aefc0f91abb69f99ab6bc749f0127edfc7290c533c4cc73a2c4f5bbef7a27474dec482ecb92f15ebb99f85832f3c250425d95fd3a5ebb493fba08ab7cb143ac93bdc014c8bb169ac48261f431641d053d3824234ad930adb67c442f5c5ca7475f17ec08c7fdf1a6f511bd3de88e90558091effe86e169447d2076ae66920b9a7b23b28fdac0c70599714a32176f5a13317d857650cb7e3247fc8ea571204c1a129bc212c5cd74b516e8321fccac62dbf4906b858834c470fdfad38f1503d4a5d6e38c29415b59f4d0a47a89897ccf073c670ec67a57249f9dbc367345fffd1eddc278842c06c53d3e1b1dbdfd9d0f5225bdf6132d16921d436ea184994f97ad4e3af2dcc8794a80b62f66b588384b682a045419656595eb5a7ed4269212f2f6dc1e151b058d7e9a4a83d867773f02d9e17adfcee0bcc23f1a0f77eb0bc8fb38e684aa51898928057a23a878266bcc146af1a8375e0dbc07924e0c32e87b41e2ce12dc6a844c6edc175697826bca8d65360ec31c6a3cdaae2e0f0dea5c98da61eb61c1db37a66cbc5b4feb3148783dc03cb27460246af2ea315512a6f529aacf9af5e677fd31c862942c9002650686ddd88b6550af4bdc3fc00a0d47706ffbe70b5340bf91872c210edb7e977de443d7173796c21070ac006730c64d65d70d3d05493aab5eb3568e9c616b84252def1de21e18b1d30397bc7856578a79e06a753a339375a9e97b9c6577874b6fbd84e48f944481e34e182b612908b7ba3f0e04288ffb1853e246250609ee3399f7636e7b37c6a8b33e55fbcfc982da4d7592a416780556ea12137719446ffb291b21d91dda771308d6bb759374988d5b94dce6f42bfac2e2c80756ce4ec2ab3410594e555ee8002f40b011910d0276fc8301db518e2d8eaf5b8b8638165740de2ee92cbf815efc29e2ffac7653fb67e28c14c18e0cc73d2b3af5b77ca349440b123ee807cf2921513ddf7eeee85bfc6f0c5dd5f5c4843d4e90f2c1417d47e5d610b57c78eb51c790facba9418579e539898ecefad9c76192e7863581a172ddbccfea4eaa8acf8b76dcf59e8b2b06dcb4613801a9b420ee8f57c8bea4ba661436ecbc5f0595c91baa6e6a698738f69c4f34636bc81bcd95dd3d32e8dfdba2822479464a7b2746657f7881d3d14c7d343387164130e3cbf2af787b8416ed8780774cc7b8520c9b326d8c2f66e5bac8f93ab0b8600410a74f9c435771950a2a10b5a6fd06eb5845602888a351c5926554be3717356c7a69ed8d9deafaa5696479b60f5ce356315d0e4b718aa595b0015319c957cfa169d2e87551f869c01ecc21c3bea07fc33634254ae74287f588d631bf5cf4fd0ad429ad7dc009e6d5766ab7b6ec7193d4c8d0fe6a293f20c05f67948ea082a0ee3ab6896e0db726e92cb6c26d6759cb716f39ebcc85d1c79a94486807678f85348102bcbd4f4f89cb2b3d6be33b4f008d1f04c03a5b8788c8a1f1e68422d3c7b246455aa2c69f794505c07480930b8a935eddde06894d9a29a629185931b64b93a5d2a528c6072e454cd092521294f85f59a59ef64734e3ea6e67f160d1b201fbe572351be91884de6cf638a6bfa5380448929a8da47ec89a9db1d45fb3ab2586e66099427eadb96bb3d60f5c11a5826d33131d1bd399aac43843b1ff48a3735b5b8847105ee8a3e9f5ab2a6e3b92659a288cebbf20c78bee689c27b6a09594abbdf926ed423e00d6b8241a52189b5a5be2d448fe3dd19af3e7ed573ac8c7d31202578049f5af7747279035b367dd32224d36e07c6daa2d7ae494a95e7238e7c848ac6526b23d4e6ae3e8538a464f87446db253fa9cce2e7217179c78311144c5114c43613d1cc9060097d7f739af4ca3041de6556e7fe0febefafa0e1f6206545ac060b59ccecf3b9c73d5d8438050d6532159721e6492594c1985038a244eac803824e6bef5d99e50829eee2d30c797b5012ca38642afcdc509457d0a1b6d43c1de7fc7b08d4e943d2fe65d960e165ccd5bd011d4428ef5d8e809866252d6762925c2959767a0884bb8bafec700f58ff68df5c34fc5de6eb2eee5eb169ba6764168192f16925c86087951ceb3a780fce11e21af90a403a34c1cd241694e07d4c5c061d6d93887046851a36697ac1e047f1092f1d49b4537487aaa0f1b377eac0525ac3264c77a4c47065857fef1fc1dfc7de74c694a32c73115a7a08f334a6b7e0b2013f4739394dccede88f9c4f60da60fb66c905ddd286d95168879da8d87699d7bf40c95591da581586167dae3658e368ce69754596384048b3d67d8c4e1d91fde98b1a82fbd86b80cc0529aa16db14072706e47be8b903716b1b1e4f30ded1fa3f332ff87b58e4999e88884aecc219fe4f9155aa6e4cd45892803e191bc2f7274a618f287cbd67b3a2c2b5ab2201bc82c19ca7b521ef04d199cb0c8fceaf22ba9deebd4944b54eb95a5805e9fef18dbe5bd9ddf3cfa47ecd90569e93e676d8a60904d4a1fc7794b68f3e6fbab3af7e2ec457083fcbf581a50ec0a0b07799cc630f1ea88853ad262e8d5a170c19728e0e4dcf9e0b5d2e87ecd08ed83adba17136b398a7a10fafb5b67b04bd99f3d4fb7095df59f677b8223f99750dce708552659ac1c17a4f4b8a3588e55bc0ccabe4a09e9ae3a004da24edfda9a4f932c11f36d4f23d5bf3d4bd78ec18cef1d22a42d0a6b66d01a46d523303de1976fb2b9f4a1af8d3", 0x1000}, {&(0x7f00000009c0)="3683e40510e97f71bd365126313ee46b08847a94a8ed9099c825581b7d4864368a31dcca864b7f4dd88e4931abb4bd3e55b8ec4407a07326840bedb1f9419a2a18f2b46cd7860a1fc2ecf20218b926944aa68afb0eda261cd88a3a63aec736a2a2e3a6f0380360bb33dac44e2cc4ff8bf82c1cb56cd61d450ca7873bd111c3868031917ed0f8afdf7828970b7b8e73829c84e0f7147f7130f320ffb7f5676be5c3a3d80b06e708ed848c2fbed9e2d5d07ddacd0fe43be54fdb19de2867ca3dfdd259a91437ed16618e8182e37614eed7f52a263b5d45801e06a8c6eb1288657440aa6cedc866d9fa9f93fd68956acf052e", 0xf1}, {&(0x7f0000000ac0)="4d75a8b3dc4410eeefa74f705a3bc3a02e7a505c26061420d6a5fab5439f0b82ade85f18497c771a7cc2193c818e9af842df467401968ecd611481a47e3e075a56d568104bc21a64b3a68d29be21bd15ee1d7b882eac12d22ce2fb9d9b830ed2bb0865db19011f22fa94120a2ee92e1246fb9c401b281b8f0e1d130bfa3563e50a53c657e37e3c5376a881663f9aefd2618ed8d9c8cd442ff0f300c85819fd9e0d9ea8d29a16165554bf44c23bf6dce6e11371feee4ffaddaac50be9b254fa769eed5de1948d90045fd55a6a870c193cca98ea637e9f70e66833bfbea3e0194a", 0xe0}, {&(0x7f0000000bc0)}, {&(0x7f0000000700)="9f2b6ccac2150683853e4877b80e2c537865f670b6ec61108e2bf5c407a250f6394527a4074b31532ca40aa41a85bcaa3c3e794049a423722369e5675f72b0f4b1d06f9effa2c1c0c8d59a26f184eacb856742799444b9e7175bbb809c3e2a7e383ff175a066aad588cc2954e93f1c6b56d64b29ffabe1f27888665813e05cc200d78bea481bd349a5e54608d3322080891ebc3b7a22126b285160dfff1a8fa97dd600d79464", 0xa6}, {&(0x7f0000000cc0)="98d872539e3dd7ffe93089a19ee60600e70856e77e3e708a1e18bb0c86d52418bd6bbe8d182f0e7a548e00"/67, 0x43}], 0x7, &(0x7f0000000dc0), 0x0, 0x4000}}], 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000005140500000000000000000008003d0000000000"], 0x18}}, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00', &(0x7f0000001080)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xfan_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdeE\xa1\x88q\b\x04\xe5\x10\xbfuK\x1e\xbb\xc0\x85p\x01\xcc:\xa6\xc5j\xeb\xab\xf70\x99\xef\x8b0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) r8 = getegid() r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000017c0)=@o_path={&(0x7f0000001780)='./file0\x00', 0x0, 0x10, r0}, 0x14) r10 = openat$btrfs_control(0xffffff9c, &(0x7f0000001800), 0x228200, 0x0) r11 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00', 0x0, 0x10}, 0x14) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) r17 = syz_open_dev$vbi(&(0x7f0000001a40), 0x0, 0x2) sendmsg$unix(r5, &(0x7f0000001b80)={&(0x7f0000001480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001500)="b42c55ef54b94a144b34be7758f8f89738b72776d6e9d86b7b9a2b3847ce78f07ce9d9eaa728f22f9801b469fe8ce4b1beca50f373289d", 0x37}, {&(0x7f0000001540)="f37f84b9a57daea1637e20c66b2ac3fa570a9474a30a39b8a95f9abbb4985551d55c7dacb93f2c5f00f20c608fb77c1a97754bb05518706dcd6254f613", 0x3d}, {&(0x7f0000001580)="9b276254d841ca5de75875f650936aa2dd01352677bad86beabc8f03b1a26309f62e482d7d086cec13139bbad506fe04b7e41024cf21b20a12d1244d10c8de07a226c8f52262354cdc6964d8708378db495f18a882f65470c1d593aad13f2cf028ca91c282286656eb04e5b14a65b6b2246cbc97aa3f6590474ec076d5a08eebe838866b393de1843fd0300d0a6a810abc53ac4ca247375d8fc6a36fc91ece9834786bf8eb530fbeb506b784f7b59aaff2271a7d5ddb6d24fa628e5b4c8884b8bf0ca32009fccbff2ef9ec5fa2869c87b6a43fb2fa705372ee4109a9", 0xdc}], 0x3, &(0x7f0000001a80)=[@rights={{0x20, 0x1, 0x1, [r4, r4, r2, r4, r3]}}, @cred={{0x18, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r2, r1]}}, @rights={{0x24, 0x1, 0x1, [r10, r0, r3, r1, r3, r2]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x18, 0x1, 0x1, [r1, r15, r16]}}, @rights={{0x18, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r17, r0]}}], 0xd0, 0x40000}, 0x4008006) write$P9_RGETATTR(r10, &(0x7f0000001bc0)={0xa0, 0x19, 0x1, {0x2040, {0x0, 0x2, 0x5}, 0x105, r7, r13, 0x3e7, 0x5, 0x7, 0x2, 0x7, 0x6, 0x80000001, 0x1, 0xbed, 0xc, 0x6, 0x9, 0x9, 0x89, 0xfffffffffffffffe}}, 0xa0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001c80)={0x2, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000001dc0)={&(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0], 0x5, 0x3, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000001e40)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001f80)={&(0x7f0000001e80)=[0x0], &(0x7f0000001ec0)=[0x0, 0x0], &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000001fc0)={&(0x7f0000001e00)=[0x0, r18], 0x2, r19, r20, 0x9, 0x4, 0x3e, 0x8, {0x6, 0x612, 0x54, 0xfffc, 0x5, 0x7, 0x3ba, 0x0, 0x4, 0x8, 0x20d5, 0x8, 0x8, 0x1, "006508230cc8658bd6b84b7b600f7f24b21da0c28388fdc813c36a0a40a41069"}}) 258.816417ms ago: executing program 1 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x94, 0x2f, 0x300, 0x70bd2d, 0x0, {0x4}, [@typed={0x7e, 0x29, 0x0, 0x0, @binary="94fe3cdd09205c58fb7afb577317c6be5a4918adbb2f3cc72c1cfde01e9ffa828aec71bd731c0af17d8e112dac3215728348f9505eb30118913da700b2c59105ec599381156dc6cc1c204c41645dd43708742ac4ea38b14ae7f1851bc92099dce67deef6eb2031fb8eef20447dc98a0ee5491e3d66c99100b303"}]}, 0x94}, 0x1, 0x0, 0x0, 0x42804}, 0x8000487) 185.816948ms ago: executing program 2 (id=1420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40030140, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206050000000000000000000000000005000400000000000900020073797a3000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a00110001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) syz_io_uring_setup(0x587f, &(0x7f0000000240)={0x0, 0x7c06, 0x4, 0x1, 0x2c1, 0x0, r6}, &(0x7f0000000040), &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1, 0x1}, {0xfffffffc, 0x80003}]}}) io_uring_enter(r6, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x134, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2b4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) 0s ago: executing program 1 (id=1421): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x9}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) (async) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r6, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file1/file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') lseek(r7, 0x36, 0x1) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f00000001c0)=@mmap={0x7, 0x3, 0x4, 0x800, 0x6, {0x77359400}, {0x5, 0xc, 0x1, 0x66, 0x3, 0x81, "d7f78517"}, 0x0, 0x1, {}, 0x0, 0x0, r6}) socketpair(0x27, 0xa, 0x9, &(0x7f0000000280)) (async) socketpair(0x27, 0xa, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f00000002c0)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x19}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) bind$packet(r9, &(0x7f0000000300)={0x11, 0x17, r4, 0x1, 0xc5, 0x6, @local}, 0x14) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close_range(r0, 0xffffffffffffffff, 0x40000000000000) (async) close_range(r0, 0xffffffffffffffff, 0x40000000000000) kernel console output (not intermixed with test programs): 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.630308][ T980] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 392.666604][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 392.949060][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 392.958966][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.973059][ T980] usb 1-1: config 0 descriptor?? [ 393.256908][ T980] usbhid 1-1:0.0: can't add hid device: -71 [ 393.265769][ T980] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 393.297034][ T980] usb 1-1: USB disconnect, device number 53 [ 394.049152][T10129] xt_HMARK: spi-set and port-set can't be combined [ 394.211537][T10133] xt_bpf: check failed: parse error [ 394.455096][ T5906] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 394.720817][ T5906] usb 1-1: device descriptor read/64, error -71 [ 394.980941][ T5906] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 395.152999][ T5906] usb 1-1: device descriptor read/64, error -71 [ 395.281140][T10140] input: syz1 as /devices/virtual/input/input30 [ 395.291402][ T5906] usb usb1-port1: attempt power cycle [ 395.527472][T10148] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 395.538367][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 395.581355][T10147] x_tables: duplicate underflow at hook 1 [ 395.633188][ T5906] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 395.662208][ T5906] usb 1-1: device descriptor read/8, error -71 [ 395.692589][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1004'. [ 395.911075][ T5906] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 395.942087][ T5906] usb 1-1: device descriptor read/8, error -71 [ 396.073975][ T5906] usb usb1-port1: unable to enumerate USB device [ 396.350538][ T57] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 396.632865][ T57] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 396.641457][ T57] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 396.664356][ T57] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 396.991216][ T57] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 397.030409][ T57] usb 2-1: config 220 has no interface number 2 [ 397.049399][ T57] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 397.088776][T10172] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 397.219487][ T57] usb 2-1: config 220 interface 0 has no altsetting 0 [ 397.253988][ T57] usb 2-1: config 220 interface 76 has no altsetting 0 [ 397.291000][ T57] usb 2-1: config 220 interface 1 has no altsetting 0 [ 397.311560][ T57] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 397.340973][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.356307][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1012'. [ 397.380438][ T57] usb 2-1: Product: syz [ 397.384664][ T57] usb 2-1: Manufacturer: syz [ 397.407492][T10180] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1012'. [ 397.431650][ T57] usb 2-1: SerialNumber: syz [ 397.665112][T10183] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1013'. [ 397.688181][ T57] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 397.707966][T10183] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1013'. [ 397.720351][ T57] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 397.727815][ T57] uvcvideo 2-1:220.0: No valid video chain found. [ 397.766847][ T57] usb 2-1: selecting invalid altsetting 0 [ 397.801437][ T57] usb 2-1: selecting invalid altsetting 0 [ 397.807803][ T57] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 397.850043][ T57] usb 2-1: USB disconnect, device number 64 [ 397.981308][ T5870] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 398.140915][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 398.149284][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 398.191848][T10198] netlink: 'syz.0.1016': attribute type 6 has an invalid length. [ 398.199756][ T5870] usb 4-1: can't read configurations, error -22 [ 398.226142][T10198] netlink: 'syz.0.1016': attribute type 7 has an invalid length. [ 398.349073][T10198] netlink: 'syz.0.1016': attribute type 8 has an invalid length. [ 398.372433][ T5870] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 398.558243][ T5906] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 398.581103][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 398.588726][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 398.607891][ T5870] usb 4-1: can't read configurations, error -22 [ 398.621422][ T5870] usb usb4-port1: attempt power cycle [ 398.673486][ T109] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 398.720978][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 398.733702][ T5906] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 398.744126][ T5906] usb 2-1: config 0 has no interface number 1 [ 398.754263][ T5906] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.888891][ T109] usb 3-1: device descriptor read/64, error -71 [ 398.908183][ T5906] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 398.980907][ T5870] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 399.009178][ T5906] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 399.022722][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 399.041666][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 399.052177][ T5870] usb 4-1: can't read configurations, error -22 [ 399.073190][ T5906] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 399.100994][ T5906] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.129323][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 399.141718][ T109] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 399.169966][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 399.196269][ T5906] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 399.210922][ T5870] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 399.224517][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.250974][ T5906] usb 2-1: Product: syz [ 399.255769][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 399.265320][ T5906] usb 2-1: Manufacturer: syz [ 399.280943][ T109] usb 3-1: device descriptor read/64, error -71 [ 399.291588][ T5870] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 399.306030][ T5906] usb 2-1: SerialNumber: syz [ 399.316741][ T5870] usb 4-1: can't read configurations, error -22 [ 399.340828][ T5906] usb 2-1: config 0 descriptor?? [ 399.346504][ T5870] usb usb4-port1: unable to enumerate USB device [ 399.357797][T10205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.378323][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.392273][ T109] usb usb3-port1: attempt power cycle [ 399.416140][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.515739][ T5906] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 399.730909][ T109] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 399.752484][ T109] usb 3-1: device descriptor read/8, error -71 [ 399.837827][ T5906] usb 2-1: USB disconnect, device number 65 [ 399.900407][T10221] binder: BINDER_SET_CONTEXT_MGR already set [ 399.906462][T10221] binder: 10218:10221 ioctl 4018620d 80004a80 returned -16 [ 400.001095][ T109] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 400.022027][ T109] usb 3-1: device descriptor read/8, error -71 [ 400.131494][ T109] usb usb3-port1: unable to enumerate USB device [ 401.170209][ T57] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 401.408846][ T57] usb 2-1: config index 0 descriptor too short (expected 51600, got 27) [ 401.437868][ T57] usb 2-1: config 183 has an invalid descriptor of length 189, skipping remainder of the config [ 401.473398][ T57] usb 2-1: config 183 has 0 interfaces, different from the descriptor's value: 32 [ 401.581151][ T57] usb 2-1: string descriptor 0 read error: -22 [ 401.587457][ T57] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 401.620633][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.689402][ T980] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 401.962177][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 401.977550][ T980] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 402.016695][ T980] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 402.117865][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1027'. [ 402.127550][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 402.206409][ T980] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 402.238528][ T57] usb 2-1: USB disconnect, device number 66 [ 402.253864][ T980] usb 4-1: config 250 has no interface number 0 [ 402.320308][ T980] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 402.360642][ T980] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 402.402179][ T980] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.481092][ T980] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.574552][ T980] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 402.630909][ T980] usb 4-1: config 250 interface 228 has no altsetting 0 [ 402.686115][ T980] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 402.746688][ T980] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 402.765222][ T980] usb 4-1: Product: syz [ 402.874410][ T980] usb 4-1: SerialNumber: syz [ 402.955794][ T980] hub 4-1:250.228: bad descriptor, ignoring hub [ 403.000810][ T980] hub 4-1:250.228: probe with driver hub failed with error -5 [ 403.221784][ T980] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 74 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 403.405905][ T980] usb 4-1: USB disconnect, device number 74 [ 403.452584][ T980] usblp0: removed [ 404.570892][ T5870] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 404.743259][ T5870] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 404.851309][ T5870] usb 5-1: config 0 has no interface number 0 [ 404.873119][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.996456][ T5870] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 405.080818][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 405.224789][ T5870] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 405.390868][ T5870] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 405.450669][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.488621][ T5870] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 405.550255][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.585249][ T5870] usb 5-1: config 0 descriptor?? [ 405.660702][T10280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.744099][T10280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.778564][ T5870] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 406.614892][T10274] ldusb 5-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 407.100240][ T57] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 407.230607][ T57] usb 2-1: device descriptor read/64, error -71 [ 407.470273][ T57] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 407.610866][ T57] usb 2-1: device descriptor read/64, error -71 [ 407.741134][ T57] usb usb2-port1: attempt power cycle [ 407.849117][ T10] usb 5-1: USB disconnect, device number 74 [ 407.895739][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 408.590968][ T5917] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 408.750933][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 408.764486][ T5917] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 408.793605][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.822331][ T5917] usb 5-1: Product: syz [ 408.836917][ T5917] usb 5-1: Manufacturer: syz [ 408.867321][ T5917] usb 5-1: SerialNumber: syz [ 408.892463][ T5917] usb 5-1: config 0 descriptor?? [ 408.919729][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 409.360291][ T57] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 409.533966][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.553338][ T57] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.577624][ T57] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 409.594655][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.614853][ T57] usb 3-1: config 0 descriptor?? [ 409.639831][ T57] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 409.984518][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 410.233251][ T5917] gspca_sonixj: reg_w1 err -110 [ 410.251292][T10333] can: request_module (can-proto-3) failed. [ 410.321511][ T5917] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 410.439836][ T5917] usb 5-1: USB disconnect, device number 75 [ 410.809164][T10349] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1053'. [ 411.484547][T10357] netlink: 'syz.0.1056': attribute type 2 has an invalid length. [ 411.915908][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 411.943220][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 412.283706][ T57] usb 3-1: USB disconnect, device number 54 [ 413.059835][ T5870] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 413.148709][T10384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.156490][T10384] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 413.173349][T10384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.219969][T10384] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 413.231126][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 413.238269][ T5870] usb 2-1: config 5 has an invalid interface number: 35 but max is 1 [ 413.247609][ T5870] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 413.260606][ T57] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 413.291864][T10384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.364087][ T5870] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 413.391040][ T5870] usb 2-1: config 5 has no interface number 0 [ 413.397223][ T5870] usb 2-1: config 5 has no interface number 1 [ 413.404589][ T5870] usb 2-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.419053][ T5870] usb 2-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 413.421266][ T57] usb 4-1: device descriptor read/64, error -71 [ 413.439137][T10384] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 413.442324][ T5870] usb 2-1: config 5 interface 35 has no altsetting 0 [ 413.511041][ T5870] usb 2-1: config 5 interface 4 has no altsetting 0 [ 413.523617][ T5870] usb 2-1: config 5 interface 4 has no altsetting 1 [ 413.569356][ T5870] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 413.579792][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.603570][ T5870] usb 2-1: Product: syz [ 413.646793][ T5870] usb 2-1: Manufacturer: syz [ 413.662909][ T5870] usb 2-1: SerialNumber: syz [ 413.670345][T10384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.681345][T10384] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 413.756856][ T57] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 413.771368][T10384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.782433][T10384] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 413.999312][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 414.009881][T10383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1063'. [ 414.019771][T10383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1063'. [ 414.045346][ T5870] ttusbir 2-1:5.35: cannot find expected altsetting [ 414.065762][ T57] usb 4-1: device descriptor read/64, error -71 [ 414.089095][ T5870] ttusbir 2-1:5.4: cannot find expected altsetting [ 414.119038][ T5870] usb 2-1: USB disconnect, device number 70 [ 414.162987][T10394] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1066'. [ 414.173087][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 414.182715][ T57] usb usb4-port1: attempt power cycle [ 414.302300][T10398] can: request_module (can-proto-3) failed. [ 414.630315][ T57] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 415.009065][ T57] usb 4-1: device descriptor read/8, error -71 [ 415.410278][ T57] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 415.441295][ T57] usb 4-1: device descriptor read/8, error -71 [ 415.585992][ T57] usb usb4-port1: unable to enumerate USB device [ 415.755433][T10418] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 416.108120][T10437] tipc: Enabled bearer , priority 10 [ 416.122338][T10437] tipc: Enabled bearer , priority 0 [ 416.788069][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'. [ 417.038326][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 417.240271][ T10] tipc: Node number set to 2539753225 [ 417.304659][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 417.350707][ T57] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 417.510566][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 417.521292][ T57] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 417.550616][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.559995][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 417.570177][ T57] usb 4-1: Product: syz [ 417.581254][ T57] usb 4-1: Manufacturer: syz [ 417.598993][ T57] usb 4-1: SerialNumber: syz [ 417.631861][ T57] usb 4-1: config 0 descriptor?? [ 417.638571][T10459] can: request_module (can-proto-3) failed. [ 417.646078][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1083'. [ 417.935563][ T57] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 079 [ 417.950703][ T5870] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 418.111071][T10452] m920x_read = error: -19 [ 418.121447][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 418.139593][ T5870] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 418.164353][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.188412][ T5870] usb 2-1: Product: syz [ 418.196417][ T5870] usb 2-1: Manufacturer: syz [ 418.204483][ T5870] usb 2-1: SerialNumber: syz [ 418.217450][ T5870] usb 2-1: config 0 descriptor?? [ 418.238337][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 418.440319][ T57] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 418.600689][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 418.608315][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 418.634703][ T57] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.645036][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.660224][ T57] usb 5-1: Product: syz [ 418.664474][ T57] usb 5-1: Manufacturer: syz [ 418.669107][ T57] usb 5-1: SerialNumber: syz [ 418.702296][ T57] usb 5-1: config 0 descriptor?? [ 418.711239][ T5870] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 418.722239][ T57] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 418.736088][ T57] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 418.931019][ T5870] gspca_sq930x: Sensor ov9630 not yet treated [ 418.938940][ T5870] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 418.957400][ T5870] usb 2-1: USB disconnect, device number 71 [ 418.967382][ T5871] udevd[5871]: setting owner of /dev/bus/usb/002/071 to uid=0, gid=0 failed: No such file or directory [ 419.224686][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.252302][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.333449][ T57] em28xx 5-1:0.0: chip ID is em2874 [ 419.707672][ T57] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 419.716059][ T57] em28xx 5-1:0.0: board has no eeprom [ 419.782419][ T57] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 419.804243][ T57] em28xx 5-1:0.0: dvb set to bulk mode. [ 419.809998][ T980] em28xx 5-1:0.0: Binding DVB extension [ 419.864586][ T57] usb 5-1: USB disconnect, device number 76 [ 419.896138][ T57] em28xx 5-1:0.0: Disconnecting em28xx [ 420.020411][ T980] em28xx 5-1:0.0: Registering input extension [ 420.372152][ T10] usb 4-1: USB disconnect, device number 79 [ 420.445242][ T980] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 420.484852][ T980] Registered IR keymap rc-empty [ 420.524618][ T980] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 420.548364][ T980] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 420.576101][ T980] em28xx 5-1:0.0: Input extension successfully initialized [ 420.583615][ T57] em28xx 5-1:0.0: Closing input extension [ 420.609395][ T57] em28xx 5-1:0.0: Freeing device [ 420.833430][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 420.871377][ T5870] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 420.990224][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 421.040882][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 421.048596][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.072980][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 421.104136][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.138827][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 421.156867][T10520] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 421.170191][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 421.175545][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.187558][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 421.207604][ T5870] usb 2-1: config 0 descriptor?? [ 421.227601][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 421.237620][ T10] usb 4-1: can't read configurations, error -61 [ 421.245823][T10510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.268151][ T5870] hub 2-1:0.0: USB hub found [ 421.292904][T10520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.392909][T10523] bond2: entered promiscuous mode [ 421.398112][T10523] bond2: entered allmulticast mode [ 421.404287][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 421.468791][ T5870] hub 2-1:0.0: 2 ports detected [ 421.570208][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 421.576831][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 421.593934][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.041311][ T10] usb 4-1: can't read configurations, error -61 [ 422.068844][ T10] usb usb4-port1: attempt power cycle [ 422.244663][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 422.267346][ T5870] hub 2-1:0.0: set hub depth failed [ 422.311201][ T5870] usb 2-1: USB disconnect, device number 72 [ 422.490290][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 422.531354][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 422.537025][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 422.553762][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.577738][ T10] usb 4-1: can't read configurations, error -61 [ 422.751477][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 422.792283][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 422.798225][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 422.816162][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.830774][ T10] usb 4-1: can't read configurations, error -61 [ 422.861141][ T10] usb usb4-port1: unable to enumerate USB device [ 422.933299][T10554] binder: 10552:10554 ioctl 400c620e 80000140 returned -22 [ 423.046668][T10560] fuse: Bad value for 'fd' [ 423.075096][T10554] use of bytesused == 0 is deprecated and will be removed in the future, [ 423.085267][T10554] use the actual size instead. [ 423.763277][T10586] tipc: Enabling of bearer rejected, already enabled [ 424.060907][ T10] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 424.212161][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 424.315787][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 424.352350][ T10] usb 4-1: config index 0 descriptor too short (expected 65488, got 127) [ 424.361154][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.375653][ T10] usb 4-1: config 1 has no interface number 1 [ 424.387911][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.416465][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.436750][ T10] usb 4-1: Product: syz [ 424.449766][ T10] usb 4-1: Manufacturer: syz [ 424.456251][ T10] usb 4-1: SerialNumber: syz [ 424.707019][T10586] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1107'. [ 424.747025][ T10] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 424.768900][ T10] usb 4-1: failed to enable PITCH for EP 0x82 [ 424.822002][ T10] usb 4-1: USB disconnect, device number 84 [ 425.084325][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.618971][T10605] loop9: detected capacity change from 0 to 7 [ 425.644596][T10605] Dev loop9: unable to read RDB block 7 [ 425.697254][T10605] loop9: unable to read partition table [ 425.722192][T10605] loop9: partition table beyond EOD, truncated [ 425.758922][T10605] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 426.159507][T10618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1116'. [ 426.305935][ T30] audit: type=1326 audit(1767860675.613:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 426.375085][ T30] audit: type=1326 audit(1767860675.613:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 426.415322][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 426.507111][ T30] audit: type=1326 audit(1767860675.653:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 426.536139][T10634] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1119'. [ 426.613624][ T30] audit: type=1326 audit(1767860675.653:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 426.650555][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 426.704565][ T10] usb 2-1: config 3 has an invalid interface number: 144 but max is 0 [ 426.713586][ T30] audit: type=1326 audit(1767860675.653:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 426.736409][ T10] usb 2-1: config 3 has no interface number 0 [ 427.065132][ T30] audit: type=1326 audit(1767860675.653:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 427.106672][ T30] audit: type=1326 audit(1767860675.663:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 427.213982][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=5c.1b [ 427.223503][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.236868][ T30] audit: type=1326 audit(1767860675.663:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 427.261709][ T10] usb 2-1: Product: syz [ 427.266049][ T10] usb 2-1: Manufacturer: syz [ 427.418240][ T10] usb 2-1: SerialNumber: syz [ 427.424969][ T30] audit: type=1326 audit(1767860675.663:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 427.457784][ T10] usb 2-1: bad CDC descriptors [ 427.480687][ T980] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 427.488547][ T30] audit: type=1326 audit(1767860675.663:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 427.819893][ T109] usb 2-1: USB disconnect, device number 73 [ 427.904412][ T980] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.919774][ T980] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.962866][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.981055][ T980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 428.154386][ T980] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.168139][ T980] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.188448][ T980] usb 5-1: Product: syz [ 428.193241][ T980] usb 5-1: Manufacturer: syz [ 428.220181][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 428.380418][ T980] cdc_wdm 5-1:1.0: skipping garbage [ 428.385964][ T980] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 428.451742][ T980] usb 5-1: USB disconnect, device number 77 [ 429.667702][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.825930][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.859776][T10634] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 429.907982][T10634] bond0 (unregistering): Released all slaves [ 430.075688][T10638] syzkaller1: entered promiscuous mode [ 430.094085][T10638] syzkaller1: entered allmulticast mode [ 430.116470][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'. [ 430.593769][ T5977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.624388][T10686] loop5: detected capacity change from 0 to 7 [ 430.650871][ T5977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.662139][ T5977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.673592][T10686] Dev loop5: unable to read RDB block 7 [ 430.684283][T10686] loop5: unable to read partition table [ 430.700833][ T5977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.711028][ T980] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 430.719383][T10686] loop5: partition table beyond EOD, truncated [ 430.741836][T10686] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 430.900604][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 430.907887][ T980] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 430.920575][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.964173][ T980] usb 4-1: config 0 descriptor?? [ 430.991118][ T980] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 432.672324][T10712] x_tables: duplicate underflow at hook 3 [ 432.678504][T10713] x_tables: duplicate underflow at hook 3 [ 432.704136][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.725725][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.953541][ T10] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 432.964966][ T980] gspca_vc032x: reg_w err -71 [ 432.969756][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.977396][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.987241][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.000759][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.014591][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.024800][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.050742][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.056575][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.070930][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.088261][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.109961][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.135677][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.141538][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 433.152854][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.158839][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.164622][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.170814][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.181010][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.186499][ T980] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.214267][ T980] gspca_vc032x: Unknown sensor... [ 433.230055][ T980] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 433.261469][ T980] usb 4-1: USB disconnect, device number 85 [ 433.300635][ T10] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 433.436383][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1140'. [ 433.478849][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 433.478870][ T30] audit: type=1326 audit(1767860682.783:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 433.482432][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1140'. [ 433.510410][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 433.543062][ T30] audit: type=1326 audit(1767860682.783:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 433.577093][ T10] usb usb3-port1: attempt power cycle [ 433.591920][ T9] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 433.616559][ T30] audit: type=1326 audit(1767860682.783:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 433.661428][ T30] audit: type=1326 audit(1767860682.923:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 433.717330][ T30] audit: type=1326 audit(1767860682.923:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 433.747874][ T9] usb 2-1: device descriptor read/64, error -71 [ 433.758817][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1140'. [ 434.184252][ T30] audit: type=1326 audit(1767860682.943:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 434.188141][ T10] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 434.241347][ T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 434.250854][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 434.276099][ T30] audit: type=1326 audit(1767860682.943:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 434.394285][ T30] audit: type=1326 audit(1767860682.943:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 434.438685][ T9] usb 2-1: device descriptor read/64, error -71 [ 434.525778][ T30] audit: type=1326 audit(1767860682.943:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 434.571313][ T30] audit: type=1326 audit(1767860682.983:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.1140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 434.580693][ T5907] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 434.601938][ T10] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 434.621555][ T9] usb usb2-port1: attempt power cycle [ 434.689112][T10738] netlink: 'syz.0.1143': attribute type 3 has an invalid length. [ 434.766664][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 434.772669][ T10] usb usb3-port1: unable to enumerate USB device [ 434.851996][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 434.859347][ T5907] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 434.868443][ T5907] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 434.880857][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 434.905447][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.033313][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 435.060874][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 435.101216][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 435.115467][ T9] usb 2-1: device descriptor read/8, error -71 [ 435.158352][ T5907] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 435.185200][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.220203][ T5907] usb 5-1: config 0 descriptor?? [ 435.390866][ T5948] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 435.403796][ T9] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 435.632236][ T9] usb 2-1: device descriptor read/8, error -71 [ 435.656079][ T5907] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 435.740650][ T9] usb usb2-port1: unable to enumerate USB device [ 435.784214][ T5948] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.794900][ T5948] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.829207][ T5948] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.872485][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.883315][ T5907] usb 5-1: USB disconnect, device number 78 [ 435.912444][ T5907] usblp0: removed [ 436.597141][T10752] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1146'. [ 436.723525][ T5907] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 437.250220][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 437.257969][ T5907] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 437.275335][ T5907] usb 5-1: config 0 has no interface number 0 [ 437.300958][ T5907] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 437.334861][ T5907] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 437.354762][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.374685][ T5907] usb 5-1: Product: syz [ 437.387917][ T5907] usb 5-1: Manufacturer: syz [ 437.397084][ T5907] usb 5-1: SerialNumber: syz [ 437.421167][ T5907] usb 5-1: config 0 descriptor?? [ 437.443708][ T5907] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 438.282585][ T5907] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 438.489812][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.509488][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.562330][ T5907] usb 5-1: USB disconnect, device number 79 [ 438.777198][ T5948] usb 4-1: usb_control_msg returned -71 [ 438.817684][ T5948] usbtmc 4-1:16.0: can't read capabilities [ 438.911653][ T5948] usb 4-1: USB disconnect, device number 86 [ 439.600920][ T5907] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 440.002665][ T5907] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256 [ 440.013062][ T5907] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.048149][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 440.083777][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.150193][T10790] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 440.314558][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.344005][ T5907] usb 4-1: invalid MIDI out EP 0 [ 440.674743][ T5907] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 440.817699][T10804] random: crng reseeded on system resumption [ 441.133735][ T5907] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 441.341553][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.375561][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.400985][ T5907] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 441.412065][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.451223][ T5907] usb 3-1: config 0 descriptor?? [ 441.940457][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.960668][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.000475][ T5948] usb 4-1: USB disconnect, device number 87 [ 442.113080][ T5907] maltron 0003:058F:9410.001D: item fetching failed at offset 0/7 [ 442.149359][ T5907] maltron 0003:058F:9410.001D: probe with driver maltron failed with error -22 [ 442.300738][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 442.480987][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 442.488872][ T10] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 442.497986][ T10] usb 2-1: config 0 has no interface number 0 [ 442.522605][ T10] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 442.555717][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.570926][ T10] usb 2-1: Product: syz [ 442.575307][ T10] usb 2-1: Manufacturer: syz [ 442.586858][ T10] usb 2-1: SerialNumber: syz [ 442.656380][ T10] usb 2-1: config 0 descriptor?? [ 442.674053][ T10] usb-storage 2-1:0.102: USB Mass Storage device detected [ 442.696412][ T10] usb-storage 2-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 442.707103][ T10] usb-storage 2-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 442.707103][ T10] Please send a copy of this message to and [ 443.081028][T10827] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1161'. [ 443.578719][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'. [ 443.837253][ T10] usb 3-1: USB disconnect, device number 59 [ 444.218989][T10838] loop2: detected capacity change from 0 to 1024 [ 444.254718][T10838] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 444.281911][ T5871] Buffer I/O error on dev loop2, logical block 3, async page read [ 444.297186][T10838] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 444.393412][T10838] binder: 10837:10838 ioctl c0306201 80000180 returned -14 [ 445.380851][ T5948] usb 2-1: USB disconnect, device number 78 [ 445.448686][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.458154][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.850275][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 446.022961][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.046794][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.082148][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 446.112097][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.139939][ T10] usb 2-1: config 0 descriptor?? [ 446.537991][ T10] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 446.564795][ T10] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 446.650524][ T5948] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 446.680517][ T10] cp2112 0003:10C4:EA90.001E: error requesting version [ 446.737414][ T10] cp2112 0003:10C4:EA90.001E: probe with driver cp2112 failed with error -71 [ 446.783660][ T10] usb 2-1: USB disconnect, device number 79 [ 446.810805][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 446.928781][T10884] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 446.990873][ T5948] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 446.999983][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.026367][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.047982][T10880] tipc: New replicast peer: 0.0.0.0 [ 447.063568][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.078309][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.094727][ T5948] usb 3-1: Product: syz [ 447.097499][T10880] tipc: Enabled bearer , priority 10 [ 447.159982][ T5948] usb 3-1: Manufacturer: syz [ 447.175411][ T5948] usb 3-1: SerialNumber: syz [ 447.249579][T10888] tipc: New replicast peer: 172.30.1.1 [ 447.580232][ T5906] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 447.709813][ T5948] usb 3-1: 0:2 : does not exist [ 447.730961][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 447.740897][ T5906] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 447.751401][ T5906] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 447.765589][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 447.783414][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.813549][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 447.838901][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 18816, setting to 1024 [ 447.872502][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 447.897573][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 447.915167][T10864] bond_slave_0: entered allmulticast mode [ 447.923047][T10864] loop8: detected capacity change from 0 to 7 [ 447.930076][T10864] Dev loop8: unable to read RDB block 7 [ 447.945438][T10864] loop8: AHDI p1 p2 p3 [ 447.955234][T10864] loop8: partition table partially beyond EOD, truncated [ 447.963717][ T5906] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 447.987537][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.996839][T10864] loop8: p1 start 1601398130 is beyond EOD, truncated [ 448.020449][ T5906] usb 2-1: config 0 descriptor?? [ 448.026882][T10864] loop8: p2 start 1702059890 is beyond EOD, truncated [ 448.046256][T10890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.061201][ T6035] Dev loop8: unable to read RDB block 7 [ 448.067383][ T6035] loop8: AHDI p1 p2 p3 [ 448.072476][ T6035] loop8: partition table partially beyond EOD, truncated [ 448.083284][ T6035] loop8: p1 start 1601398130 is beyond EOD, truncated [ 448.092228][ T6035] loop8: p2 start 1702059890 is beyond EOD, truncated [ 448.119914][T10866] Dev loop8: unable to read RDB block 7 [ 448.129488][T10866] loop8: AHDI p1 p2 p3 [ 448.155628][T10866] loop8: partition table partially beyond EOD, truncated [ 448.165273][T10866] loop8: p1 start 1601398130 is beyond EOD, truncated [ 448.177285][T10866] loop8: p2 start 1702059890 is beyond EOD, truncated [ 448.239790][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.252003][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.279446][ T5906] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 448.412887][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.472101][ C0] usblp0: nonzero read bulk status received: -71 [ 448.485802][ T10] usb 2-1: USB disconnect, device number 80 [ 448.501744][ T10] usblp0: removed [ 448.544014][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.279283][ T5948] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 449.361695][ T5948] usb 3-1: USB disconnect, device number 60 [ 449.498460][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.611250][ T5906] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 449.761723][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 449.769093][ T5906] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 449.777968][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.789351][ T5906] usb 2-1: config 0 has no interface number 0 [ 449.801018][ T5906] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.824197][ T5906] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.852948][ T5906] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.866618][ T5906] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.880894][ T5906] usb 2-1: config 0 interface 52 has no altsetting 0 [ 449.887698][ T5906] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 449.901243][ T5948] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 449.911254][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.924032][ T5906] usb 2-1: config 0 descriptor?? [ 450.052807][ T5948] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 450.062228][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.074923][ T5948] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 450.084946][ T5948] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 450.093569][ T5948] usb 3-1: Manufacturer: syz [ 450.102788][ T5948] usb 3-1: config 0 descriptor?? [ 450.135119][ T5906] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input36 [ 450.180231][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 450.200901][ T5948] rc_core: IR keymap rc-hauppauge not found [ 450.214417][ T5948] Registered IR keymap rc-empty [ 450.220393][ T5907] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 450.233520][ T5948] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 450.251466][ T5948] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 450.339654][ T5948] usb 2-1: USB disconnect, device number 81 [ 450.339745][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 450.357622][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.374523][ T5907] usb 5-1: device descriptor read/64, error -71 [ 450.386540][ T10] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 450.402874][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.433244][ T10] usb 4-1: config 0 descriptor?? [ 450.631280][ T5907] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 450.708792][ T5977] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.721125][ T5977] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.801164][ T5907] usb 5-1: device descriptor read/64, error -71 [ 450.865040][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 450.882338][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 450.918571][ T10] usb 4-1: USB disconnect, device number 88 [ 450.940478][ T5907] usb usb5-port1: attempt power cycle [ 451.008107][ T9] usb 3-1: USB disconnect, device number 61 [ 451.301041][ T5907] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 451.331368][ T5907] usb 5-1: device descriptor read/8, error -71 [ 451.476912][T10927] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1187'. [ 451.610604][ T5907] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 451.622991][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 451.656311][T10927] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1187'. [ 451.678152][ T5907] usb 5-1: device descriptor read/8, error -71 [ 451.800948][ T5907] usb usb5-port1: unable to enumerate USB device [ 452.648451][T10943] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 452.659452][T10943] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 453.839127][T10962] netlink: 'syz.3.1195': attribute type 29 has an invalid length. [ 453.868354][T10963] input: syz0 as /devices/virtual/input/input37 [ 453.987336][T10965] fuse: root generation should be zero [ 453.995098][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 454.347396][T10971] sctp: [Deprecated]: syz.4.1199 (pid 10971) Use of int in maxseg socket option. [ 454.347396][T10971] Use struct sctp_assoc_value instead [ 454.686244][T10985] macsec1: entered promiscuous mode [ 454.692494][T10985] bridge0: entered promiscuous mode [ 454.804465][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 455.095690][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 455.156234][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 455.494304][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 455.547569][T10996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.608313][T11002] batadv_slave_1: entered promiscuous mode [ 456.362001][T11001] batadv_slave_1: left promiscuous mode [ 456.800754][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 457.090592][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 457.099618][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 457.206756][T11027] misc userio: Invalid payload size [ 457.272461][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.451384][ T9] usb 4-1: Product: syz [ 457.456092][ T9] usb 4-1: Manufacturer: syz [ 457.461073][ T9] usb 4-1: SerialNumber: syz [ 457.475106][ T9] usb 4-1: config 0 descriptor?? [ 457.483564][ T9] cdc_ether 4-1:0.0: More than one union descriptor, skipping ... [ 457.492216][ T9] usb 4-1: bad CDC descriptors [ 457.551623][ T9] usb 4-1: unsupported MDLM descriptors [ 458.643304][T11043] sctp: [Deprecated]: syz.0.1213 (pid 11043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.643304][T11043] Use struct sctp_sack_info instead [ 459.479086][ T5948] usb 4-1: USB disconnect, device number 89 [ 460.131033][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 460.330557][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 460.341679][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 460.354511][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.566298][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.579052][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.588690][ T9] usb 4-1: Product: syz [ 460.594225][ T9] usb 4-1: Manufacturer: syz [ 460.599718][ T9] usb 4-1: SerialNumber: syz [ 460.644189][ T9] usb 4-1: config 0 descriptor?? [ 460.657175][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 460.668860][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 461.257582][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 461.264780][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 461.883168][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 461.913705][T11080] vlan2: entered promiscuous mode [ 461.924718][T11075] binder: 11062:11075 unknown command 0 [ 461.931471][T11075] binder: 11062:11075 ioctl c0306201 80000080 returned -22 [ 461.949920][T11080] bridge0: entered promiscuous mode [ 461.971141][T11080] vlan2: entered allmulticast mode [ 461.998564][T11080] bridge0: entered allmulticast mode [ 462.748676][T11096] loop6: detected capacity change from 0 to 524288000 [ 462.820517][T11096] loop6: detected capacity change from 524288000 to 0 [ 462.891676][ T109] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 463.094395][ T109] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 463.112215][ T109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.134984][ T109] usb 2-1: Product: syz [ 463.145338][ T109] usb 2-1: Manufacturer: syz [ 463.156481][ T109] usb 2-1: SerialNumber: syz [ 463.176006][ T109] usb 2-1: config 0 descriptor?? [ 463.389087][ T109] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 463.400865][ T5906] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 463.438375][ T109] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 463.459100][ T109] usb 2-1: USB disconnect, device number 82 [ 463.520875][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 463.527754][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 463.535773][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 463.542999][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 463.560834][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 463.568259][ T5906] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 463.585564][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 463.594303][ T5906] usb 5-1: can't read configurations, error -61 [ 463.730909][ T5906] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 463.881056][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 463.887357][ T5906] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 463.913708][ T9] usb 4-1: USB disconnect, device number 90 [ 464.189542][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.206126][ T5906] usb 5-1: can't read configurations, error -61 [ 464.217261][ T5906] usb usb5-port1: attempt power cycle [ 464.532151][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 464.570971][ T5906] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 464.601129][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 464.608538][ T5906] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 464.621824][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.642084][ T5906] usb 5-1: can't read configurations, error -61 [ 464.772541][ T5906] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 464.813368][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 464.822831][ T5906] usb 5-1: too many configurations: 251, using maximum allowed: 8 [ 464.861063][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.869021][ T5906] usb 5-1: can't read configurations, error -61 [ 464.893553][ T5906] usb usb5-port1: unable to enumerate USB device [ 465.300649][ T10] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 465.669138][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.685768][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 465.714128][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.733901][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.772163][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 465.790912][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.822215][ T10] usb 3-1: Manufacturer: syz [ 465.855403][ T10] usb 3-1: config 0 descriptor?? [ 466.222232][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 466.407439][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 466.888107][ T5906] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 467.313538][ T5906] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.344794][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.449553][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.488961][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.544153][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 467.580250][ T10] rc_core: IR keymap rc-hauppauge not found [ 467.581833][ T5906] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 467.600840][ T5906] usb 5-1: Manufacturer: syz [ 467.630566][ T10] Registered IR keymap rc-empty [ 467.640716][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 467.640730][ T30] audit: type=1326 audit(1767860716.943:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 467.683536][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.748580][ T5906] usb 5-1: config 0 descriptor?? [ 467.801008][ T30] audit: type=1326 audit(1767860716.983:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 467.850267][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.881524][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 467.911815][ T30] audit: type=1326 audit(1767860716.983:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 467.986996][ T30] audit: type=1326 audit(1767860716.983:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.009973][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 468.051318][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 468.081267][ T30] audit: type=1326 audit(1767860716.983:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.107155][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.152033][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.166084][ T30] audit: type=1326 audit(1767860716.993:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.194114][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.204601][ T5906] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 468.243541][ T5906] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 468.251475][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.262314][ T30] audit: type=1326 audit(1767860716.993:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.262368][ T30] audit: type=1326 audit(1767860716.993:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.262416][ T30] audit: type=1326 audit(1767860716.993:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.262460][ T30] audit: type=1326 audit(1767860716.993:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 468.430766][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.512754][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.542352][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.579207][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.620957][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.650630][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.740655][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.792197][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 468.840223][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 469.000567][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 469.328111][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 469.337493][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.376843][ T10] usb 3-1: USB disconnect, device number 62 [ 469.921207][ T5907] usb 5-1: reset high-speed USB device number 88 using dummy_hcd [ 470.320754][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 470.365977][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 470.490259][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 470.527636][ T10] usb 3-1: config 13 has an invalid interface number: 151 but max is 0 [ 470.540850][ T10] usb 3-1: config 13 has no interface number 0 [ 470.681274][ T10] usb 3-1: config 13 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 470.802130][ T10] usb 3-1: config 13 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 470.816775][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 470.826426][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.834811][ T10] usb 3-1: Product: syz [ 470.839238][ T10] usb 3-1: Manufacturer: syz [ 470.845226][ T10] usb 3-1: SerialNumber: syz [ 470.983926][T10922] usb 5-1: USB disconnect, device number 88 [ 471.365137][ T10] usb 3-1: USB disconnect, device number 63 [ 471.505893][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.207910][ T109] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 472.373784][ T109] usb 2-1: Using ep0 maxpacket: 32 [ 472.385808][ T109] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 472.440791][ T109] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 472.466829][ T109] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.507677][ T109] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 472.521668][ T5906] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 472.544418][ T109] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 472.574982][ T109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.595124][ T109] usb 2-1: Product: syz [ 472.605276][ T109] usb 2-1: Manufacturer: syz [ 472.614510][ T109] usb 2-1: SerialNumber: syz [ 472.650865][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 472.681387][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 472.689146][ T5906] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 472.707361][ T5906] usb 3-1: config 0 has no interface number 0 [ 472.718198][ T109] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input39 [ 472.734634][ T5906] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 472.751220][ T5906] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 472.769514][ T5906] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 472.784936][ T5906] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 472.799833][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.883898][ T5906] usb 3-1: Product: syz [ 472.888198][ T5906] usb 3-1: Manufacturer: syz [ 472.891042][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 472.911398][ T5906] usb 3-1: SerialNumber: syz [ 472.920872][ T109] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 472.929581][ T109] (id 0x00) [ 472.936358][ T5906] usb 3-1: config 0 descriptor?? [ 472.952134][T10922] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 472.972422][T11237] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 473.060194][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 473.068212][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 473.094378][ T10] usb 4-1: config 20 has an invalid interface number: 185 but max is 0 [ 473.110295][T10922] usb 5-1: Using ep0 maxpacket: 32 [ 473.116800][ T10] usb 4-1: config 20 has no interface number 0 [ 473.125452][T10922] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 473.139769][T10922] usb 5-1: config 0 has no interface number 0 [ 473.150913][ T10] usb 4-1: config 20 interface 185 has no altsetting 0 [ 473.160648][T10922] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 473.175194][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=f7.96 [ 473.193579][T11237] fuse: Bad value for 'fd' [ 473.200904][T10922] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 473.210728][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.211038][ T109] rc_core: IR keymap rc-imon-pad not found [ 473.218894][ T10] usb 4-1: Product: syz [ 473.218915][ T10] usb 4-1: Manufacturer: syz [ 473.236421][T10922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.246812][T10922] usb 5-1: Product: syz [ 473.254925][T10922] usb 5-1: Manufacturer: syz [ 473.267048][ T10] usb 4-1: SerialNumber: syz [ 473.272642][ T109] Registered IR keymap rc-empty [ 473.278028][T10922] usb 5-1: SerialNumber: syz [ 473.287917][ T109] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 473.298790][T11237] ALSA: mixer_oss: invalid OSS volume 'u' [ 473.298826][T11237] ALSA: mixer_oss: invalid OSS volume '&6vIk p"} initialized [ 473.696705][T11237] ALSA: mixer_oss: invalid OSS volume 'mX5x\7RG͉|IT319ٱ' [ 473.705608][T11237] ALSA: mixer_oss: invalid OSS volume 'AfL]uL{7s١b?_)!I ' [ 473.738776][T11237] ALSA: mixer_oss: invalid OSS volume '*JjD)Gw>)]t' [ 473.758539][T11248] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 473.844527][T11237] ALSA: mixer_oss: invalid OSS volume '{*W3xUçḷ5i' [ 473.884671][ T109] usb 4-1: USB disconnect, device number 92 [ 473.897484][T11237] ALSA: mixer_oss: invalid OSS volume '>?KBF%L4SP i' [ 473.930866][T11237] ALSA: mixer_oss: invalid OSS volume '>mx`W,XI?4Ԝ+(' [ 473.940863][T11237] ALSA: mixer_oss: invalid OSS volume ':"vLPi",>' [ 473.955044][T11237] ALSA: mixer_oss: invalid OSS volume ';[P= C' [ 473.967909][T11237] ALSA: mixer_oss: invalid OSS volume 'Ea:kf' [ 473.980770][T11237] ALSA: mixer_oss: invalid OSS volume '=ƹl' [ 473.987470][T11237] ALSA: mixer_oss: invalid OSS volume '"h꼘}̠{' [ 474.100055][T11237] ALSA: mixer_oss: invalid OSS volume 'Xq<F]Mc!' [ 474.116461][T11237] ALSA: mixer_oss: invalid OSS volume 'Snx`"WK5' [ 474.133941][T11237] ALSA: mixer_oss: invalid OSS volume 'x~lqM[}`9XN' [ 474.164711][T10922] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 474.231160][T10922] asix 5-1:0.188: probe with driver asix failed with error -61 [ 474.244657][T11237] ALSA: mixer_oss: invalid OSS volume '' [ 474.280675][ T5906] usb 3-1: USB disconnect, device number 64 [ 475.045839][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1263'. [ 475.096016][T11271] vlan2: entered promiscuous mode [ 475.112474][T11271] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 475.147946][T10922] usb 2-1: USB disconnect, device number 83 [ 475.243493][T11271] vlan2: entered allmulticast mode [ 475.268976][T11271] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 475.744880][T11276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 475.756956][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 476.268736][T10922] usb 5-1: USB disconnect, device number 89 [ 476.450231][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 476.642321][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.709183][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 476.750337][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.782817][ T10] usb 3-1: config 0 descriptor?? [ 477.190417][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 477.196502][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 477.224698][ T10] usb 3-1: USB disconnect, device number 65 [ 477.239847][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 477.531320][ T109] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 477.691058][ T109] usb 2-1: Using ep0 maxpacket: 16 [ 477.780560][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 477.797668][ T109] usb 2-1: config index 0 descriptor too short (expected 804, got 36) [ 477.813213][ T109] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 477.908434][T11321] sctp: [Deprecated]: syz.0.1274 (pid 11321) Use of int in maxseg socket option. [ 477.908434][T11321] Use struct sctp_assoc_value instead [ 477.924520][ T109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 477.954686][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 477.960005][ T109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.008793][ T10] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 478.029045][ T109] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 478.043005][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 478.059875][ T109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.059894][ T10] usb 3-1: can't read configurations, error -22 [ 478.159687][ T109] usb 2-1: config 0 descriptor?? [ 478.300242][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 478.399809][ T109] usbhid 2-1:0.0: can't add hid device: -71 [ 478.408874][ T109] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 478.435279][ T109] usb 2-1: USB disconnect, device number 84 [ 478.491698][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 478.500699][ T10] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 478.545229][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 478.570392][ T10] usb 3-1: can't read configurations, error -22 [ 478.658122][ T10] usb usb3-port1: attempt power cycle [ 478.890953][ T109] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 479.011005][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 479.041146][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 479.051480][ T10] usb 3-1: too many configurations: 48, using maximum allowed: 8 [ 479.054794][ T109] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 479.072758][ T109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.082229][ T10] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 479.091987][ T109] usb 4-1: Product: syz [ 479.100348][ T10] usb 3-1: can't read configurations, error -22 [ 479.106661][ T109] usb 4-1: Manufacturer: syz [ 479.106687][ T109] usb 4-1: SerialNumber: syz [ 479.118435][ T109] usb 4-1: config 0 descriptor?? [ 479.150952][ T5948] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 479.162777][ T109] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 479.254544][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 479.290921][ T5948] usb 5-1: device descriptor read/64, error -71 [ 479.490209][ T10] usb 3-1: device not accepting address 69, error -71 [ 479.546308][ T5948] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 479.546886][ T10] usb usb3-port1: unable to enumerate USB device [ 479.681016][ T5948] usb 5-1: device descriptor read/64, error -71 [ 479.711382][ T109] gspca_sunplus: reg_r err -110 [ 479.716749][ T109] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 479.792281][ T5948] usb usb5-port1: attempt power cycle [ 480.040330][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 480.140880][ T5948] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 480.170957][ T5948] usb 5-1: device descriptor read/8, error -71 [ 480.210252][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 480.217653][ T10] usb 3-1: config 6 has an invalid interface number: 51 but max is 1 [ 480.226245][ T10] usb 3-1: config 6 has no interface number 1 [ 480.243799][ T10] usb 3-1: config 6 interface 0 has no altsetting 0 [ 480.260321][ T10] usb 3-1: config 6 interface 51 has no altsetting 0 [ 480.272948][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 480.285567][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.294039][ T10] usb 3-1: Product: syz [ 480.305894][ T10] usb 3-1: Manufacturer: syz [ 480.312774][ T10] usb 3-1: SerialNumber: syz [ 480.410862][ T5948] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 480.431487][ T5948] usb 5-1: device descriptor read/8, error -71 [ 480.542169][ T5948] usb usb5-port1: unable to enumerate USB device [ 480.551236][ T10] xr_serial 3-1:6.51: xr_serial converter detected [ 480.560059][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 480.575158][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 480.600293][ T10] usb 3-1: USB disconnect, device number 70 [ 480.617006][ T10] xr_serial 3-1:6.0: device disconnected [ 481.350832][ T5948] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 481.510776][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 481.518904][ T5948] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 155, changing to 11 [ 481.531275][ T5948] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.541813][ T5948] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.552607][ T5948] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 481.563960][ T5948] usb 2-1: config 1 interface 0 has no altsetting 0 [ 481.574269][ T5948] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.584270][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.593389][ T5948] usb 2-1: Product: ⎩⨏≫袍㏎㰀۴ꅭᔽ젘⫓髍鋵⣣肛s㖲ᇏ뾹仲횁녿䝹⨀ꖆ叺ᅵဪ훆劐㛰何᭾㾫䕧⃚᳸﫜䡖눇࿢撉삢ꔿﰬ⏳ꔎۏྐ䍋贚蔛㐱衭爴ﶩᢦ妺﷉ꮺ泏પ㟗굆셥駲林줞ঈ鈃㇘唏襏瓓ᇾ⨜ᛄ᫹昐ᆳ㬱❉武ゖ໻⯎➿싨ᦘꨴ㠆價꫿⁳ [ 481.625211][ T5948] usb 2-1: Manufacturer: 䀊 [ 481.631432][ T5948] usb 2-1: SerialNumber: ⠊ [ 481.642389][T11364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.730536][ T10] usb 4-1: USB disconnect, device number 93 [ 482.018271][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 482.018291][ T30] audit: type=1326 audit(1767860731.323:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.056170][ T30] audit: type=1326 audit(1767860731.363:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.082096][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.094159][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.124903][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.140674][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.165646][ T30] audit: type=1326 audit(1767860731.363:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.192164][ T30] audit: type=1326 audit(1767860731.363:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.218996][ T30] audit: type=1326 audit(1767860731.363:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.242076][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.252527][T11382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 482.343332][ T30] audit: type=1326 audit(1767860731.363:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.371432][ T30] audit: type=1326 audit(1767860731.363:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.383679][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.549249][ T5948] usb 2-1: bad CDC descriptors [ 482.558108][ T30] audit: type=1326 audit(1767860731.363:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.588982][ T5948] usb 2-1: USB disconnect, device number 85 [ 482.614648][ T5871] udevd[5871]: setting owner of /dev/bus/usb/002/085 to uid=0, gid=0 failed: No such file or directory [ 482.664435][ T30] audit: type=1326 audit(1767860731.363:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 482.707443][ T30] audit: type=1326 audit(1767860731.363:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 484.402906][ T5948] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 484.570915][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 484.598218][ T5948] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 484.612998][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.643767][ T5948] usb 3-1: config 0 has no interface number 0 [ 484.654397][ T5948] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.670958][ T5948] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 484.689454][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.698329][ T5948] usb 3-1: Product: syz [ 484.713996][ T5948] usb 3-1: Manufacturer: syz [ 484.718741][ T5948] usb 3-1: SerialNumber: syz [ 484.726298][ T5948] usb 3-1: config 0 descriptor?? [ 484.860827][ T5906] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 484.910935][ T109] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 484.951243][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.971800][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.010887][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 485.018095][ T5906] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 485.039257][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.053040][ T5906] usb 4-1: config 0 descriptor?? [ 485.069860][ T5906] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 485.082391][ T109] usb 5-1: Using ep0 maxpacket: 32 [ 485.089580][ T109] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 485.102638][ T5906] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 485.120884][ T109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.162629][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.166870][ T109] usb 5-1: config 0 descriptor?? [ 485.205215][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.222506][ T109] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 485.239799][ T109] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 485.259281][ T109] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 485.308714][T10922] usb 4-1: USB disconnect, device number 94 [ 485.424857][ T109] usb 5-1: USB disconnect, device number 94 [ 485.437505][ T5948] usb 3-1: USB disconnect, device number 71 [ 485.558375][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.910583][ T5948] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 486.060655][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 486.083650][ T5948] usb 3-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 486.167068][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.188924][ T5948] usb 3-1: Product: syz [ 486.198188][ T5948] usb 3-1: Manufacturer: syz [ 486.208498][ T5948] usb 3-1: SerialNumber: syz [ 486.228605][ T5948] usb 3-1: config 0 descriptor?? [ 486.244584][ T5948] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 486.281476][T11428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.527359][T11434] netlink: 1060 bytes leftover after parsing attributes in process `syz.4.1309'. [ 486.663063][ T5948] pwc: Failed to set LED on/off time (-71) [ 486.669439][ T5948] pwc: send_video_command error -71 [ 486.683484][ T5948] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 486.772363][ T5948] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 486.799731][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 486.873125][ T5948] usb 3-1: USB disconnect, device number 72 [ 487.220850][ T5948] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 487.408737][T11449] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 487.444367][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 487.453186][ T5948] usb 5-1: not running at top speed; connect to a high speed hub [ 487.467434][ T5948] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 487.482908][ T5948] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 487.511032][ T5948] usb 5-1: config 17 has no interface number 0 [ 487.524249][ T5948] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 487.550858][ T5948] usb 5-1: config 17 interface 8 has no altsetting 0 [ 487.613392][ T5948] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 487.636449][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.680789][ T5948] usb 5-1: Product: syz [ 487.693462][ T5948] usb 5-1: Manufacturer: syz [ 487.709476][ T5948] usb 5-1: SerialNumber: syz [ 488.390343][T10922] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 488.776992][T10922] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 488.918884][T10922] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 488.928211][T10922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.961446][T10922] usb 4-1: Product: syz [ 488.965741][T10922] usb 4-1: Manufacturer: syz [ 488.971458][ T5948] usb 5-1: selecting invalid altsetting 0 [ 489.010836][T10922] usb 4-1: SerialNumber: syz [ 489.091965][ T5948] usb 5-1: USB disconnect, device number 95 [ 489.280871][ T5917] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 489.432091][ T5917] usb 3-1: config 4 has an invalid interface number: 88 but max is 1 [ 489.443079][ T5917] usb 3-1: config 4 has an invalid interface number: 29 but max is 1 [ 489.454042][T10922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 489.466285][T10922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 489.468759][ T5917] usb 3-1: config 4 has no interface number 0 [ 489.508557][ T5917] usb 3-1: config 4 has no interface number 1 [ 489.518708][ T5917] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 489.592232][ T5917] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 489.616796][ T5917] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 489.692951][ T5917] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 489.792763][T10922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 489.824430][T10922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 489.841893][ T5917] usb 3-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 489.885670][T10922] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 489.897818][T10922] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 489.904948][ T5917] usb 3-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 489.952275][ T5917] usb 3-1: config 4 interface 88 has no altsetting 0 [ 489.959148][ T5917] usb 3-1: config 4 interface 29 has no altsetting 0 [ 489.972627][ T5917] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 489.983148][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.995380][ T5917] usb 3-1: Product: syz [ 490.128563][T10922] usb 4-1: USB disconnect, device number 95 [ 490.327357][ T5917] usb 3-1: Manufacturer: syz [ 490.384884][ T5917] usb 3-1: SerialNumber: syz [ 490.442089][T11462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.610243][T10922] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 490.723970][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.733415][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.751033][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.765883][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.774239][T10922] usb 4-1: Using ep0 maxpacket: 8 [ 490.788191][T10922] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 490.798373][T10922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.834020][T10922] usb 4-1: Product: syz [ 490.845695][T10922] usb 4-1: Manufacturer: syz [ 490.866651][T10922] usb 4-1: SerialNumber: syz [ 490.919566][T10922] usb 4-1: config 0 descriptor?? [ 491.040745][T10922] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 491.064181][T10922] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 491.349106][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 491.349133][ T30] audit: type=1326 audit(1767860740.623:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11477 comm="syz.3.1321" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0 [ 491.511738][T11497] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20002 [ 491.562008][ T30] audit: type=1326 audit(1767860740.703:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 491.691117][ T30] audit: type=1326 audit(1767860740.703:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 491.820695][ T30] audit: type=1326 audit(1767860740.713:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 491.967393][ T30] audit: type=1326 audit(1767860740.713:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.085689][ T30] audit: type=1326 audit(1767860740.713:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.182616][ T30] audit: type=1326 audit(1767860740.713:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.215729][ T30] audit: type=1326 audit(1767860740.733:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.388262][ T30] audit: type=1326 audit(1767860740.793:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11496 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.427661][ T30] audit: type=1326 audit(1767860740.793:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 492.920959][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1326'. [ 493.675640][T10922] usb 4-1: USB disconnect, device number 96 [ 494.282894][T11536] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1334'. [ 494.400780][ T5948] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 494.540885][ T5906] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 494.563637][ T5948] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 494.581023][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.611138][ T5948] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.633909][ T5948] usb 2-1: config 1 has no interface number 1 [ 494.650877][ T5948] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 494.674561][ T5948] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.704890][ T5906] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 494.728512][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.740697][ T5906] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 494.748868][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.773661][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 494.790904][ T5948] usb 2-1: Product: syz [ 494.795251][ T5948] usb 2-1: Manufacturer: syz [ 494.804155][ T5906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 494.815598][ T5948] usb 2-1: SerialNumber: syz [ 494.839491][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 494.880946][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 494.900950][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 494.946721][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 494.967178][ T5906] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 495.017550][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.083010][ T5948] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 495.099349][ T5906] usb 4-1: config 0 descriptor?? [ 495.118052][ T5948] usb 2-1: MIDIStreaming interface descriptor not found [ 495.136602][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub [ 495.173179][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5 [ 495.247278][ T5906] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 495.276812][ T5948] usb 2-1: USB disconnect, device number 86 [ 495.417147][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.539034][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.617636][ T5917] chaoskey 3-1:4.29: Unable to register with hwrng [ 495.681252][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.165928][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 497.195745][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 497.323680][ T5917] usb 4-1: USB disconnect, device number 97 [ 497.791509][ T5917] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 498.041068][ T5917] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 498.051014][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.132087][ T5917] usb 4-1: config 0 descriptor?? [ 498.411890][ T5917] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 498.522288][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 498.818276][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 498.860260][ T5917] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 498.874275][ T5917] [drm] Initialized udl on minor 2 [ 498.904071][ T5917] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 498.943522][ T5917] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 498.963256][ T5948] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 498.981149][ T5917] usb 4-1: USB disconnect, device number 98 [ 498.996599][ T5948] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 499.256166][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.298689][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.595861][T11610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1355'. [ 499.673527][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 499.673547][ T30] audit: type=1326 audit(1767860748.983:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 499.770247][ T30] audit: type=1326 audit(1767860749.013:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 499.793295][ T30] audit: type=1326 audit(1767860749.013:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 499.829925][ T30] audit: type=1326 audit(1767860749.013:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 499.951798][ T30] audit: type=1326 audit(1767860749.013:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.118049][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 500.141860][ T30] audit: type=1326 audit(1767860749.013:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.182572][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 500.194121][ T30] audit: type=1326 audit(1767860749.013:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.231078][ T30] audit: type=1326 audit(1767860749.013:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.254001][ T30] audit: type=1326 audit(1767860749.013:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.276901][ T30] audit: type=1326 audit(1767860749.013:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 500.288621][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1357'. [ 500.577905][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1353'. [ 500.587921][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 500.660648][ T5948] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 500.670662][T11623] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1353'. [ 500.797604][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 500.809755][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.821856][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.854180][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.886270][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.906855][ T5948] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 500.916931][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.934136][ T5948] usb 5-1: config 0 descriptor?? [ 501.044379][T11647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1362'. [ 501.540781][T11627] bridge0: port 3(syz_tun) entered blocking state [ 501.550917][T11627] bridge0: port 3(syz_tun) entered disabled state [ 501.557577][T11627] syz_tun: entered allmulticast mode [ 501.622077][T11652] input: syz0 as /devices/virtual/input/input44 [ 501.639653][T11627] syz_tun: entered promiscuous mode [ 501.906194][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.925843][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.021845][ T5948] usbhid 5-1:0.0: can't add hid device: -32 [ 502.027931][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 502.114841][ T5948] usb 5-1: USB disconnect, device number 97 [ 503.111349][ T5948] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 503.192625][T11678] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 503.273210][ T5948] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.285617][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.368599][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.401264][ T5917] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 503.411910][ T5948] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.429956][ T5948] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.457433][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.467311][ T5948] usb 5-1: Product: syz [ 503.478225][ T5948] usb 5-1: Manufacturer: syz [ 503.532610][ T5948] cdc_wdm 5-1:1.0: skipping garbage [ 503.544695][ T5948] cdc_wdm 5-1:1.0: skipping garbage [ 503.585739][ T5948] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 503.592020][ T5917] usb 4-1: Invalid ep0 maxpacket: 16 [ 503.605309][ T5948] cdc_wdm 5-1:1.0: Unknown control protocol [ 503.620837][ T5906] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 503.730841][ T5917] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 503.739889][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.752046][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.786818][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.920908][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.920934][ T5917] usb 4-1: Invalid ep0 maxpacket: 16 [ 504.339009][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.350051][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.424152][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 504.436524][ T5917] usb usb4-port1: attempt power cycle [ 504.452207][ T5906] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.628830][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.649667][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.668356][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.688482][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.717985][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.758492][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.775843][ T5906] usb 2-1: Product: syz [ 504.781075][ T5906] usb 2-1: Manufacturer: syz [ 504.786632][ T5906] usb 2-1: SerialNumber: syz [ 504.787049][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.800686][ T5917] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 504.830957][ T5917] usb 4-1: Invalid ep0 maxpacket: 16 [ 504.852337][ T5907] usb 5-1: USB disconnect, device number 98 [ 504.873706][ T5906] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 504.883410][ T5906] cdc_ncm 2-1:1.0: bind() failure [ 504.980847][ T5917] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 505.011883][ T5917] usb 4-1: Invalid ep0 maxpacket: 16 [ 505.017881][ T5917] usb usb4-port1: unable to enumerate USB device [ 505.328179][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 505.328199][ T30] audit: type=1800 audit(1767860754.633:581): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1374" name="file2" dev="tmpfs" ino=1478 res=0 errno=0 [ 505.545201][T11704] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 505.556800][T11704] PKCS7: Only support pkcs7_signedData type [ 505.641219][T11704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1375'. [ 505.657379][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1375'. [ 505.668874][T11704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1375'. [ 505.682205][T11704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1375'. [ 505.937129][T11714] GUP no longer grows the stack in syz.2.1378 (11714): 80005000-80008000 (80004000) [ 505.957594][T11714] CPU: 0 UID: 0 PID: 11714 Comm: syz.2.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.957631][T11714] Tainted: [L]=SOFTLOCKUP [ 505.957639][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.957659][T11714] Call Trace: [ 505.957668][T11714] [ 505.957679][T11714] dump_stack_lvl+0xe8/0x150 [ 505.957714][T11714] fixup_user_fault+0x64a/0x700 [ 505.957751][T11714] fault_in_user_writeable+0x72/0xe0 [ 505.957775][T11714] futex_lock_pi+0x773/0xa90 [ 505.957813][T11714] ? __pfx_futex_lock_pi+0x10/0x10 [ 505.957862][T11714] ? __lock_acquire+0x6b6/0x2cf0 [ 505.957900][T11714] ? __pfx_futex_wake_mark+0x10/0x10 [ 505.957946][T11714] ? __might_fault+0xb0/0x130 [ 505.957980][T11714] ? __might_fault+0xb0/0x130 [ 505.958015][T11714] do_futex+0x292/0x420 [ 505.958044][T11714] ? __pfx_do_futex+0x10/0x10 [ 505.958082][T11714] __se_sys_futex_time32+0x360/0x3e0 [ 505.958113][T11714] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 505.958141][T11714] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 505.958178][T11714] ? __ia32_sys_futex_time32+0x21/0xf0 [ 505.958208][T11714] __do_fast_syscall_32+0x1dc/0x570 [ 505.958234][T11714] ? do_fast_syscall_32+0x34/0x80 [ 505.958271][T11714] do_fast_syscall_32+0x34/0x80 [ 505.958296][T11714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.958329][T11714] RIP: 0023:0xf7f66539 [ 505.958349][T11714] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.958369][T11714] RSP: 002b:00000000f543555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 505.958394][T11714] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 505.958410][T11714] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 505.958423][T11714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.958436][T11714] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.958449][T11714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.958481][T11714] [ 506.572333][T11727] netlink: 'syz.2.1382': attribute type 12 has an invalid length. [ 506.580514][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'. [ 506.604989][T11728] netlink: 'syz.2.1382': attribute type 12 has an invalid length. [ 506.629317][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'. [ 506.731457][ T5948] usb 2-1: USB disconnect, device number 87 [ 506.874094][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.880757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.101016][ T5948] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 508.240849][ T109] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 508.248899][ T5948] usb 4-1: device descriptor read/64, error -71 [ 508.361117][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1393'. [ 508.404681][ T109] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 508.423247][ T109] usb 5-1: config 0 has no interface number 0 [ 508.430046][ T109] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.444367][ T109] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 508.460840][ T109] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 508.473459][ T109] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 508.486004][ T109] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 508.498011][ T109] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.511685][ T5948] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 508.523175][ T109] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 508.536751][ T109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.559822][ T109] usb 5-1: config 0 descriptor?? [ 508.571272][T11763] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 508.583269][T11763] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 508.604034][ T109] ldusb 5-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 508.660725][ T5948] usb 4-1: device descriptor read/64, error -71 [ 508.770997][ T5948] usb usb4-port1: attempt power cycle [ 508.857071][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 509.110769][ T5948] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 509.131626][ T5948] usb 4-1: device descriptor read/8, error -71 [ 509.220679][ T5907] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 509.388027][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.392810][ T5948] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 509.399311][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.417244][ T5907] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 509.426707][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.439093][ T5907] usb 2-1: config 0 descriptor?? [ 509.483505][ T5948] usb 4-1: device descriptor read/8, error -71 [ 509.601401][ T5948] usb usb4-port1: unable to enumerate USB device [ 509.802493][ T30] audit: type=1326 audit(1767860759.113:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11787 comm="syz.2.1400" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 509.831942][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1399'. [ 509.834327][ T30] audit: type=1326 audit(1767860759.133:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11787 comm="syz.2.1400" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 509.865048][ T5907] hid-steam 0003:28DE:1142.0020: reserved main item tag 0xe [ 509.897864][ T5907] hid-steam 0003:28DE:1142.0020: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 510.061067][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.112124][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.178740][ T5907] usb 2-1: USB disconnect, device number 88 [ 511.006191][T11819] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.1407'. [ 511.023840][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'. [ 511.232209][ T5907] usb 5-1: USB disconnect, device number 99 [ 511.250820][ T5907] ldusb 5-1:0.55: LD USB Device #2 now disconnected [ 511.595611][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1410'. [ 511.642354][T11836] input: syz0 as /devices/virtual/input/input46 [ 511.660834][ T5948] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 511.709639][T11835] wg2: entered promiscuous mode [ 511.719815][T11835] wg2: entered allmulticast mode [ 511.810835][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 511.818221][ T5948] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 511.827397][ T5948] usb 2-1: config 0 has no interface number 0 [ 511.837129][ T5948] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 511.847812][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.872342][ T5948] usb 2-1: Product: syz [ 511.876590][ T5948] usb 2-1: Manufacturer: syz [ 511.892254][ T5948] usb 2-1: SerialNumber: syz [ 511.909921][ T5948] usb 2-1: config 0 descriptor?? [ 511.928199][ T5948] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 511.948642][ T5948] dvb-usb: bulk message failed: -22 (2/0) [ 511.982967][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.011791][ T5948] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 512.030832][ T5948] usb 2-1: media controller created [ 512.076218][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.136825][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 512.146894][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 512.173482][ T5948] cxusb: set interface failed [ 512.184747][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 512.385105][ T5948] DVB: Unable to find symbol lgdt330x_attach() [ 512.394740][ T5948] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 512.649571][T11848] netlink: 'syz.4.1413': attribute type 4 has an invalid length. [ 512.660958][ T5948] rc_core: IR keymap rc-dvico-portable not found [ 512.667355][ T5948] Registered IR keymap rc-empty [ 512.701944][ T5948] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 512.799146][ T5948] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47 [ 512.842294][T11862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 512.851638][ T5948] dvb-usb: schedule remote query interval to 100 msecs. [ 512.858621][ T5948] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 512.880888][ T5948] usb 2-1: USB disconnect, device number 89 [ 512.890022][T10922] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 512.981785][T11862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 513.070351][T10922] usb 4-1: Using ep0 maxpacket: 16 [ 513.095480][T10922] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 513.104841][T10922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.120193][T10922] usb 4-1: Product: syz [ 513.124424][T10922] usb 4-1: Manufacturer: syz [ 513.132838][ T5948] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 513.158844][T10922] usb 4-1: SerialNumber: syz [ 513.177075][T10922] usb 4-1: config 0 descriptor?? [ 513.194235][T10922] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 513.441672][T11855] set match dimension is over the limit! [ 513.510710][T10922] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 514.002633][ T1917] ================================================================== [ 514.010793][ T1917] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5d3/0x7e0 [ 514.018616][ T1917] Read of size 8 at addr ffff888056818008 by task kworker/u8:8/1917 [ 514.026603][ T1917] [ 514.028947][ T1917] CPU: 1 UID: 0 PID: 1917 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.028972][ T1917] Tainted: [L]=SOFTLOCKUP [ 514.028978][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.028990][ T1917] Workqueue: events_unbound linkwatch_event [ 514.029017][ T1917] Call Trace: [ 514.029024][ T1917] [ 514.029032][ T1917] dump_stack_lvl+0xe8/0x150 [ 514.029053][ T1917] print_report+0xca/0x240 [ 514.029070][ T1917] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 514.029094][ T1917] kasan_report+0x118/0x150 [ 514.029117][ T1917] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 514.029141][ T1917] __linkwatch_run_queue+0x5d3/0x7e0 [ 514.029165][ T1917] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 514.029196][ T1917] ? process_scheduled_works+0x9ef/0x1770 [ 514.029211][ T1917] ? process_scheduled_works+0x9ef/0x1770 [ 514.029227][ T1917] linkwatch_event+0x4c/0x60 [ 514.029248][ T1917] process_scheduled_works+0xad1/0x1770 [ 514.029273][ T1917] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.029288][ T1917] ? do_raw_spin_lock+0x121/0x290 [ 514.029315][ T1917] worker_thread+0x8a0/0xda0 [ 514.029341][ T1917] ? __kthread_parkme+0x7b/0x200 [ 514.029362][ T1917] kthread+0x711/0x8a0 [ 514.029383][ T1917] ? __pfx_worker_thread+0x10/0x10 [ 514.029398][ T1917] ? __pfx_kthread+0x10/0x10 [ 514.029418][ T1917] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.029442][ T1917] ? __pfx_kthread+0x10/0x10 [ 514.029462][ T1917] ret_from_fork+0x510/0xa50 [ 514.029477][ T1917] ? __pfx_ret_from_fork+0x10/0x10 [ 514.029490][ T1917] ? __switch_to+0xc9e/0x1480 [ 514.029512][ T1917] ? __pfx_kthread+0x10/0x10 [ 514.029532][ T1917] ret_from_fork_asm+0x1a/0x30 [ 514.029559][ T1917] [ 514.029565][ T1917] [ 514.198215][ T1917] The buggy address belongs to the physical page: [ 514.204731][ T1917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056818000 pfn:0x56818 [ 514.214805][ T1917] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 514.221938][ T1917] raw: 00fff00000000000 ffffea0001602d08 ffffea000161b508 0000000000000000 [ 514.230535][ T1917] raw: ffff888056818000 0000000000000000 00000000ffffffff 0000000000000000 [ 514.239205][ T1917] page dumped because: kasan: bad access detected [ 514.245627][ T1917] page_owner tracks the page as freed [ 514.250995][ T1917] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 11877, tgid 11876 (syz.1.1421), ts 513610741331, free_ts 513867798459 [ 514.272744][ T1917] post_alloc_hook+0x234/0x290 [ 514.277523][ T1917] get_page_from_freelist+0x24e0/0x2580 [ 514.283078][ T1917] __alloc_frozen_pages_noprof+0x181/0x370 [ 514.288899][ T1917] alloc_pages_mpol+0x232/0x4a0 [ 514.293769][ T1917] ___kmalloc_large_node+0x4e/0x150 [ 514.298972][ T1917] __kmalloc_large_node_noprof+0x18/0x90 [ 514.304629][ T1917] __kvmalloc_node_noprof+0x6e/0x920 [ 514.309951][ T1917] alloc_netdev_mqs+0xa6/0x11b0 [ 514.314815][ T1917] tun_set_iff+0x532/0xf00 [ 514.319248][ T1917] __tun_chr_ioctl+0x788/0x1df0 [ 514.324120][ T1917] __ia32_compat_sys_ioctl+0x543/0x840 [ 514.329581][ T1917] __do_fast_syscall_32+0x1dc/0x570 [ 514.334795][ T1917] do_fast_syscall_32+0x34/0x80 [ 514.339657][ T1917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.346003][ T1917] page last free pid 11878 tgid 11876 stack trace: [ 514.352604][ T1917] __free_frozen_pages+0xbc8/0xd30 [ 514.357731][ T1917] device_release+0x9e/0x1d0 [ 514.362381][ T1917] kobject_put+0x228/0x570 [ 514.366809][ T1917] netdev_run_todo+0xd2c/0xea0 [ 514.371588][ T1917] tun_chr_close+0x13c/0x1c0 [ 514.376183][ T1917] __fput+0x44c/0xa70 [ 514.380186][ T1917] task_work_run+0x1d4/0x260 [ 514.384815][ T1917] exit_to_user_mode_loop+0xef/0x4e0 [ 514.390139][ T1917] __do_fast_syscall_32+0x398/0x570 [ 514.395369][ T1917] do_fast_syscall_32+0x34/0x80 [ 514.400245][ T1917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 514.406658][ T1917] [ 514.408986][ T1917] Memory state around the buggy address: [ 514.414658][ T1917] ffff888056817f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 514.422895][ T1917] ffff888056817f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 514.431001][ T1917] >ffff888056818000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 514.439158][ T1917] ^ [ 514.443496][ T1917] ffff888056818080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 514.451566][ T1917] ffff888056818100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 514.459635][ T1917] ================================================================== [ 514.908813][ T1917] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 514.916102][ T1917] CPU: 1 UID: 0 PID: 1917 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.927162][ T1917] Tainted: [L]=SOFTLOCKUP [ 514.931490][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.941556][ T1917] Workqueue: events_unbound linkwatch_event [ 514.947495][ T1917] Call Trace: [ 514.950802][ T1917] [ 514.953815][ T1917] vpanic+0x1e0/0x670 [ 514.957827][ T1917] panic+0xb9/0xc0 [ 514.961816][ T1917] ? __pfx_panic+0x10/0x10 [ 514.966322][ T1917] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 514.971804][ T1917] check_panic_on_warn+0x89/0xb0 [ 514.976830][ T1917] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 514.982309][ T1917] end_report+0x6f/0x140 [ 514.986694][ T1917] kasan_report+0x129/0x150 [ 514.991260][ T1917] ? __linkwatch_run_queue+0x5d3/0x7e0 [ 514.996764][ T1917] __linkwatch_run_queue+0x5d3/0x7e0 [ 515.002069][ T1917] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 515.007890][ T1917] ? process_scheduled_works+0x9ef/0x1770 [ 515.013619][ T1917] ? process_scheduled_works+0x9ef/0x1770 [ 515.019356][ T1917] linkwatch_event+0x4c/0x60 [ 515.023972][ T1917] process_scheduled_works+0xad1/0x1770 [ 515.029551][ T1917] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.035616][ T1917] ? do_raw_spin_lock+0x121/0x290 [ 515.040661][ T1917] worker_thread+0x8a0/0xda0 [ 515.045262][ T1917] ? __kthread_parkme+0x7b/0x200 [ 515.050248][ T1917] kthread+0x711/0x8a0 [ 515.054353][ T1917] ? __pfx_worker_thread+0x10/0x10 [ 515.059496][ T1917] ? __pfx_kthread+0x10/0x10 [ 515.064107][ T1917] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.069329][ T1917] ? __pfx_kthread+0x10/0x10 [ 515.073942][ T1917] ret_from_fork+0x510/0xa50 [ 515.078549][ T1917] ? __pfx_ret_from_fork+0x10/0x10 [ 515.083669][ T1917] ? __switch_to+0xc9e/0x1480 [ 515.088359][ T1917] ? __pfx_kthread+0x10/0x10 [ 515.092997][ T1917] ret_from_fork_asm+0x1a/0x30 [ 515.097779][ T1917] [ 515.101467][ T1917] Kernel Offset: disabled [ 515.105805][ T1917] Rebooting in 86400 seconds..