last executing test programs: 13m10.342050195s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'bridge0\x00', {0x2, 0x4e23, @private=0xa010100}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) fcntl$setpipe(r2, 0x407, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m5.84392836s ago: executing program 1 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xdffffffe}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {0x0, 0xadaf5e41c2d860ea}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0xb, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x9, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x5, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() socket(0x10, 0x803, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, r7, 0x1, 0x800, 0x81, 0x3, {0xc, 0xfacd, 0xd, 0xa2a4, 0xfff9, 0x7, 0x8, 0x81, 0xff, 0x0, 0x1000, 0x7, 0x7, 0x6, "0bcc13d30df5fd54520c2e0db22142cf8957703ef62a79518b9d7ff3a31faf87"}}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000a80)=0x5, 0x8, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x1, 0xe, 0x4, 0x0, 0x800}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) ioprio_set$pid(0x0, r1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0xfeff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x1208800, 0x0) 13m4.243756304s ago: executing program 1 (id=10): openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0xd6055fb6492efb7e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigsuspend(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 13m2.883776133s ago: executing program 1 (id=11): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'bridge0\x00', {0x2, 0x4e23, @private=0xa010100}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) fcntl$setpipe(r2, 0x407, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m55.344626968s ago: executing program 1 (id=14): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000780)='/dev/comedi4\x00', 0x40842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x29, 0x8, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x0, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x3a, 0x9]}, 0x4, 0x3}}}) pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r6, 0x20, 0x12, 0x2, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1c67, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0x4040810) setresuid(0xee01, 0xee00, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000000)={0x0, 0x1ff, 0x42, 0xb97}) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0xfdef) 12m38.928350765s ago: executing program 32 (id=14): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000780)='/dev/comedi4\x00', 0x40842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x29, 0x8, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x0, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x3a, 0x9]}, 0x4, 0x3}}}) pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r6, 0x20, 0x12, 0x2, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x1c67, 0x1b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008}, 0x4040810) setresuid(0xee01, 0xee00, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000000)={0x0, 0x1ff, 0x42, 0xb97}) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0xfdef) 11m45.834380639s ago: executing program 4 (id=94): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, {0x10, 0x4}, {0xc0, 0xb, 0x40020000}, {0x0, 0x8}, {0x4, 0xb}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0xb, 0x400009, 0x3, 0x0, 0x3f, 0x1, 0x0, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000000c0)=0x80) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x8, 0x5e, 0x8}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) 11m44.407278225s ago: executing program 4 (id=99): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) 11m37.297127398s ago: executing program 4 (id=104): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000040)) syz_open_pts(r8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000005c0)={0x1, 0x0, @pic={0x6, 0x7, 0x8, 0xc, 0x4, 0xab, 0x2, 0x2, 0x27, 0xf4, 0x6b, 0xc, 0x9, 0x81, 0x5, 0x29}}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xd) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) 11m32.006071867s ago: executing program 4 (id=107): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x1, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x3721, 0x16, 0x0, 0x0) 11m31.626608517s ago: executing program 4 (id=108): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$FUSE(r3, 0x0, 0x2000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) 11m29.941148064s ago: executing program 4 (id=111): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x80, 0x8, 0x6}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r4 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r4) close(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r5, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504"], 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xfe2, &(0x7f0000001840)=""/4066, 0x0, 0x55}, 0x94) 11m14.785333199s ago: executing program 33 (id=111): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x80, 0x8, 0x6}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r4 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r4) close(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r5, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504"], 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xfe2, &(0x7f0000001840)=""/4066, 0x0, 0x55}, 0x94) 4m9.069791189s ago: executing program 3 (id=1376): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b300000001"], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x8, @val=@netfilter={0x7, 0x0, 0xfffffff9}}, 0x20) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = msgget$private(0x0, 0x508) msgrcv(r5, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x60000000) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 4m5.837003905s ago: executing program 3 (id=1403): io_setup(0x3, 0x0) r0 = syz_usb_connect(0x5, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x5, 0x5, "d15b89"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m2.369848129s ago: executing program 3 (id=1436): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) 4m0.722641703s ago: executing program 3 (id=1445): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000180)={[{@noblock_validity}, {@inlinecrypt}, {@norecovery}, {@norecovery}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000003c0)={0x0, 0xfb, 0x15, 0x1, 0x8, "013eae7bbd89d91952bb36d48f8f6c4a"}, 0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x0, 0x0, 0xff, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, r2, 0x6, 0x20, 0x0, @void, @void, @void, @value, r3}, 0x20) 3m57.973340608s ago: executing program 3 (id=1463): socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x149a82, 0x0) pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x4) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f00003bf000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x0, 0x40, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0xc, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x6, 0x7f, {0x8, 0x25, 0x1, 0x3, 0x33, 0x9, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x0, 0x8c, {0x8, 0x25, 0x1, 0x2, 0x0, 0x0, 0x3}}}}}}}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) syz_ublk_setup_queues(r4, r2, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0xfffffffe, 0x25a, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2033f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x292}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) 3m54.10280816s ago: executing program 3 (id=1490): syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x0, [0x2, 0x6, 0x6, 0x8, 0x8cbe, 0x2, 0x6, 0x5, 0xa, 0xff, 0x3, 0xc1, 0x5, 0x1, 0x3, 0x7, 0x374, 0x6, 0x4, 0x7fff, 0x6, 0x0, 0x400, 0x4, 0x4001, 0xa, 0xff, 0xffff, 0x1, 0xc55, 0x2, 0x9, 0x8, 0x0, 0x5, 0x480d, 0x81, 0xbc, 0x41e, 0x938, 0x2, 0xd, 0x100, 0x8, 0xb, 0x0, 0x1003, 0x2], 0x6c4202c9}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="494d495820274d617374657220436170747572652c651fab30303030303030303030303030"], 0x2b) close(0xffffffffffffffff) ioctl$FBIOGET_FSCREENINFO(r6, 0x4602, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) 3m53.645780826s ago: executing program 34 (id=1490): syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @sliced={0x0, [0x2, 0x6, 0x6, 0x8, 0x8cbe, 0x2, 0x6, 0x5, 0xa, 0xff, 0x3, 0xc1, 0x5, 0x1, 0x3, 0x7, 0x374, 0x6, 0x4, 0x7fff, 0x6, 0x0, 0x400, 0x4, 0x4001, 0xa, 0xff, 0xffff, 0x1, 0xc55, 0x2, 0x9, 0x8, 0x0, 0x5, 0x480d, 0x81, 0xbc, 0x41e, 0x938, 0x2, 0xd, 0x100, 0x8, 0xb, 0x0, 0x1003, 0x2], 0x6c4202c9}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="494d495820274d617374657220436170747572652c651fab30303030303030303030303030"], 0x2b) close(0xffffffffffffffff) ioctl$FBIOGET_FSCREENINFO(r6, 0x4602, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) 14.070910441s ago: executing program 0 (id=2132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.828825544s ago: executing program 0 (id=2135): io_setup(0x3, 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12.288026022s ago: executing program 7 (id=2139): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) 12.279195224s ago: executing program 6 (id=2140): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) 12.253226363s ago: executing program 5 (id=2141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x2, 0x40000000007253, 0xce9, 0x8, 0x9, 0x6, 0x52e6ac5d, 0x7ff, 0xd, 0x0, 0x0, 0x20000000000082a, 0x6, 0x2, 0x2, 0x6, 0xfffffffffffffffd, 0x200000000000008d, 0x2, 0x200000008000000, 0x1, 0x3, 0xfffffffb, 0xfffffffffffffffb, 0x9dc6, 0xa}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e3279f"}}}}, 0x3b) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r7, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) close_range(r8, r8, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000100)=0x2) 11.634291867s ago: executing program 5 (id=2143): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x60, 0x1, 0x9cd, 0x12, 0x6, 0x1]}, &(0x7f0000000180)=0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xb4}}, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000409bcdf04cbfe37adfa4bc4248863d6855c0bf8f8abb3b3c3c551a482375bafa70e545f7177e77aeb15b126a3be46683b75a7f84e33fc0a70d9489694a", 0x42}], 0x1, 0x0, 0x4) 10.209412452s ago: executing program 6 (id=2144): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x2, 0x40000000007253, 0xce9, 0x8, 0x9, 0x6, 0x52e6ac5d, 0x7ff, 0xd, 0x0, 0x0, 0x20000000000082a, 0x6, 0x2, 0x2, 0x6, 0xfffffffffffffffd, 0x200000000000008d, 0x2, 0x200000008000000, 0x1, 0x3, 0xfffffffb, 0xfffffffffffffffb, 0x9dc6, 0xa}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x18, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "c1963bf57e73e327"}}}}, 0x3a) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r7, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) close_range(r8, r8, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000100)=0x2) 10.181710776s ago: executing program 7 (id=2145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.091760955s ago: executing program 2 (id=2146): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) 9.944666718s ago: executing program 0 (id=2147): io_setup(0x3, 0x0) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x7, "fde61e0ee4a63b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.81281587s ago: executing program 7 (id=2148): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0xc00000}) 8.722262086s ago: executing program 2 (id=2149): openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0xff03, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]}) 8.39251849s ago: executing program 7 (id=2150): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x50, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000000000000000e926ba2800", 0x7602691b}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f000024b000/0x4000)=nil, 0x4000, 0x18) (async) close(r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000ba000000ba0000000a0000000b00000000000010040000000b000000050000858d000000030000000100000005000000060007000000000000000000090000000000000005000000050000000000000001400000020000000300000000000800040000000000000903000000100000000400000f0200000006000000070000000300000002000000fc3d0000010000000200000008000000d10a00000200000000020000080000000000000001000000001e002200020000000000000a020000000000005f3061002e2e303000"], &(0x7f00000001c0)=""/48, 0xde, 0x30, 0x1, 0x1320000}, 0x28) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f00000008c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941", @ANYRES16], 0x5, 0x4440, &(0x7f000000cd00)="$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") 7.847873427s ago: executing program 2 (id=2151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x9, 0xa, 0x5, 0x4, 0xffffffffffffffef}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (fail_nth: 5) 6.689444201s ago: executing program 2 (id=2152): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x480c5) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x981, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x40080c0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000240)={&(0x7f0000001c80)=[{0x0, 0x8000, 0x4, &(0x7f0000000100)="65e45f1b"}, {0x5, 0x410, 0xffc, &(0x7f0000000b80)="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"}, {0x57a, 0x2010, 0x3, &(0x7f0000001b80)="c0d753"}, {0x7, 0x4000, 0x47, &(0x7f0000001bc0)="c5493f7b7f58eae804608d963b223c12103a361c25f5b9c11fa416047c8342d6010b8f4738c385facbd73831e55df0d8ad0c17d186967fccc9c2f3369954bb9a37c17ac8c35065"}], 0x4}) 6.573810483s ago: executing program 6 (id=2153): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x60, 0x1, 0x9cd, 0x12, 0x6, 0x1]}, &(0x7f0000000180)=0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xb4}}, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000409bcdf04cbfe37adfa4bc4248863d6855c0bf8f8abb3b3c3c551a482375bafa70e545f7177e77aeb15b126a3be46683b75a7f84e33fc0a70d9489694a", 0x42}], 0x1, 0x0, 0x4) 5.711147192s ago: executing program 5 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7b0000f9690000010000"], 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x20, @string={0x20, 0x3, "0ba3516684898a8ee29800fd28b7936b455d7a22074fc676ab434617b9c9"}}, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000000f) fcntl$notify(r7, 0x402, 0xc0000030) getdents64(r7, &(0x7f0000001000)=""/164, 0xa4) write$P9_RMKDIR(r8, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x4, 0x2}}, 0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x7d, 0xffffffffffffffff, 0x0, 0x0}) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000cb016a028cca1b138506000000339d99857588e1000000007737000000", @ANYRES32, @ANYBLOB="01000001000000711c0212000c000100626f6e00"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xfc40bc331d542612}, 0x800) 5.224696154s ago: executing program 7 (id=2155): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000a40)) r1 = getpid() r2 = syz_usb_connect(0x5, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f00000002c0)={0x0, 0x2}, 0x8) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000540)=""/99, 0x63) landlock_restrict_self(0xffffffffffffffff, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x4d, 0x4, r1, 0x0, 0x0) 4.726427298s ago: executing program 0 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d07}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x41565559, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x4}]}}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r7, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x57, @string={0x57, 0x3, "b8fb443f0bf309f4e0b27483e5836bc1ad1e78d46e34f206fb3bc4e474b3e52d33cf0b10a4b71df3a8f9316fb85f1fe59ebd1d55fcf4b6e1c2e579e2fb106bfa7ad87ac0589309c1e00d51e5aa2fb2ea421063cbad"}}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7b0000f9690000010000"], 0x0, 0x0}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000000f) fcntl$notify(r9, 0x402, 0xc0000030) getdents64(r9, &(0x7f0000001000)=""/164, 0xa4) write$P9_RMKDIR(r10, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x4, 0x2}}, 0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x7d, 0xffffffffffffffff, 0x0, 0x0}) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000cb016a028cca1b138506000000339d99857588e1000000007737000000", @ANYRES32, @ANYBLOB="01000001000000711c0212000c000100626f6e00"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xfc40bc331d542612}, 0x800) 3.32012501s ago: executing program 2 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63eda2d1f8e64c37df251200000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000e4b05aa46df5a31f796a36d62fcd10b6cac7721866816ecff6df99ab33b84678fa5c0173ad03e10896b218e6c82d19a8e19e8a3cfca57ee60911c2bc831c1004a61f3227958c13d7a3ff7cd971d370d70af374bdc38bb45998a9b08bf01eb66f1f629b17a67d0", @ANYRES16=r7, @ANYBLOB="0d0626bd7000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="380033004008ff00080211000000080211000001ef35c708c51d2b002d1a0040100200000000000000100076001f0000000108090000000208002600fd160000"], 0x5c}, 0x1, 0x0, 0x0, 0x95}, 0x4048000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000002d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d40)={&(0x7f00000007c0)={0x2568, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x128, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}, @mic={0x8c, 0x10, {0x9dc, "bff58428af26", @short="c8ce3f0cc4d4e513"}}, @fast_bss_trans={0x37, 0xe6, {0x9, 0x6, "8833607a676f292d4e09a28f04e49d92", "78fed2fd358d10d2332efe9cd03f778875591e44407748701171297ae61b52ba", "09131ba82f66c454f204545541cc79d94ee62d2a39359cb43d807cb28ff1ef12", [{0x2, 0x15, "8b85ee3ca9cc7a6cc7c6b7bf1d4c85a8c4914be9ce"}, {0x1, 0x17, "a42f65466c62f1ee5fec8daf5df4762e6ba7f13ea02a20"}, {0x4, 0x21, "463488c594649e5a116391a15c57be1a8de8d1068808ba6ed1f9d8f751ec5d1957"}, {0x2, 0x8, "e1db68c26eb46d0d"}, {0x4, 0xe, "e138ff2124d704edcd24c7bf54d0"}, {0x2, 0x25, "0e7f609bf41b61d21eea99d1b1a0075a04d81070f2cfadfa1d51f9864f70d009346df201ac"}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6f62fa58ca11974c1b0e8305"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "3dca3c38f5f4be02d91f543d1ffe63"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "f0d4"}, @NL80211_ATTR_FILS_ERP_REALM={0x8b, 0xfa, "450cad0079195dc2db9d4c8c71bfeec3b6ad085d60caca6ab535232655cfbc2edf994b2a6793f91f8b032974d4abd07f8ad2c379fc8faa8cfdf985ea774d29b0664981b950da7171c8d0c2cef743edf5c80e7a23043d606bef24e898da459e5597993ace5558dc4d85e36d5508fb4bfa00f1313acf76f769f651ce6bdebdb2bf3380540e88016f"}, @NL80211_ATTR_FILS_ERP_RRK={0x98, 0xfc, "2292a46d4597fd4513de063fa439c7e5d01beb3bd283eb29199d7d09464ac48cb16f9e4f145358a1cf9603385ad352ad3b991bee6a9ae104dbc09d1f8c68594bc7e2704abca041a51c0693d57afff7ad694fe2cc04df5a47110ce93646af27c456b272e627298e3a7f8100d6a6d320c0bceb82afbf8429e3ead24c42cdb769cee7129297871272a7620e701267610a8e330c8334"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @fils_params, @fils_params, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x2a, 0xfa, "19909142bb8335a52a017cb8bc9bd4b94faa51fb225971bffdc0683dce2f8b6a14d399c07d9d"}, @NL80211_ATTR_FILS_ERP_REALM={0x3d, 0xfa, "b61b375e5c812a581b9e7e05cec48c788370528b316008c4ae81b9d1faf9acd9daf455e843d54adf21619a5c5994e80284acf82571057e05b8"}, @NL80211_ATTR_FILS_ERP_REALM={0x63, 0xfa, "124a5306933c38ea0c8158a48529bbc668b15386f031ed70ba9255628a4333171e9eff7e0e43a41a848a8c06bfae28f708309e5a2ef4465569f19b3c893f62c4cb36b206c189c1ddbd849e6d911eed9800336e19bfe82c8b60cb9adebc3c95"}, @NL80211_ATTR_FILS_ERP_REALM={0x85, 0xfa, "8914bfd1818797fa2ba26c647fd32cd3f8daf85c6d21cf9fe36cac2489679daa907e4dea25eae334448340339df73eaee7a25834ff835f7677aba950960416ae1b0e4f941bdbd773c529650acb368f2338d79b2588c3d90f70850674ebcea8a5c8d7af370d0a0f4ae89e802042147c0129c7375f7b41f44dc2fda326c3aed7e585"}, @NL80211_ATTR_FILS_ERP_REALM={0x5a, 0xfa, "64a179837e9c53f0e492cfd243640cd9e7850afb32833dfdd296e3cd4fc8862609d362af6d8d6e5744f3a7280ff51a32e9247e535fa280a9dfcc7f725327e75e5ed53e340950d9cff505ac9a6b53f66ac4726e5c785c"}, @NL80211_ATTR_FILS_ERP_REALM={0x73, 0xfa, "b471e3305e1ce4d00a6334f81a9f8f0082f64b843dac0a296a841f98325c6536d2ab8f278f2cdbe5b3997d67ab188d4d1aa4d435d3934790d6ff61d7089496fa84c4c66d978253b768c5ca0db9b12354c7ea1c974d84264f4413f73f50bbd1d89fe32648b628e992d079243e96301c"}, @NL80211_ATTR_FILS_ERP_RRK={0x98, 0xfc, "5e48d8248ff51a7af5841a68dcf191c021031c8d865e760ab339e91698189842566bd3d7585e5a0d533113607104d7dc3ed155ddff3ad4f1761793a78f23c980661d323f1a710c3f8fe3cbf59dd6ccd7a8ed47c9610fa811a52fa34bed538001d3479c6689c4cdb4c61d0043ae741f01adb0f7d7d0f40bdb3fd54321d5e0b8585781170efda5c113ca508cbccded52c4585b70e0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}]]}, 0x2568}, 0x1, 0x0, 0x0, 0x20000040}, 0x4800) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r13, &(0x7f0000000000)="41000200010006", 0x7) syz_clone3(&(0x7f0000000180)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r14 = dup(r4) write$UHID_INPUT(r14, &(0x7f000001aa80)={0x7, {"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", 0x1000}}, 0x1006) 3.266886153s ago: executing program 5 (id=2158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.915082472s ago: executing program 5 (id=2159): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) 1.862594078s ago: executing program 0 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setuid(0xee00) ioprio_set$pid(0x2, 0x0, 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600)='./file0/file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000040)="01000000020001000003be8c5ee15688210a0f1c16758312cd32e920bbe92a908a36f0f30e9d1c10583e41b1cd38186796cebb3b54fc551126faa33f900d6eeefcc35a2620e5bca0678deb3371ba40f7b33bd040202476fb4303ec35f5a9526c5459a9fcb09af29d7da077e3c9c377", 0x6f) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x484, 0x0, 0xffffffffffffffff}]}) 1.770819141s ago: executing program 5 (id=2161): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) getpid() r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x1e) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f00000002c0)={0x0, 0x2}, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000540)=""/99, 0x63) 1.564583778s ago: executing program 2 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d07}]}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7b0000f9690000010000"], 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x20, @string={0x20, 0x3, "0ba3516684898a8ee29800fd28b7936b455d7a22074fc676ab434617b9c9"}}, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000000f) fcntl$notify(r8, 0x402, 0xc0000030) getdents64(r8, &(0x7f0000001000)=""/164, 0xa4) write$P9_RMKDIR(r9, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x4, 0x2}}, 0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x7d, 0xffffffffffffffff, 0x0, 0x0}) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000cb016a028cca1b138506000000339d99857588e1000000007737000000", @ANYRES32, @ANYBLOB="01000001000000711c0212000c000100626f6e00"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xfc40bc331d542612}, 0x800) 1.564314693s ago: executing program 0 (id=2163): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1) 1.364417753s ago: executing program 6 (id=2164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000f40)="eb7a730e311d6ed2e31fa2041daa722c05de06ff7591bc7b2fe4b5c8759d793f2f7bb71bacdf8fc3a7c8c7bea949e419b6361fbae15c4d6e563d188a1e87a692be34c9f24b6b500c4ce24047b180237e4e6ad1819fd2a56a7c04f991d94f4adce2baf9feb60f6db9efb166f194cf66e7e6574b59239b867061926e68a926c0e7", 0x80}], 0x1}}], 0x1, 0x8800) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x1, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x40, 0x20, 0x7, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="92", 0x1, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r3, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) inotify_init1(0x800) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r8, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x4cf5}, 0x100003, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x8000, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x2, 0x10000000, 0x7, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x0, 0x0, 0x5b7f28b1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3b6, 0x7, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0xfffffffd, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3fc]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) 247.481742ms ago: executing program 6 (id=2165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x9, 0xa, 0x5, 0x4, 0xffffffffffffffef}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.434203ms ago: executing program 6 (id=2166): r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r1 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x8280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x0) r3 = syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000004c0)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, ':\\'}}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f00000005c0)=""/147, 0x93) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000380)={0x9, {0xe, 0x7, 0xc647, 0xfef}}) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000000c0)={0x80}) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}, {0x0, 0x4, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) execveat(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000340)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000440)='-@]+\xc2]\x00', &(0x7f0000000480)='fowner>', &(0x7f0000000540)='[&*:\x00', &(0x7f0000000580)='/\x00', &(0x7f0000000680)='$\x00', &(0x7f00000006c0)=')+,&^\x00', &(0x7f0000000700)='fowner>', &(0x7f0000000740)='fscontext']}, &(0x7f0000000900)={[&(0x7f0000000800)='\x00', &(0x7f0000000840)='@*\x00', &(0x7f0000000880)='permit_directio', &(0x7f00000008c0)='\x00']}, 0x100) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000d6081d8f75010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a32000000000800044000000000090001006c6b534773797a30000000000800034000000008140000001191145f8bf88f3f4ebcf2efc28de625"], 0x64}}, 0x0) unshare(0x40400) 0s ago: executing program 7 (id=2167): r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}, {0x0, 0x4, 0x1000}], 0x2) semctl$SETALL(r0, 0xff7f0000, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) kernel console output (not intermixed with test programs): lNumber: syz [ 796.272607][ T5608] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 796.296928][ T5608] usb 1-1: device descriptor read/8, error -71 [ 796.402910][ T5608] usb usb1-port1: unable to enumerate USB device [ 796.737342][ T49] legousbtower 3-1:14.57: interrupt endpoints not found [ 796.995359][ T49] legousbtower 3-1:14.228: get version request failed: -71 [ 796.995547][ T49] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 797.080195][ T49] usb 3-1: USB disconnect, device number 97 [ 797.173226][ T5730] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 797.408130][ T5730] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.408170][ T5730] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.408199][ T5730] usb 8-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 797.408217][ T5730] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.581138][ T5730] usb 8-1: config 0 descriptor?? [ 797.815708][ T37] kauditd_printk_skb: 119 callbacks suppressed [ 797.815733][ T37] audit: type=1326 audit(1783417746.871:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.816003][ T37] audit: type=1326 audit(1783417746.871:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.816633][ T37] audit: type=1326 audit(1783417746.871:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.816942][ T37] audit: type=1326 audit(1783417746.871:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.817023][ T37] audit: type=1326 audit(1783417746.871:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.817275][ T37] audit: type=1326 audit(1783417746.871:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.817323][ T37] audit: type=1326 audit(1783417746.871:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.817766][ T37] audit: type=1326 audit(1783417746.871:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.818078][ T37] audit: type=1326 audit(1783417746.871:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce59dcdaeb code=0x7ffc0000 [ 797.818251][ T37] audit: type=1326 audit(1783417746.871:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12820 comm="syz.7.1997" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce59dcde59 code=0x7ffc0000 [ 797.858578][T12818] syzkaller1: entered promiscuous mode [ 797.858610][T12818] syzkaller1: entered allmulticast mode [ 797.986730][ T49] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 798.115005][ T5730] playstation 0003:054C:0BA0.0038: item fetching failed at offset 0/7 [ 798.115688][ T5730] playstation 0003:054C:0BA0.0038: Parse failed [ 798.115760][ T5730] playstation 0003:054C:0BA0.0038: probe with driver playstation failed with error -22 [ 798.291296][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 798.315365][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.316116][T12821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.316497][ T49] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 798.316520][ T49] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 798.316541][ T49] usb 3-1: config 14 has no interface number 0 [ 798.316557][ T49] usb 3-1: config 14 has no interface number 1 [ 798.316635][ T49] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 798.316659][ T49] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 798.316685][ T49] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 798.316712][ T49] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 798.316747][ T49] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 798.316771][ T49] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.316795][ T49] usb 3-1: config 14 interface 57 has no altsetting 0 [ 798.316812][ T49] usb 3-1: config 14 interface 228 has no altsetting 0 [ 798.318082][T12821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.319173][ T49] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 798.319200][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.319220][ T49] usb 3-1: Product: syz [ 798.319233][ T49] usb 3-1: Manufacturer: syz [ 798.319248][ T49] usb 3-1: SerialNumber: syz [ 798.527373][ T5730] usb 8-1: USB disconnect, device number 16 [ 798.900577][ T49] legousbtower 3-1:14.57: interrupt endpoints not found [ 799.694891][ T4960] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 799.794204][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 799.794223][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 799.848597][ T4960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 799.848693][ T4960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.848743][ T4960] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 799.848769][ T4960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.914188][ T4960] usb 7-1: config 0 descriptor?? [ 799.984690][ T49] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 800.107483][ T49] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 800.327723][T11780] usb 3-1: USB disconnect, device number 98 [ 800.395573][T11780] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 800.431052][ T4960] kye 0003:0458:5016.0039: control desc unexpectedly large [ 800.487596][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0039/input/input84 [ 800.601992][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0039/input/input85 [ 800.702360][ T5730] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 800.833176][ T4960] kye 0003:0458:5016.0039: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 800.834856][ T5730] usb 1-1: device descriptor read/64, error -71 [ 801.095347][ T5730] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 801.234751][ T5730] usb 1-1: device descriptor read/64, error -71 [ 801.407914][ T5730] usb usb1-port1: attempt power cycle [ 801.735174][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2000'. [ 802.558767][ T5730] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 802.576417][ T5730] usb 1-1: device descriptor read/8, error -71 [ 802.825861][ T5730] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 802.896629][ T5730] usb 1-1: device descriptor read/8, error -71 [ 802.926375][T12558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 803.003327][ T5730] usb usb1-port1: unable to enumerate USB device [ 803.062412][ T5608] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 803.105544][T12558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.110293][T12558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 803.183408][T12558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.184499][T11780] usb 7-1: USB disconnect, device number 63 [ 803.191975][T12558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 803.225911][ T5608] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.225956][ T5608] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 803.225978][ T5608] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.279374][ T5608] usb 8-1: config 0 descriptor?? [ 803.315488][ T5608] smsusb:smsusb_probe: board id=8, interface number 0 [ 803.315567][ T5608] smsusb:smsusb_probe: Device initialized with return code -19 [ 803.401022][T12558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.407391][T12558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.482398][T12558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.549922][ T5730] usb 8-1: USB disconnect, device number 17 [ 803.721910][T12908] netlink: 'syz.0.2009': attribute type 10 has an invalid length. [ 803.775872][T12910] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2009'. [ 803.895080][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.945250][T12908] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 804.072397][T11780] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 804.167032][T12910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.225266][T11780] usb 7-1: Using ep0 maxpacket: 8 [ 804.227546][T11780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.227715][T11780] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.257449][ T5836] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 804.260947][T11780] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 804.260976][T11780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.261053][T11780] usb 7-1: Product: syz [ 804.261069][T11780] usb 7-1: Manufacturer: syz [ 804.261084][T11780] usb 7-1: SerialNumber: syz [ 804.360035][T12910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.432327][ T4960] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 804.451430][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 804.479920][T12910] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 804.495419][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 804.514101][ T5836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 804.515481][ T5836] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 804.515506][ T5836] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 804.515527][ T5836] usb 3-1: config 14 has no interface number 0 [ 804.515545][ T5836] usb 3-1: config 14 has no interface number 1 [ 804.515671][ T5836] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 804.515698][ T5836] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 804.515780][ T5836] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 804.515809][ T5836] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 804.515837][ T5836] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 804.515864][ T5836] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.515945][ T5836] usb 3-1: config 14 interface 57 has no altsetting 0 [ 804.515965][ T5836] usb 3-1: config 14 interface 228 has no altsetting 0 [ 804.533659][ T5836] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 804.533852][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.533902][ T5836] usb 3-1: Product: syz [ 804.534075][ T5836] usb 3-1: Manufacturer: syz [ 804.534514][ T5836] usb 3-1: SerialNumber: syz [ 804.654177][ T4960] usb 8-1: Using ep0 maxpacket: 32 [ 804.690529][ T4960] usb 8-1: unable to get BOS descriptor or descriptor too short [ 804.691609][ T4960] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 804.691630][ T4960] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 804.691649][ T4960] usb 8-1: config 14 has no interface number 0 [ 804.691663][ T4960] usb 8-1: config 14 has no interface number 1 [ 804.691708][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 804.691733][ T4960] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 804.691755][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 804.691776][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 804.691798][ T4960] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.691841][ T4960] usb 8-1: config 14 interface 57 has no altsetting 0 [ 804.691856][ T4960] usb 8-1: config 14 interface 228 has no altsetting 0 [ 804.816319][ T4960] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 804.816349][ T4960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.816370][ T4960] usb 8-1: Product: syz [ 804.816384][ T4960] usb 8-1: Manufacturer: syz [ 804.816399][ T4960] usb 8-1: SerialNumber: syz [ 805.117391][ T4960] legousbtower 8-1:14.57: interrupt endpoints not found [ 805.129518][T12910] bond0 (unregistering): Released all slaves [ 805.163309][ T4960] legousbtower 8-1:14.228: interrupt endpoints not found [ 805.215782][ T4960] usb 8-1: USB disconnect, device number 18 [ 805.373747][ T5836] legousbtower 3-1:14.57: interrupt endpoints not found [ 805.647148][T11780] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input86 [ 805.656425][ T4952] bcm5974 7-1:1.0: could not read from device [ 805.746014][T11780] usb 7-1: USB disconnect, device number 64 [ 805.749889][ T4952] bcm5974 7-1:1.0: could not read from device [ 805.818010][ T5836] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 805.888253][ T5836] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 806.193483][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.281131][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.326997][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.335023][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.409898][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.410016][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.745681][ T5608] usb 3-1: USB disconnect, device number 99 [ 806.861955][ T5608] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 806.972375][ T4960] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 807.154140][ T4960] usb 7-1: Using ep0 maxpacket: 16 [ 807.157765][ T4960] usb 7-1: unable to get BOS descriptor or descriptor too short [ 807.158993][ T4960] usb 7-1: config 4 has an invalid interface number: 127 but max is 0 [ 807.159017][ T4960] usb 7-1: config 4 has no interface number 0 [ 807.159047][ T4960] usb 7-1: config 4 interface 127 has no altsetting 0 [ 807.162123][ T4960] usb 7-1: string descriptor 0 read error: -22 [ 807.162454][ T4960] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 807.162482][ T4960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.469894][ T5730] usb 7-1: USB disconnect, device number 65 [ 807.879337][T12952] hub 8-0:1.0: USB hub found [ 807.888683][T12952] hub 8-0:1.0: 1 port detected [ 808.052376][ T4960] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 808.210522][ T4960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.210551][ T4960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 808.210572][ T4960] usb 3-1: config 1 has no interface number 0 [ 808.210614][ T4960] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.279728][ T4960] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.279765][ T4960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.279785][ T4960] usb 3-1: Product: syz [ 808.279798][ T4960] usb 3-1: Manufacturer: syz [ 808.279810][ T4960] usb 3-1: SerialNumber: syz [ 808.356051][ T4960] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 808.356096][ T4960] cdc_ncm 3-1:1.1: bind() failure [ 808.545663][T11780] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 808.712147][T11780] usb 7-1: Using ep0 maxpacket: 32 [ 808.735396][T11780] usb 7-1: unable to get BOS descriptor or descriptor too short [ 808.743478][T11780] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 808.743568][T11780] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 808.743633][T11780] usb 7-1: config 14 has no interface number 0 [ 808.743651][T11780] usb 7-1: config 14 has no interface number 1 [ 808.743843][T11780] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 808.743914][T11780] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 808.743975][T11780] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 808.744052][T11780] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 808.744126][T11780] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 808.744206][T11780] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.744283][T11780] usb 7-1: config 14 interface 57 has no altsetting 0 [ 808.744332][T11780] usb 7-1: config 14 interface 228 has no altsetting 0 [ 808.802259][T11780] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 808.802293][T11780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.802306][T11780] usb 7-1: Product: syz [ 808.802316][T11780] usb 7-1: Manufacturer: syz [ 808.802325][T11780] usb 7-1: SerialNumber: syz [ 809.008745][ T5836] usb 3-1: USB disconnect, device number 100 [ 809.354574][T11780] legousbtower 7-1:14.57: interrupt endpoints not found [ 809.823702][T11780] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 809.869085][T11780] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 810.233885][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 810.233903][ T37] audit: type=1804 audit(1783417759.291:3561): pid=12973 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.2.2016" name="/newroot/287/file0" dev="tmpfs" ino=1511 res=1 errno=0 [ 810.512140][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.611775][T11780] usb 7-1: USB disconnect, device number 66 [ 813.684609][T11780] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 813.834395][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.834487][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.163037][T11780] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 814.468482][T11780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 814.468513][T11780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.468543][T11780] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 814.468563][T11780] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.537979][T11780] usb 7-1: config 0 descriptor?? [ 815.467829][ T5730] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 815.616818][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.616855][ T5730] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.617012][ T5730] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 815.617231][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.667019][ T5730] usb 3-1: config 0 descriptor?? [ 815.729407][T11780] kye 0003:0458:5016.003A: control desc unexpectedly large [ 815.748418][T11780] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.003A/input/input87 [ 815.831877][T11780] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.003A/input/input88 [ 815.886854][T11780] kye 0003:0458:5016.003A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 816.294747][T12558] veth0_vlan: entered promiscuous mode [ 816.328573][T12558] veth1_vlan: entered promiscuous mode [ 816.400703][T12558] veth0_macvtap: entered promiscuous mode [ 816.458029][T12558] veth1_macvtap: entered promiscuous mode [ 816.491468][T12558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.594606][T12558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.621713][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'. [ 816.671769][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.694406][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.706289][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.723606][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.862429][ C0] kye 0003:0458:5016.003A: usb_submit_urb(ctrl) failed: -1 [ 817.004665][T11780] usb 7-1: reset full-speed USB device number 67 using dummy_hcd [ 817.383704][ T49] usb 3-1: USB disconnect, device number 101 [ 817.462322][T11780] usb 7-1: device descriptor read/64, error -32 [ 817.619066][T13011] netlink: 'syz.7.2024': attribute type 10 has an invalid length. [ 817.681712][T13013] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2024'. [ 817.754932][ T5589] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 817.952326][ T5589] usb 1-1: Using ep0 maxpacket: 32 [ 817.968412][ T5589] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.991702][ T5589] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 817.991731][ T5589] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 817.991753][ T5589] usb 1-1: config 14 has no interface number 0 [ 817.991772][ T5589] usb 1-1: config 14 has no interface number 1 [ 817.991853][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 817.991881][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 817.991909][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 817.992114][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 817.992148][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 817.996947][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.997047][ T5589] usb 1-1: config 14 interface 57 has no altsetting 0 [ 817.997100][ T5589] usb 1-1: config 14 interface 228 has no altsetting 0 [ 818.115554][ T5589] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 818.115584][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.115605][ T5589] usb 1-1: Product: syz [ 818.115620][ T5589] usb 1-1: Manufacturer: syz [ 818.115635][ T5589] usb 1-1: SerialNumber: syz [ 818.824636][ T5589] legousbtower 1-1:14.57: interrupt endpoints not found [ 818.992745][ T5836] usb 7-1: USB disconnect, device number 67 [ 819.331385][ T5589] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 819.413953][ T5589] legousbtower 1-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 819.449233][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2024'. [ 819.756931][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.756952][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.838726][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.838747][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.852411][ T5836] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 820.066583][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.066618][ T5836] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.066656][ T5836] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.066679][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.075829][ T5836] usb 7-1: config 0 descriptor?? [ 820.292575][ T5608] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 820.321056][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 820.321369][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 820.321673][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 820.321768][ T5836] usb 7-1: string descriptor 0 read error: -32 [ 820.358321][ T5836] usb 7-1: USB disconnect, device number 68 [ 820.432332][ T49] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 820.462565][ T5608] usb 3-1: Using ep0 maxpacket: 32 [ 820.471272][ T5608] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 820.471298][ T5608] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.471318][ T5608] usb 3-1: config 0 has no interface number 0 [ 820.471360][ T5608] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 820.471384][ T5608] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.471411][ T5608] usb 3-1: config 0 interface 12 has no altsetting 0 [ 820.530298][ T5863] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 820.539836][ T5608] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 820.539865][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.539885][ T5608] usb 3-1: Product: syz [ 820.539899][ T5608] usb 3-1: Manufacturer: syz [ 820.539914][ T5608] usb 3-1: SerialNumber: syz [ 820.619114][ T49] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.619149][ T49] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 820.619171][ T49] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 820.619206][ T49] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.619228][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.620637][ T5608] usb 3-1: config 0 descriptor?? [ 820.696420][ T5608] f81534 3-1:0.12: required endpoints missing [ 820.708572][ T5863] usb 8-1: Using ep0 maxpacket: 8 [ 820.763671][ T49] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.763836][ T5863] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.763881][ T5863] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 820.768960][ T5863] usb 8-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 820.768988][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.769009][ T5863] usb 8-1: Product: syz [ 820.769023][ T5863] usb 8-1: Manufacturer: syz [ 820.769038][ T5863] usb 8-1: SerialNumber: syz [ 821.255865][ T5833] usb 1-1: USB disconnect, device number 89 [ 821.416684][ T5833] legousbtower 1-1:14.228: LEGO USB Tower #-159 now disconnected [ 821.458022][ T5863] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input89 [ 821.485084][ T4952] bcm5974 8-1:1.0: could not read from device [ 821.499216][ T5806] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 821.574061][ T49] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 821.601794][ T5863] usb 8-1: USB disconnect, device number 19 [ 821.615872][ T49] usb 6-1: USB disconnect, device number 41 [ 821.677262][ T5806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 821.683906][ T5806] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 821.703644][ T5806] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 821.703674][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.703694][ T5806] usb 7-1: Product: syz [ 821.703708][ T5806] usb 7-1: Manufacturer: syz [ 821.703735][ T5806] usb 7-1: SerialNumber: syz [ 821.803394][ T5833] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 821.968462][ T5806] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 821.973444][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 821.992978][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 822.007212][ T5833] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 822.007239][ T5833] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 822.007260][ T5833] usb 1-1: config 14 has no interface number 0 [ 822.007345][ T5833] usb 1-1: config 14 has no interface number 1 [ 822.007426][ T5833] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 822.007857][ T5833] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 822.007884][ T5833] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 822.007916][ T5833] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 822.007942][ T5833] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 822.008330][ T5833] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.008357][ T5833] usb 1-1: config 14 interface 57 has no altsetting 0 [ 822.008393][ T5833] usb 1-1: config 14 interface 228 has no altsetting 0 [ 822.011108][ T5833] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 822.011185][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.011205][ T5833] usb 1-1: Product: syz [ 822.011220][ T5833] usb 1-1: Manufacturer: syz [ 822.011233][ T5833] usb 1-1: SerialNumber: syz [ 822.104924][ T49] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 822.182136][ T5806] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 822.182163][ T5806] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 822.292550][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 822.294851][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 822.296130][ T49] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 822.296156][ T49] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 822.296170][ T49] usb 6-1: config 14 has no interface number 0 [ 822.296180][ T49] usb 6-1: config 14 has no interface number 1 [ 822.296277][ T49] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 822.296293][ T49] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 822.296310][ T49] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 822.296327][ T49] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 822.296384][ T49] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 822.296405][ T49] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.296421][ T49] usb 6-1: config 14 interface 57 has no altsetting 0 [ 822.296433][ T49] usb 6-1: config 14 interface 228 has no altsetting 0 [ 822.427728][ T49] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 822.427750][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.427765][ T49] usb 6-1: Product: syz [ 822.427776][ T49] usb 6-1: Manufacturer: syz [ 822.428903][ T49] usb 6-1: SerialNumber: syz [ 822.522392][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 822.661634][ T5806] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 822.687246][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 822.687277][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.687298][ T9] usb 8-1: Product: syz [ 822.687323][ T9] usb 8-1: Manufacturer: syz [ 822.687338][ T9] usb 8-1: SerialNumber: syz [ 822.741123][ T9] usb 8-1: config 0 descriptor?? [ 822.747409][ T5833] legousbtower 1-1:14.57: interrupt endpoints not found [ 822.939073][ T49] legousbtower 6-1:14.57: interrupt endpoints not found [ 823.019727][ T9] usb 8-1: ignoring: probably an ADSL modem [ 823.147537][ T5833] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 823.208483][ T5833] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 823.256542][ T5863] usb 3-1: USB disconnect, device number 102 [ 823.303536][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2032'. [ 823.321559][ T5806] usb 7-1: USB disconnect, device number 69 [ 823.351499][ T49] legousbtower 6-1:14.228: get version request failed: -121 [ 823.351680][ T49] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 823.631015][ T49] usb 6-1: USB disconnect, device number 42 [ 823.832340][ T5863] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 823.853562][T12998] udevd[12998]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.118914][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.119006][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.119047][ T5863] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 824.119071][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.203106][ T5863] usb 3-1: config 0 descriptor?? [ 824.360203][ T9] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 824.381660][ T9] usb 8-1: USB disconnect, device number 20 [ 824.695282][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695496][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695516][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695533][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695551][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695568][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.695585][ T5863] playstation 0003:054C:0BA0.003B: unknown main item tag 0x0 [ 824.781489][ T5863] playstation 0003:054C:0BA0.003B: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 824.794236][T13036] usb 1-1: LEGO USB Tower reset control request failed [ 824.911258][ T5863] playstation 0003:054C:0BA0.003B: Failed to retrieve feature with reportID 18: -71 [ 824.911278][ T5863] playstation 0003:054C:0BA0.003B: Failed to retrieve DualShock4 pairing info: -71 [ 824.911310][ T5863] playstation 0003:054C:0BA0.003B: Failed to get MAC address from DualShock4 [ 824.911321][ T5863] playstation 0003:054C:0BA0.003B: Failed to create dualshock4. [ 824.962815][ T49] usb 1-1: USB disconnect, device number 90 [ 825.038178][ T5863] playstation 0003:054C:0BA0.003B: probe with driver playstation failed with error -71 [ 825.078581][ T49] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 825.101465][T13045] syzkaller1: entered promiscuous mode [ 825.101491][T13045] syzkaller1: entered allmulticast mode [ 825.121120][ T5863] usb 3-1: USB disconnect, device number 103 [ 825.289848][ T37] audit: type=1804 audit(1783417774.351:3562): pid=13067 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.0.2036" name="/newroot/92/file0" dev="tmpfs" ino=499 res=1 errno=0 [ 826.382660][T13059] syzkaller1: entered promiscuous mode [ 826.382685][T13059] syzkaller1: entered allmulticast mode [ 826.399449][ T49] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 826.572431][ T49] usb 8-1: Using ep0 maxpacket: 8 [ 826.589589][ T49] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.589623][ T49] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 826.646739][ T49] usb 8-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 826.646760][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.646773][ T49] usb 8-1: Product: syz [ 826.646782][ T49] usb 8-1: Manufacturer: syz [ 826.646792][ T49] usb 8-1: SerialNumber: syz [ 826.703800][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2040'. [ 826.703826][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2040'. [ 827.189081][ T49] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input90 [ 827.213102][ T4952] bcm5974 8-1:1.0: could not read from device [ 827.323114][ T49] usb 8-1: USB disconnect, device number 21 [ 827.453692][ T4952] bcm5974 8-1:1.0: could not read from device [ 828.683128][ T5589] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 829.072842][ T5589] usb 1-1: unable to get BOS descriptor or descriptor too short [ 829.080111][ T5589] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 829.112581][ T5589] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 829.112613][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.112634][ T5589] usb 1-1: Product: syz [ 829.112648][ T5589] usb 1-1: Manufacturer: syz [ 829.112662][ T5589] usb 1-1: SerialNumber: syz [ 829.178002][T13093] netlink: 'syz.6.2044': attribute type 10 has an invalid length. [ 829.341306][T13094] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2044'. [ 829.559031][ T5589] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 829.622598][ T49] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 829.713803][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2044'. [ 829.737170][ T5589] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 829.737199][ T5589] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 829.794572][ T49] usb 8-1: Using ep0 maxpacket: 8 [ 829.805132][ T49] usb 8-1: unable to get BOS descriptor or descriptor too short [ 829.810669][ T49] usb 8-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 829.810696][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.810716][ T49] usb 8-1: Product: syz [ 829.810735][ T49] usb 8-1: Manufacturer: syz [ 829.810750][ T49] usb 8-1: SerialNumber: syz [ 830.156835][ T5589] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 830.396828][ T49] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 830.399972][ T49] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 830.400036][ T49] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 830.564472][ T5589] usb 1-1: USB disconnect, device number 91 [ 830.715998][ T49] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 830.772532][ T49] usb 8-1: USB disconnect, device number 22 [ 830.955012][T12998] udevd[12998]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 831.116453][T12998] udevd[12998]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.219166][T13104] netlink: 'syz.6.2047': attribute type 10 has an invalid length. [ 831.270045][T13107] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2047'. [ 831.399236][ T37] audit: type=1804 audit(1783417780.451:3563): pid=13108 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.7.2048" name="/newroot/47/file0" dev="tmpfs" ino=263 res=1 errno=0 [ 831.686906][ T5589] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 832.254173][ T5589] usb 1-1: Using ep0 maxpacket: 32 [ 832.271732][ T5589] usb 1-1: unable to get BOS descriptor or descriptor too short [ 832.290284][ T5589] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 832.290310][ T5589] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 832.290328][ T5589] usb 1-1: config 14 has no interface number 0 [ 832.290344][ T5589] usb 1-1: config 14 has no interface number 1 [ 832.290405][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 832.290428][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 832.290452][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 832.290475][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 832.290499][ T5589] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 832.290522][ T5589] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.290546][ T5589] usb 1-1: config 14 interface 57 has no altsetting 0 [ 832.290564][ T5589] usb 1-1: config 14 interface 228 has no altsetting 0 [ 832.290598][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2047'. [ 832.314482][ T5589] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 832.314565][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.314616][ T5589] usb 1-1: Product: syz [ 832.314653][ T5589] usb 1-1: Manufacturer: syz [ 832.314692][ T5589] usb 1-1: SerialNumber: syz [ 832.793156][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 832.866749][ T5589] legousbtower 1-1:14.57: interrupt endpoints not found [ 832.973393][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 832.986382][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.986428][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 832.989500][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 832.989520][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.989535][ T9] usb 8-1: Product: syz [ 832.989588][ T9] usb 8-1: Manufacturer: syz [ 832.989599][ T9] usb 8-1: SerialNumber: syz [ 833.112346][ T49] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 833.262476][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 833.271759][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.271790][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.271825][ T49] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 833.271847][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.319483][ T49] usb 6-1: config 0 descriptor?? [ 833.330483][ T5589] legousbtower 1-1:14.228: get version request failed: -121 [ 833.331491][ T5589] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 833.482370][ T5608] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 833.556055][ T5589] usb 1-1: USB disconnect, device number 92 [ 833.572073][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input91 [ 833.600750][ T4952] bcm5974 8-1:1.0: could not read from device [ 833.640502][ T5608] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 833.640532][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.640552][ T5608] usb 7-1: Product: syz [ 833.640566][ T5608] usb 7-1: Manufacturer: syz [ 833.640580][ T5608] usb 7-1: SerialNumber: syz [ 833.640834][ T9] usb 8-1: USB disconnect, device number 23 [ 833.666712][ T4952] bcm5974 8-1:1.0: could not read from device [ 833.697959][ T5608] usb 7-1: config 0 descriptor?? [ 833.917148][ T5608] usb 7-1: ignoring: probably an ADSL modem [ 834.029949][ T49] ft260 0003:0403:6030.003C: unknown main item tag 0x0 [ 834.029981][ T49] ft260 0003:0403:6030.003C: unknown main item tag 0x0 [ 834.086039][ T49] ft260 0003:0403:6030.003C: chip code: 0000 0000 [ 834.156908][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2051'. [ 834.314157][ T49] ft260 0003:0403:6030.003C: failed to retrieve system status [ 834.314565][ T49] ft260 0003:0403:6030.003C: probe with driver ft260 failed with error -71 [ 834.347051][ T5608] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 834.374942][ T5608] usb 7-1: USB disconnect, device number 70 [ 834.402436][ T49] usb 6-1: USB disconnect, device number 43 [ 834.706037][T13132] netlink: 'syz.7.2055': attribute type 10 has an invalid length. [ 834.707572][T13132] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2055'. [ 834.802433][ T4960] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 834.955098][ T4960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 834.955195][ T4960] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 834.955219][ T4960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.994148][ T4960] usb 1-1: config 0 descriptor?? [ 835.009178][ T4960] smsusb:smsusb_probe: board id=8, interface number 0 [ 835.009719][ T4960] smsusb:smsusb_probe: Device initialized with return code -19 [ 835.296189][T13139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.296736][T13139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.328937][T13141] netlink: 'syz.6.2058': attribute type 10 has an invalid length. [ 835.331095][T13141] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2058'. [ 835.382515][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 835.537924][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.537958][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.537996][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 835.538020][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.555538][ T9] usb 6-1: config 0 descriptor?? [ 835.812694][ T37] audit: type=1326 audit(1783417784.861:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.813708][ T37] audit: type=1326 audit(1783417784.871:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.814543][ T37] audit: type=1326 audit(1783417784.871:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.815209][ T37] audit: type=1326 audit(1783417784.871:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.815316][ T37] audit: type=1326 audit(1783417784.871:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.815783][ T37] audit: type=1326 audit(1783417784.871:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.816475][ T37] audit: type=1326 audit(1783417784.871:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.816959][ T37] audit: type=1326 audit(1783417784.871:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 835.817479][ T37] audit: type=1326 audit(1783417784.871:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9889a8daeb code=0x7ffc0000 [ 836.214601][ T9] playstation 0003:054C:0BA0.003D: item fetching failed at offset 0/7 [ 836.216419][ T9] playstation 0003:054C:0BA0.003D: Parse failed [ 836.216496][ T9] playstation 0003:054C:0BA0.003D: probe with driver playstation failed with error -22 [ 836.338663][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.349239][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.416708][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 836.416728][ T37] audit: type=1326 audit(1783417785.471:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.418381][ T37] audit: type=1326 audit(1783417785.471:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.418441][ T37] audit: type=1326 audit(1783417785.471:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.418761][ T37] audit: type=1326 audit(1783417785.471:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.419026][ T37] audit: type=1326 audit(1783417785.471:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.460350][ T37] audit: type=1326 audit(1783417785.471:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.595470][ T37] audit: type=1326 audit(1783417785.611:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.630918][ T37] audit: type=1326 audit(1783417785.681:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.631034][ T37] audit: type=1326 audit(1783417785.681:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.631197][ T37] audit: type=1326 audit(1783417785.681:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13137 comm="syz.5.2057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 836.975694][ T49] usb 6-1: USB disconnect, device number 44 [ 837.767727][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 837.859728][ T5589] usb 1-1: USB disconnect, device number 93 [ 837.942307][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 837.946320][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.946376][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.948803][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 837.948830][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.948850][ T9] usb 8-1: Product: syz [ 837.948864][ T9] usb 8-1: Manufacturer: syz [ 837.948880][ T9] usb 8-1: SerialNumber: syz [ 838.485178][ T5589] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 838.687670][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 838.687767][ T5589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.687815][ T5589] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 838.687840][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.807445][ T5589] usb 1-1: config 0 descriptor?? [ 838.862454][ T5836] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 839.032566][ T5836] usb 7-1: Using ep0 maxpacket: 32 [ 839.037286][ T5836] usb 7-1: unable to get BOS descriptor or descriptor too short [ 839.039569][ T5836] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 839.039594][ T5836] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 839.039614][ T5836] usb 7-1: config 14 has no interface number 0 [ 839.039631][ T5836] usb 7-1: config 14 has no interface number 1 [ 839.039771][ T5836] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 839.039795][ T5836] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 839.039876][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 839.039903][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 839.039929][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 839.039955][ T5836] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.040034][ T5836] usb 7-1: config 14 interface 57 has no altsetting 0 [ 839.040054][ T5836] usb 7-1: config 14 interface 228 has no altsetting 0 [ 839.180727][ T5836] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 839.180748][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.180761][ T5836] usb 7-1: Product: syz [ 839.180771][ T5836] usb 7-1: Manufacturer: syz [ 839.180781][ T5836] usb 7-1: SerialNumber: syz [ 839.331434][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input92 [ 839.383546][ T4952] bcm5974 8-1:1.0: could not read from device [ 839.408992][ T9] usb 8-1: USB disconnect, device number 24 [ 839.596652][ T5589] kye 0003:0458:5016.003E: control desc unexpectedly large [ 839.690229][ T5589] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.003E/input/input93 [ 839.866281][ T5836] legousbtower 7-1:14.57: interrupt endpoints not found [ 840.244040][ T5836] legousbtower 7-1:14.228: get version request failed: -121 [ 840.244236][ T5836] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121 [ 840.264117][ T5589] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.003E/input/input94 [ 840.451155][ T5589] kye 0003:0458:5016.003E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 840.470739][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'. [ 840.494085][ T9] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 840.534003][ T4960] usb 7-1: USB disconnect, device number 71 [ 840.677808][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 840.677851][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.677887][ T9] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 840.677909][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.744885][ T9] usb 8-1: config 0 descriptor?? [ 841.092730][ C0] kye 0003:0458:5016.003E: usb_submit_urb(ctrl) failed: -1 [ 841.229974][ T5589] usb 1-1: reset full-speed USB device number 94 using dummy_hcd [ 841.252512][ T9] kye 0003:0458:5016.003F: control desc unexpectedly large [ 841.280677][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.003F/input/input95 [ 841.365861][ T5589] usb 1-1: device descriptor read/64, error -32 [ 841.401615][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.003F/input/input96 [ 841.506148][ T9] kye 0003:0458:5016.003F: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 841.700246][ T822] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 841.938292][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 841.938338][ T822] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 841.938361][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.999270][ T822] usb 3-1: config 0 descriptor?? [ 842.065802][ T822] smsusb:smsusb_probe: board id=8, interface number 0 [ 842.072919][ T822] smsusb:smsusb_probe: Device initialized with return code -19 [ 842.723814][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2066'. [ 842.772338][T11780] usb 8-1: reset full-speed USB device number 25 using dummy_hcd [ 842.877199][ T5836] usb 1-1: USB disconnect, device number 94 [ 843.061344][ T37] kauditd_printk_skb: 91 callbacks suppressed [ 843.061363][ T37] audit: type=1804 audit(1783417792.111:3693): pid=13191 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.0.2071" name="/newroot/98/file0" dev="tmpfs" ino=531 res=1 errno=0 [ 844.121960][ T4960] usb 3-1: USB disconnect, device number 104 [ 844.433184][ T49] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 844.669699][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2075'. [ 844.681879][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 844.691129][ T49] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.691148][ T49] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.691163][ T49] usb 7-1: config 0 interface 0 has no altsetting 0 [ 844.725456][ T49] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 844.725477][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.725490][ T49] usb 7-1: Product: syz [ 844.725500][ T49] usb 7-1: Manufacturer: syz [ 844.725510][ T49] usb 7-1: SerialNumber: syz [ 844.772342][ T4960] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 844.802862][ T49] usb 7-1: config 0 descriptor?? [ 844.932329][ T4960] usb 3-1: Using ep0 maxpacket: 8 [ 844.942595][ T5836] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 844.957417][ T4960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.957470][ T4960] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.016933][ T4960] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 845.016961][ T4960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.016982][ T4960] usb 3-1: Product: syz [ 845.017216][ T4960] usb 3-1: Manufacturer: syz [ 845.017235][ T4960] usb 3-1: SerialNumber: syz [ 845.134309][ T9] usb 8-1: USB disconnect, device number 25 [ 845.145806][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 845.152567][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 845.170378][ T5836] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 845.170409][ T5836] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 845.170425][ T5836] usb 1-1: config 14 has no interface number 0 [ 845.170461][ T5836] usb 1-1: config 14 has no interface number 1 [ 845.170548][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 845.170580][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 845.170599][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 845.170639][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 845.170671][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 845.170707][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.170734][ T5836] usb 1-1: config 14 interface 57 has no altsetting 0 [ 845.170759][ T5836] usb 1-1: config 14 interface 228 has no altsetting 0 [ 845.312412][ T5836] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 845.312445][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.312482][ T5836] usb 1-1: Product: syz [ 845.312496][ T5836] usb 1-1: Manufacturer: syz [ 845.312510][ T5836] usb 1-1: SerialNumber: syz [ 845.364953][ T49] gs_usb 7-1:0.0: Couldn't get device config: (err=-121) [ 845.364981][ T49] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 845.870722][ T4960] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input97 [ 845.915905][ T5836] legousbtower 1-1:14.57: interrupt endpoints not found [ 845.930155][ T4952] bcm5974 3-1:1.0: could not read from device [ 845.995636][ T4952] bcm5974 3-1:1.0: could not read from device [ 846.038188][ T4960] usb 3-1: USB disconnect, device number 105 [ 846.176727][T13198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'. [ 846.176755][T13198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'. [ 846.862066][ T5836] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 846.922483][ T5836] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 847.096444][ T5836] usb 1-1: USB disconnect, device number 95 [ 847.177096][ T5836] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 847.182009][ T4960] usb 7-1: USB disconnect, device number 72 [ 848.183889][ T4960] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 848.344982][ T4960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.345018][ T4960] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.345056][ T4960] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 848.345081][ T4960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.403170][ T4960] usb 7-1: config 0 descriptor?? [ 848.532794][ T49] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 848.573734][ T5836] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 848.688724][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 848.689328][ T49] usb 1-1: not running at top speed; connect to a high speed hub [ 848.691262][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.691278][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.729665][ T49] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 848.729685][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.729698][ T49] usb 1-1: Product: syz [ 848.729707][ T49] usb 1-1: Manufacturer: syz [ 848.729717][ T49] usb 1-1: SerialNumber: syz [ 848.744783][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.744867][ T5836] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 848.744889][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.832585][ T5836] usb 8-1: config 0 descriptor?? [ 848.910945][ T4960] kye 0003:0458:5016.0040: control desc unexpectedly large [ 848.958089][ T5836] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 848.996120][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0040/input/input98 [ 849.182325][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 849.231992][ T49] usb 1-1: unit 3 not found! [ 849.293370][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0040/input/input99 [ 849.336644][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.336701][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.336737][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 849.336760][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.512004][ T9] usb 6-1: config 0 descriptor?? [ 849.568588][ T4960] kye 0003:0458:5016.0040: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 849.780003][ T37] audit: type=1326 audit(1783417798.831:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.780070][ T37] audit: type=1326 audit(1783417798.831:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.780560][ T37] audit: type=1326 audit(1783417798.831:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.827815][ T37] audit: type=1326 audit(1783417798.831:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.883154][ T37] audit: type=1326 audit(1783417798.901:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.922612][ T49] usb 1-1: USB disconnect, device number 96 [ 849.929271][ T37] audit: type=1326 audit(1783417798.981:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 849.948981][ T37] audit: type=1326 audit(1783417798.981:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 850.019296][T13232] netlink: 'syz.0.2083': attribute type 10 has an invalid length. [ 850.030007][ T37] audit: type=1326 audit(1783417799.041:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 850.030222][ T37] audit: type=1326 audit(1783417799.071:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9889a8de59 code=0x7ffc0000 [ 850.038594][ T37] audit: type=1326 audit(1783417799.081:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13220 comm="syz.5.2082" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9889a8daeb code=0x7ffc0000 [ 850.274375][ T5608] usb 7-1: reset full-speed USB device number 73 using dummy_hcd [ 850.447242][ T9] playstation 0003:054C:0BA0.0041: item fetching failed at offset 0/7 [ 850.447939][ T9] playstation 0003:054C:0BA0.0041: Parse failed [ 850.448008][ T9] playstation 0003:054C:0BA0.0041: probe with driver playstation failed with error -22 [ 850.482064][T12998] udevd[12998]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.683385][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.683993][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.886502][ T9] usb 6-1: USB disconnect, device number 45 [ 851.790407][ T5730] usb 8-1: USB disconnect, device number 26 [ 851.858717][T13223] syzkaller1: entered promiscuous mode [ 851.858795][T13223] syzkaller1: entered allmulticast mode [ 852.039932][ T5806] usb 7-1: USB disconnect, device number 73 [ 857.152941][T13248] syz.6.2087 (13248) used greatest stack depth: 15872 bytes left [ 857.632360][ T5806] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 857.672384][ T5836] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 857.675845][T13250] syzkaller1: entered promiscuous mode [ 857.675868][T13250] syzkaller1: entered allmulticast mode [ 857.796048][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.796083][ T5806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.796125][ T5806] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 857.796143][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.800993][ T5806] usb 6-1: config 0 descriptor?? [ 857.895253][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 857.907422][ T5836] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 857.907452][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.907473][ T5836] usb 3-1: Product: syz [ 857.907488][ T5836] usb 3-1: Manufacturer: syz [ 857.907503][ T5836] usb 3-1: SerialNumber: syz [ 857.926180][ T5836] usb 3-1: config 0 descriptor?? [ 857.962406][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 858.127758][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.127793][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.127879][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 858.127903][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.186491][ T9] usb 1-1: config 0 descriptor?? [ 858.255813][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255849][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255875][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255899][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255932][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255957][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.255981][ T5806] playstation 0003:054C:0BA0.0042: unknown main item tag 0x0 [ 858.319721][ T5806] playstation 0003:054C:0BA0.0042: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 858.442553][ T5836] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 858.464493][ T37] kauditd_printk_skb: 123 callbacks suppressed [ 858.464513][ T37] audit: type=1326 audit(1783417807.521:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.464569][ T37] audit: type=1326 audit(1783417807.521:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.464695][ T5806] playstation 0003:054C:0BA0.0042: Failed to retrieve feature with reportID 18: -71 [ 858.464721][ T5806] playstation 0003:054C:0BA0.0042: Failed to retrieve DualShock4 pairing info: -71 [ 858.464774][ T5806] playstation 0003:054C:0BA0.0042: Failed to get MAC address from DualShock4 [ 858.464791][ T5806] playstation 0003:054C:0BA0.0042: Failed to create dualshock4. [ 858.558462][ T37] audit: type=1326 audit(1783417807.611:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.633657][ T37] audit: type=1326 audit(1783417807.661:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.634285][ T37] audit: type=1326 audit(1783417807.691:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa58e6cdaeb code=0x7ffc0000 [ 858.634603][ T37] audit: type=1326 audit(1783417807.691:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa58e6cdaeb code=0x7ffc0000 [ 858.635026][ T37] audit: type=1326 audit(1783417807.691:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.638338][ T5806] playstation 0003:054C:0BA0.0042: probe with driver playstation failed with error -71 [ 858.639834][ T37] audit: type=1326 audit(1783417807.691:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa58e68e68e code=0x7ffc0000 [ 858.786228][ T5806] usb 6-1: USB disconnect, device number 46 [ 858.787662][ T5836] usb 3-1: USB disconnect, device number 106 [ 858.840180][ T37] audit: type=1326 audit(1783417807.891:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.840324][ T37] audit: type=1326 audit(1783417807.891:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13268 comm="syz.0.2091" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e6cde59 code=0x7ffc0000 [ 858.919413][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 858.919516][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 858.952279][ T32] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 858.996286][ T9] usb 1-1: USB disconnect, device number 97 [ 859.061905][T13275] fido_id[13275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 859.121469][ T32] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 859.121529][ T32] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 859.121571][ T32] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 859.121597][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.181279][ T32] usb 8-1: config 0 descriptor?? [ 859.200805][ T32] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 859.243594][ T5730] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 859.908129][ T32] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 860.659464][ T5730] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 860.659495][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.659516][ T5730] usb 7-1: Product: syz [ 860.659530][ T5730] usb 7-1: Manufacturer: syz [ 860.659544][ T5730] usb 7-1: SerialNumber: syz [ 860.664843][ T5730] usb 7-1: config 0 descriptor?? [ 860.923889][ T5730] usb 7-1: ignoring: probably an ADSL modem [ 861.130166][T13271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2092'. [ 863.028155][ T5836] usb 8-1: USB disconnect, device number 27 [ 863.640115][ T32] usb 6-1: device descriptor read/all, error -71 [ 863.743253][ T5806] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 863.861214][T13295] loop5: detected capacity change from 0 to 4096 [ 863.873545][T13295] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 863.914282][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 863.914315][ T5806] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.914351][ T5806] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 863.914373][ T5806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.974110][ T5806] usb 8-1: config 0 descriptor?? [ 864.802324][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 864.802346][ T37] audit: type=1804 audit(1783417813.771:3855): pid=13292 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.2.2097" name="/newroot/305/file0" dev="tmpfs" ino=1608 res=1 errno=0 [ 865.170529][ T5730] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 865.185944][ T5730] usb 7-1: USB disconnect, device number 74 [ 865.544592][ T5806] kye 0003:0458:5016.0043: control desc unexpectedly large [ 865.546857][T13295] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 865.570130][ T5806] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0043/input/input100 [ 865.813152][ T5806] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0043/input/input101 [ 865.821857][ T5806] kye 0003:0458:5016.0043: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 865.991396][ T32] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 866.116889][T12558] Flush: task=syz-executor[12558] dev=loop5 state=2 [ 866.231955][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2098'. [ 866.253438][T12558] Teardown: task=syz-executor[12558] dev=loop5 state=2 [ 866.262289][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 866.266450][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 866.271713][ T32] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 866.271779][ T32] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 866.271828][ T32] usb 3-1: config 14 has no interface number 0 [ 866.271873][ T32] usb 3-1: config 14 has no interface number 1 [ 866.272015][ T32] usb 3-1: config 14 interface 57 has no altsetting 0 [ 866.272064][ T32] usb 3-1: config 14 interface 228 has no altsetting 0 [ 866.283793][ T32] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 866.283822][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.283841][ T32] usb 3-1: Product: syz [ 866.283855][ T32] usb 3-1: Manufacturer: syz [ 866.283869][ T32] usb 3-1: SerialNumber: syz [ 866.445100][ T5806] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 866.542513][ T4960] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 866.602706][ T5806] usb 7-1: Using ep0 maxpacket: 32 [ 866.611867][ T5806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 866.626685][ T5806] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 866.626710][ T5806] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 866.626730][ T5806] usb 7-1: config 14 has no interface number 0 [ 866.626746][ T5806] usb 7-1: config 14 has no interface number 1 [ 866.626860][ T5806] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 866.626886][ T5806] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 866.626912][ T5806] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 866.627295][ T5806] usb 7-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 866.627323][ T5806] usb 7-1: config 14 interface 57 has no altsetting 0 [ 866.627341][ T5806] usb 7-1: config 14 interface 228 has no altsetting 0 [ 866.652890][ C0] kye 0003:0458:5016.0043: usb_submit_urb(ctrl) failed: -1 [ 866.745711][ T4960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 866.745735][ T4960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.745801][ T4960] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 866.745818][ T4960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.750271][ T5806] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 866.750296][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.750313][ T5806] usb 7-1: Product: syz [ 866.750325][ T5806] usb 7-1: Manufacturer: syz [ 866.750343][ T5806] usb 7-1: SerialNumber: syz [ 866.803386][ T5608] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 866.845645][ T4960] usb 1-1: config 0 descriptor?? [ 866.902348][ T5863] usb 8-1: reset full-speed USB device number 28 using dummy_hcd [ 866.955922][ T32] legousbtower 3-1:14.57: interrupt endpoints not found [ 867.004390][ T5608] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.004435][ T5608] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 867.004512][ T5608] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 867.004529][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.011251][ T5608] usb 6-1: config 0 descriptor?? [ 867.083054][ T5608] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 867.158307][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2101'. [ 867.158333][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2101'. [ 867.215848][ T32] legousbtower 3-1:14.228: interrupt endpoints not found [ 867.290912][ T5806] legousbtower 7-1:14.57: interrupt endpoints not found [ 867.308171][ T4960] kye 0003:0458:5016.0044: control desc unexpectedly large [ 867.326873][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0044/input/input102 [ 867.442793][ T4960] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0044/input/input103 [ 867.500399][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2102'. [ 867.500427][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2102'. [ 867.566157][ T4960] kye 0003:0458:5016.0044: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 867.589466][ T5806] legousbtower 7-1:14.228: interrupt endpoints not found [ 867.973214][ T49] usb 8-1: USB disconnect, device number 28 [ 868.138007][ T5730] usb 3-1: USB disconnect, device number 107 [ 868.159750][ T9] usb 7-1: USB disconnect, device number 75 [ 868.170188][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'. [ 868.342390][ T49] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 868.493098][ T49] usb 8-1: Using ep0 maxpacket: 32 [ 868.495608][ T49] usb 8-1: unable to get BOS descriptor or descriptor too short [ 868.496779][ T49] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 868.496807][ T49] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 868.496828][ T49] usb 8-1: config 14 has no interface number 0 [ 868.496850][ T49] usb 8-1: config 14 has no interface number 1 [ 868.496899][ T49] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 868.496917][ T49] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 868.496936][ T49] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 868.496956][ T49] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 868.496977][ T49] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 868.496997][ T49] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.497017][ T49] usb 8-1: config 14 interface 57 has no altsetting 0 [ 868.497031][ T49] usb 8-1: config 14 interface 228 has no altsetting 0 [ 868.499403][ T49] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 868.499424][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.499439][ T49] usb 8-1: Product: syz [ 868.499450][ T49] usb 8-1: Manufacturer: syz [ 868.499461][ T49] usb 8-1: SerialNumber: syz [ 868.606723][ T4960] usb 1-1: reset full-speed USB device number 98 using dummy_hcd [ 868.723855][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2103'. [ 868.974986][T13328] syzkaller1: entered promiscuous mode [ 868.975022][T13328] syzkaller1: entered allmulticast mode [ 869.010542][ T49] legousbtower 8-1:14.57: interrupt endpoints not found [ 869.092440][ T9] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 869.225202][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2105'. [ 869.225227][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2105'. [ 869.265586][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.265631][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 869.265654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.309916][ T9] usb 3-1: config 0 descriptor?? [ 869.327198][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 869.411984][ T49] legousbtower 8-1:14.228: get version request failed: -71 [ 869.412093][ T49] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 869.439568][ T49] usb 8-1: USB disconnect, device number 29 [ 869.805646][ T5863] usb 1-1: USB disconnect, device number 98 [ 869.944665][ T4960] usb 6-1: USB disconnect, device number 49 [ 870.044028][ T9] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 870.100108][T13340] syzkaller1: entered promiscuous mode [ 870.100132][T13340] syzkaller1: entered allmulticast mode [ 870.167434][ T5863] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 870.330339][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 870.330585][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.355135][ T37] audit: type=1804 audit(1783417819.361:3856): pid=13343 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.7.2111" name="/newroot/62/file0" dev="tmpfs" ino=341 res=1 errno=0 [ 870.378504][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 870.378569][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.532394][ T9] usb 7-1: config 0 descriptor?? [ 870.954353][ T5863] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 870.954410][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 870.954452][ T5863] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.954474][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.092529][ T5863] usb 1-1: config 0 descriptor?? [ 871.126911][ T5863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 871.314148][T13349] netlink: 'syz.7.2112': attribute type 10 has an invalid length. [ 871.353961][ T9] kye 0003:0458:5016.0045: control desc unexpectedly large [ 871.360269][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0045/input/input104 [ 871.384413][T13349] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2112'. [ 871.452679][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0045/input/input105 [ 871.498039][ T9] kye 0003:0458:5016.0045: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 871.587376][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 871.836804][ T4960] usb 7-1: USB disconnect, device number 76 [ 872.389346][ T9] usb 1-1: USB disconnect, device number 99 [ 874.302320][ T4960] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 874.517052][ T4960] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 874.517087][ T4960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.517110][ T4960] usb 6-1: Product: syz [ 874.517126][ T4960] usb 6-1: Manufacturer: syz [ 874.517143][ T4960] usb 6-1: SerialNumber: syz [ 874.575471][ T4960] usb 6-1: config 0 descriptor?? [ 875.257879][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2118'. [ 875.265714][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.265814][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.579689][ T4960] usb 6-1: ignoring: probably an ADSL modem [ 875.672458][ T9] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 876.020310][ T37] audit: type=1804 audit(1783417825.011:3857): pid=13389 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.6.2122" name="/newroot/154/file0" dev="tmpfs" ino=825 res=1 errno=0 [ 876.697086][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 876.697120][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.697177][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 876.697201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.751135][ T9] usb 1-1: config 0 descriptor?? [ 876.964675][ T5836] usb 3-1: USB disconnect, device number 108 [ 877.368377][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 877.703239][ T5836] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 877.853005][ T5836] usb 7-1: Using ep0 maxpacket: 32 [ 877.865160][ T5836] usb 7-1: unable to get BOS descriptor or descriptor too short [ 877.867790][ T5836] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 877.867814][ T5836] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 877.867833][ T5836] usb 7-1: config 14 has no interface number 0 [ 877.867850][ T5836] usb 7-1: config 14 has no interface number 1 [ 877.868158][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 877.868313][ T5836] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 877.868342][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 877.868369][ T5836] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 877.868450][ T5836] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.868478][ T5836] usb 7-1: config 14 interface 57 has no altsetting 0 [ 877.868498][ T5836] usb 7-1: config 14 interface 228 has no altsetting 0 [ 877.990690][ T5836] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 877.990724][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.991002][ T5836] usb 7-1: Product: syz [ 877.991021][ T5836] usb 7-1: Manufacturer: syz [ 877.991038][ T5836] usb 7-1: SerialNumber: syz [ 878.040004][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 878.040147][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 878.066452][ T9] usb 1-1: USB disconnect, device number 100 [ 878.131941][ T4960] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 878.216090][ T4960] usb 6-1: USB disconnect, device number 50 [ 878.513957][ T5836] legousbtower 7-1:14.57: interrupt endpoints not found [ 878.698894][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2124'. [ 878.698923][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2124'. [ 878.769095][ T5836] legousbtower 7-1:14.228: interrupt endpoints not found [ 878.922302][ T4960] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 879.095598][ T4960] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.095657][ T4960] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 879.095704][ T4960] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.095731][ T4960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.146219][ T4960] usb 8-1: config 0 descriptor?? [ 879.190990][ T4960] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 880.218739][ T4960] usb 7-1: USB disconnect, device number 77 [ 881.012927][T13416] syzkaller1: entered promiscuous mode [ 881.012955][T13416] syzkaller1: entered allmulticast mode [ 881.145678][T13418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.537689][T10689] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 881.699047][ T5836] usb 8-1: USB disconnect, device number 30 [ 882.070228][ T37] audit: type=1804 audit(1783417831.121:3858): pid=13434 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.6.2134" name="/newroot/156/file0" dev="tmpfs" ino=836 res=1 errno=0 [ 882.312769][ T5836] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 882.536573][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 882.877841][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 882.897520][ T5836] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 882.897547][ T5836] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 882.897580][ T5836] usb 1-1: config 14 has no interface number 0 [ 882.897590][ T5836] usb 1-1: config 14 has no interface number 1 [ 882.897632][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 882.897648][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 882.897686][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 882.897711][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 882.897733][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 882.897750][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.897767][ T5836] usb 1-1: config 14 interface 57 has no altsetting 0 [ 882.897779][ T5836] usb 1-1: config 14 interface 228 has no altsetting 0 [ 883.039282][ T37] audit: type=1804 audit(1783417832.091:3859): pid=13431 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.7.2133" name="/newroot/67/file0" dev="tmpfs" ino=367 res=1 errno=0 [ 883.090419][ T5836] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 883.090451][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.090471][ T5836] usb 1-1: Product: syz [ 883.090486][ T5836] usb 1-1: Manufacturer: syz [ 883.090500][ T5836] usb 1-1: SerialNumber: syz [ 883.342656][T13421] tc_dump_action: action bad kind [ 883.674374][T13444] syzkaller1: entered promiscuous mode [ 883.674399][T13444] syzkaller1: entered allmulticast mode [ 883.760591][ T5836] legousbtower 1-1:14.57: interrupt endpoints not found [ 883.802945][ T49] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 883.877853][ T4960] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 883.952342][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 883.957241][ T49] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 883.957267][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.957287][ T49] usb 7-1: Product: syz [ 883.957302][ T49] usb 7-1: Manufacturer: syz [ 883.957315][ T49] usb 7-1: SerialNumber: syz [ 883.987677][ T49] usb 7-1: config 0 descriptor?? [ 884.008534][ T5608] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 884.023503][ T4960] usb 8-1: Using ep0 maxpacket: 16 [ 884.039360][ T4960] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 884.039388][ T4960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.039408][ T4960] usb 8-1: Product: syz [ 884.039470][ T4960] usb 8-1: Manufacturer: syz [ 884.039492][ T4960] usb 8-1: SerialNumber: syz [ 884.082047][ T4960] usb 8-1: config 0 descriptor?? [ 884.162238][ T5608] usb 3-1: Using ep0 maxpacket: 16 [ 884.171265][ T5836] legousbtower 1-1:14.228: get version request failed: -32 [ 884.171445][ T5836] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32 [ 884.205226][ T5608] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 884.205257][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.205338][ T5608] usb 3-1: Product: syz [ 884.205356][ T5608] usb 3-1: Manufacturer: syz [ 884.205371][ T5608] usb 3-1: SerialNumber: syz [ 884.277278][ T5608] usb 3-1: config 0 descriptor?? [ 884.463431][ T49] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 884.524229][ T4960] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 884.724207][ T5608] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 884.757730][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.760140][ T4960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.760784][ T49] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 884.760821][ T49] usb 7-1: media controller created [ 884.781365][ T4960] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 884.813622][ T5608] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 884.813817][ T4960] usb 8-1: media controller created [ 884.814453][ T5608] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 884.814494][ T5608] usb 3-1: media controller created [ 884.886384][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.961276][ T4960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.067831][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.130278][ T49] zl10353_read_register: readreg error (reg=127, ret==0) [ 885.130315][ T49] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 885.130325][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 885.172755][ T49] usb 7-1: USB disconnect, device number 78 [ 885.180442][ T4960] zl10353_read_register: readreg error (reg=127, ret==0) [ 885.180493][ T4960] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 885.180506][ T4960] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 885.224109][ T4960] usb 8-1: USB disconnect, device number 31 [ 885.254381][ T5608] zl10353_read_register: readreg error (reg=127, ret==0) [ 885.254418][ T5608] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 885.254427][ T5608] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 885.288441][ T5608] usb 3-1: USB disconnect, device number 109 [ 885.461990][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 885.715243][ T4960] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 885.765591][ T5836] usb 1-1: USB disconnect, device number 101 [ 885.926702][ T5608] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 886.156859][ T37] audit: type=1804 audit(1783417835.221:3860): pid=13464 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.2.2146" name="/newroot/314/file0" dev="tmpfs" ino=1654 res=1 errno=0 [ 887.366287][ T5836] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 887.512318][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 887.522396][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 887.526551][ T5836] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 887.526577][ T5836] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 887.526603][ T5836] usb 1-1: config 14 has no interface number 0 [ 887.526619][ T5836] usb 1-1: config 14 has no interface number 1 [ 887.526700][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 887.526725][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 887.526750][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 887.526777][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 887.526804][ T5836] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 887.526830][ T5836] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.526857][ T5836] usb 1-1: config 14 interface 57 has no altsetting 0 [ 887.526875][ T5836] usb 1-1: config 14 interface 228 has no altsetting 0 [ 887.531529][ T5836] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 887.531553][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.531573][ T5836] usb 1-1: Product: syz [ 887.531593][ T5836] usb 1-1: Manufacturer: syz [ 887.531607][ T5836] usb 1-1: SerialNumber: syz [ 887.582305][T10689] Bluetooth: hci4: command 0x0406 tx timeout [ 887.996790][T13481] FAULT_INJECTION: forcing a failure. [ 887.996790][T13481] name failslab, interval 1, probability 0, space 0, times 1 [ 887.996841][T13481] CPU: 1 UID: 0 PID: 13481 Comm: syz.2.2151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.996865][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 887.996884][T13481] Call Trace: [ 887.996892][T13481] [ 887.996901][T13481] dump_stack_lvl+0xe8/0x150 [ 887.996937][T13481] should_fail_ex+0x467/0x600 [ 887.996964][T13481] should_failslab+0xa8/0x100 [ 887.996996][T13481] __kmalloc_node_noprof+0xfd/0x7b0 [ 887.997016][T13481] ? __get_vm_area_node+0x1f2/0x300 [ 887.997044][T13481] ? __vmalloc_node_range_noprof+0x5dc/0x1730 [ 887.997078][T13481] ? __vmalloc_node_range_noprof+0x5dc/0x1730 [ 887.997115][T13481] __vmalloc_node_range_noprof+0x5dc/0x1730 [ 887.997138][T13481] ? sched_clock+0x3f/0x60 [ 887.997191][T13481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.997225][T13481] ? __lock_acquire+0x6df/0x2e40 [ 887.997253][T13481] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.997281][T13481] __vmalloc_noprof+0xd2/0x120 [ 887.997302][T13481] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.997321][T13481] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.997354][T13481] ? bpf_prog_alloc+0x2a/0x1a0 [ 887.997380][T13481] bpf_prog_alloc+0x3c/0x1a0 [ 887.997406][T13481] bpf_prog_load+0x7f8/0x1c00 [ 887.997439][T13481] ? __pfx_bpf_prog_load+0x10/0x10 [ 887.997479][T13481] __sys_bpf+0xd0d/0xd90 [ 887.997537][T13481] ? __pfx___sys_bpf+0x10/0x10 [ 887.997565][T13481] ? __pfx___schedule+0x10/0x10 [ 887.997597][T13481] ? rt_mutex_slowunlock+0x219/0x460 [ 887.997646][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.997666][T13481] __x64_sys_bpf+0xba/0xd0 [ 887.997708][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.997730][T13481] do_syscall_64+0x174/0x580 [ 887.997759][T13481] ? trace_irq_disable+0x3b/0x140 [ 887.997782][T13481] ? clear_bhb_loop+0x40/0x90 [ 887.997810][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.997827][T13481] RIP: 0033:0x7f1f4ccfde59 [ 887.997845][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.997870][T13481] RSP: 002b:00007f1f4af56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 887.997892][T13481] RAX: ffffffffffffffda RBX: 00007f1f4cf85fa0 RCX: 00007f1f4ccfde59 [ 887.997907][T13481] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 887.997920][T13481] RBP: 00007f1f4af56090 R08: 0000000000000000 R09: 0000000000000000 [ 887.997932][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.997943][T13481] R13: 00007f1f4cf86038 R14: 00007f1f4cf85fa0 R15: 00007ffcdc3b9f38 [ 887.997971][T13481] [ 887.998281][T13481] syz.2.2151: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 887.998892][T13481] CPU: 1 UID: 0 PID: 13481 Comm: syz.2.2151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 887.998915][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 887.998927][T13481] Call Trace: [ 887.998934][T13481] [ 887.998942][T13481] dump_stack_lvl+0xe8/0x150 [ 887.998975][T13481] warn_alloc+0x24c/0x270 [ 887.999004][T13481] ? __pfx_warn_alloc+0x10/0x10 [ 887.999021][T13481] ? rcu_is_watching+0x15/0xb0 [ 887.999079][T13481] ? __kmalloc_node_noprof+0x586/0x7b0 [ 887.999101][T13481] ? __get_vm_area_node+0x1f2/0x300 [ 887.999130][T13481] ? __vmalloc_node_range_noprof+0x5dc/0x1730 [ 887.999166][T13481] ? __vmalloc_node_range_noprof+0x5dc/0x1730 [ 887.999225][T13481] __vmalloc_node_range_noprof+0xa84/0x1730 [ 887.999263][T13481] ? sched_clock+0x3f/0x60 [ 887.999316][T13481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.999352][T13481] ? __lock_acquire+0x6df/0x2e40 [ 887.999388][T13481] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.999417][T13481] __vmalloc_noprof+0xd2/0x120 [ 887.999450][T13481] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.999484][T13481] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 887.999504][T13481] ? bpf_prog_alloc+0x2a/0x1a0 [ 887.999549][T13481] bpf_prog_alloc+0x3c/0x1a0 [ 887.999582][T13481] bpf_prog_load+0x7f8/0x1c00 [ 887.999621][T13481] ? __pfx_bpf_prog_load+0x10/0x10 [ 887.999674][T13481] __sys_bpf+0xd0d/0xd90 [ 887.999700][T13481] ? __pfx___sys_bpf+0x10/0x10 [ 887.999745][T13481] ? __pfx___schedule+0x10/0x10 [ 887.999780][T13481] ? rt_mutex_slowunlock+0x219/0x460 [ 887.999831][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.999858][T13481] __x64_sys_bpf+0xba/0xd0 [ 887.999876][T13481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.999914][T13481] do_syscall_64+0x174/0x580 [ 887.999949][T13481] ? trace_irq_disable+0x3b/0x140 [ 887.999974][T13481] ? clear_bhb_loop+0x40/0x90 [ 888.000000][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.000026][T13481] RIP: 0033:0x7f1f4ccfde59 [ 888.000041][T13481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.000074][T13481] RSP: 002b:00007f1f4af56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 888.000097][T13481] RAX: ffffffffffffffda RBX: 00007f1f4cf85fa0 RCX: 00007f1f4ccfde59 [ 888.000115][T13481] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 888.000131][T13481] RBP: 00007f1f4af56090 R08: 0000000000000000 R09: 0000000000000000 [ 888.000145][T13481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.000158][T13481] R13: 00007f1f4cf86038 R14: 00007f1f4cf85fa0 R15: 00007ffcdc3b9f38 [ 888.000197][T13481] [ 888.000210][T13481] Mem-Info: [ 888.000217][T13481] active_anon:12011 inactive_anon:0 isolated_anon:0 [ 888.000217][T13481] active_file:0 inactive_file:61701 isolated_file:0 [ 888.000217][T13481] unevictable:768 dirty:153 writeback:0 [ 888.000217][T13481] slab_reclaimable:12262 slab_unreclaimable:103526 [ 888.000217][T13481] mapped:35253 shmem:5852 pagetables:1727 [ 888.000217][T13481] sec_pagetables:0 bounce:0 [ 888.000217][T13481] kernel_misc_reclaimable:0 [ 888.000217][T13481] free:1289934 free_pcp:2843 free_cma:0 [ 888.000313][T13481] Node 0 active_anon:48044kB inactive_anon:0kB active_file:0kB inactive_file:246604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141012kB dirty:612kB writeback:0kB shmem:21872kB kernel_stack:14012kB pagetables:6764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 888.000362][T13481] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 888.000405][T13481] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 888.000468][T13481] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 888.000504][T13481] Node 0 DMA32 free:1208160kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48044kB inactive_anon:0kB active_file:0kB inactive_file:246604kB unevictable:1536kB writepending:612kB zspages:0kB present:3129332kB managed:2552540kB mlocked:0kB bounce:0kB free_pcp:11364kB local_pcp:4828kB free_cma:0kB [ 888.000566][T13481] lowmem_reserve[]: 0 0 0 0 0 [ 888.000589][T13481] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:836kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 888.000654][T13481] lowmem_reserve[]: 0 0 0 0 0 [ 888.000686][T13481] Node 1 Normal free:3936216kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 888.000743][T13481] lowmem_reserve[]: 0 0 0 0 0 [ 888.000766][T13481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 888.000913][T13481] Node 0 DMA32: 1216*4kB (UE) 524*8kB (UME) 80*16kB (UE) 270*32kB (ME) 175*64kB (UME) 51*128kB (UME) 48*256kB (UM) 24*512kB (UME) 4*1024kB (M) 4*2048kB (UME) 277*4096kB (UM) = 1208160kB [ 888.001079][T13481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 888.001173][T13481] Node 1 Normal: 8*4kB (UM) 11*8kB (UM) 12*16kB (UM) 11*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936216kB [ 888.001343][T13481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.001380][T13481] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 888.001398][T13481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.001623][T13481] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 888.001646][T13481] 67543 total pagecache pages [ 888.001657][T13481] 0 pages in swap cache [ 888.001662][T13481] Free swap = 124996kB [ 888.001684][T13481] Total swap = 124996kB [ 888.001694][T13481] 2097051 pages RAM [ 888.001703][T13481] 0 pages HighMem/MovableOnly [ 888.001712][T13481] 427093 pages reserved [ 888.001720][T13481] 0 pages cma reserved [ 888.557399][ T5836] legousbtower 1-1:14.57: interrupt endpoints not found [ 889.227113][ T5836] legousbtower 1-1:14.228: get version request failed: -121 [ 889.227228][ T5836] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 889.382306][ T4960] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 889.536607][T13477] loop7: detected capacity change from 0 to 32768 [ 889.550151][ T4960] usb 3-1: Using ep0 maxpacket: 32 [ 889.559442][ T4960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.559462][ T4960] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 889.559488][ T4960] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 889.559505][ T4960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.659792][ T4960] usb 3-1: config 0 descriptor?? [ 890.376749][T13477] (syz.7.2150,13477,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #6: Corrupt state (nlink = 0 or mode = 0) detected! [ 890.376787][T13477] (syz.7.2150,13477,1):ocfs2_read_locked_inode:633 ERROR: status = -117 [ 890.377592][T13477] (syz.7.2150,13477,1):_ocfs2_get_system_file_inode:141 ERROR: status = -117 [ 890.378337][T13477] (syz.7.2150,13477,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=11, slot=0 [ 890.378372][T13477] (syz.7.2150,13477,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 890.378392][T13477] (syz.7.2150,13477,1):ocfs2_mount_volume:1757 ERROR: status = -22 [ 890.444908][T13477] (syz.7.2150,13477,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 890.500682][T11270] Flush: task=syz-executor[11270] dev=loop7 state=2 [ 890.573345][T11270] Teardown: task=syz-executor[11270] dev=loop7 state=2 [ 890.612517][ T5836] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 890.829243][ T5836] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 890.829264][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.829278][ T5836] usb 6-1: Product: syz [ 890.829295][ T5836] usb 6-1: Manufacturer: syz [ 890.829305][ T5836] usb 6-1: SerialNumber: syz [ 890.854408][ T5836] usb 6-1: config 0 descriptor?? [ 890.983235][ T32] usb 1-1: USB disconnect, device number 102 [ 891.091253][ T5836] usb 6-1: ignoring: probably an ADSL modem [ 891.213270][T13494] hub 8-0:1.0: USB hub found [ 891.259747][T13494] hub 8-0:1.0: 1 port detected [ 891.325716][T13488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2154'. [ 891.539290][ T5836] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 891.572459][ T32] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 891.600413][ T5836] usb 6-1: USB disconnect, device number 51 [ 891.756506][ T32] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 891.756535][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.756556][ T32] usb 1-1: Product: syz [ 891.756569][ T32] usb 1-1: Manufacturer: syz [ 891.756582][ T32] usb 1-1: SerialNumber: syz [ 891.803594][ T32] usb 1-1: config 0 descriptor?? [ 892.002306][ T4960] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 892.047303][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2156'. [ 892.172455][ T4960] usb 8-1: Using ep0 maxpacket: 32 [ 892.176245][ T4960] usb 8-1: unable to get BOS descriptor or descriptor too short [ 892.178478][ T4960] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 892.178506][ T4960] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 892.178520][ T4960] usb 8-1: config 14 has no interface number 0 [ 892.178531][ T4960] usb 8-1: config 14 has no interface number 1 [ 892.178765][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 892.178786][ T4960] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 892.178803][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 892.178821][ T4960] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 892.178839][ T4960] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.178857][ T4960] usb 8-1: config 14 interface 57 has no altsetting 0 [ 892.179255][ T4960] usb 8-1: config 14 interface 228 has no altsetting 0 [ 892.196239][ T4960] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 892.316461][ T4960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.316486][ T4960] usb 8-1: Product: syz [ 892.316500][ T4960] usb 8-1: Manufacturer: syz [ 892.316566][ T4960] usb 8-1: SerialNumber: syz [ 892.410810][ T5836] usb 3-1: USB disconnect, device number 110 [ 892.473671][ T32] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 892.498348][ T32] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 892.528527][ T32] usb 1-1: USB disconnect, device number 103 [ 892.737762][T13504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2157'. [ 892.789521][ T4960] legousbtower 8-1:14.57: interrupt endpoints not found [ 892.992361][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2155'. [ 892.992397][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2155'. [ 893.000026][T13504] Bluetooth: MGMT ver 1.23 [ 893.069661][ T4960] legousbtower 8-1:14.228: interrupt endpoints not found [ 893.189461][ T37] audit: type=1804 audit(1783417842.241:3861): pid=13511 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.5.2159" name="/newroot/25/file0" dev="tmpfs" ino=146 res=1 errno=0 [ 894.054433][ T5863] usb 8-1: USB disconnect, device number 32 [ 894.454124][ T5730] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 894.762293][ T4960] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 894.762888][ T32] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 895.332285][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 895.334900][ T5730] usb 6-1: unable to get BOS descriptor or descriptor too short [ 895.336796][ T5730] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 895.336819][ T5730] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 895.336838][ T5730] usb 6-1: config 14 has no interface number 0 [ 895.336854][ T5730] usb 6-1: config 14 has no interface number 1 [ 895.336917][ T5730] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 895.336940][ T5730] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 895.336970][ T5730] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 895.336995][ T5730] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 895.337021][ T5730] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 895.337045][ T5730] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.337070][ T5730] usb 6-1: config 14 interface 57 has no altsetting 0 [ 895.337088][ T5730] usb 6-1: config 14 interface 228 has no altsetting 0 [ 895.339498][ T5730] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 895.339527][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.339549][ T5730] usb 6-1: Product: syz [ 895.339566][ T5730] usb 6-1: Manufacturer: syz [ 895.339582][ T5730] usb 6-1: SerialNumber: syz [ 895.542516][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 895.555663][ T4960] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 895.555692][ T4960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.555711][ T4960] usb 3-1: Product: syz [ 895.555725][ T4960] usb 3-1: Manufacturer: syz [ 895.555739][ T4960] usb 3-1: SerialNumber: syz [ 895.556526][ T32] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 895.556553][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.556572][ T32] usb 1-1: Product: syz [ 895.556586][ T32] usb 1-1: Manufacturer: syz [ 895.556600][ T32] usb 1-1: SerialNumber: syz [ 895.581640][ T4960] usb 3-1: config 0 descriptor?? [ 895.585518][ T32] usb 1-1: config 0 descriptor?? [ 895.842802][ T4960] usb 3-1: ignoring: probably an ADSL modem [ 896.090376][ T32] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 896.127786][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 896.128929][ T32] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 896.129050][ T32] usb 1-1: media controller created [ 896.194947][T13531] loop6: detected capacity change from 0 to 32768 [ 896.196137][T13531] xfs: Unknown parameter 'mask' [ 896.196545][T13531] Flush: task=syz.6.2166[13531] dev=loop6 state=2 [ 896.237880][ T5730] legousbtower 6-1:14.57: interrupt endpoints not found [ 896.290379][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'. [ 896.342548][T13522] ------------[ cut here ]------------ [ 896.342582][T13522] usb 1-1: BOGUS control dir, pipe 80006880 doesn't match bRequestType c0 [ 896.342608][T13522] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.0.2163/13522 [ 896.342652][T13522] Modules linked in: [ 896.342672][T13522] CPU: 1 UID: 0 PID: 13522 Comm: syz.0.2163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 896.342713][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.342728][T13522] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 896.342763][T13522] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 896.342782][T13522] RSP: 0018:ffffc90004df7718 EFLAGS: 00010246 [ 896.342800][T13522] RAX: 0000000000000000 RBX: ffff8880264be600 RCX: 0000000080006880 [ 896.342821][T13522] RDX: ffff88803f31aa40 RSI: ffffffff8c119800 RDI: ffffffff8fbbd370 [ 896.342833][T13522] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 896.342844][T13522] R10: ffffc90004df7800 R11: fffff520009bef0c R12: 1ffff1100435fad8 [ 896.342872][T13522] R13: ffff888021afd6c0 R14: ffff88803f31aa40 R15: 0000000080006880 [ 896.342889][T13522] FS: 00007fa58c9266c0(0000) GS:ffff888125d4e000(0000) knlGS:0000000000000000 [ 896.342909][T13522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.342926][T13522] CR2: 0000001b32f0fff8 CR3: 0000000041f7a000 CR4: 00000000003526f0 [ 896.342944][T13522] Call Trace: [ 896.342953][T13522] [ 896.342974][T13522] usb_start_wait_urb+0x13f/0x5b0 [ 896.343008][T13522] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 896.343062][T13522] usb_control_msg+0x234/0x3e0 [ 896.343098][T13522] dtv5100_i2c_msg+0x231/0x2f0 [ 896.343132][T13522] dtv5100_i2c_xfer+0x1a5/0x610 [ 896.343170][T13522] __i2c_transfer+0x7be/0x1fe0 [ 896.343190][T13522] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 896.343233][T13522] ? lockdep_hardirqs_on+0x7a/0x110 [ 896.343268][T13522] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 896.343303][T13522] ? rt_mutex_lock_nested+0x156/0x1c0 [ 896.343325][T13522] ? i2c_transfer+0xc8/0x2d0 [ 896.343355][T13522] i2c_transfer+0x1cc/0x2d0 [ 896.343375][T13522] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 896.343413][T13522] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 896.343447][T13522] ? _copy_from_user+0x94/0xb0 [ 896.343480][T13522] i2cdev_write+0x116/0x1e0 [ 896.343507][T13522] vfs_writev+0x4c4/0x990 [ 896.343548][T13522] ? __pfx_i2cdev_write+0x10/0x10 [ 896.343579][T13522] ? __pfx_vfs_writev+0x10/0x10 [ 896.343635][T13522] ? __fget_files+0x2a/0x420 [ 896.343660][T13522] ? __fget_files+0x3a8/0x420 [ 896.343679][T13522] ? __fget_files+0x2a/0x420 [ 896.343710][T13522] do_writev+0x15a/0x2e0 [ 896.343760][T13522] ? __pfx_do_writev+0x10/0x10 [ 896.343798][T13522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.343820][T13522] do_syscall_64+0x174/0x580 [ 896.343851][T13522] ? trace_irq_disable+0x3b/0x140 [ 896.343868][T13522] ? clear_bhb_loop+0x40/0x90 [ 896.343898][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.343919][T13522] RIP: 0033:0x7fa58e6cde59 [ 896.343938][T13522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.343955][T13522] RSP: 002b:00007fa58c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 896.343974][T13522] RAX: ffffffffffffffda RBX: 00007fa58e955fa0 RCX: 00007fa58e6cde59 [ 896.343989][T13522] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 896.344007][T13522] RBP: 00007fa58e763e6f R08: 0000000000000000 R09: 0000000000000000 [ 896.344016][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.344025][T13522] R13: 00007fa58e956038 R14: 00007fa58e955fa0 R15: 00007ffd8e37dd88 [ 896.344079][T13522] [ 896.344090][T13522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 896.344106][T13522] CPU: 1 UID: 0 PID: 13522 Comm: syz.0.2163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 896.344129][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.344140][T13522] Call Trace: [ 896.344148][T13522] [ 896.344156][T13522] vpanic+0x5d9/0xad0 [ 896.344183][T13522] ? __pfx_vpanic+0x10/0x10 [ 896.344197][T13522] ? __pfx__printk+0x10/0x10 [ 896.344214][T13522] ? is_bpf_text_address+0x292/0x2b0 [ 896.344251][T13522] ? is_bpf_text_address+0x26/0x2b0 [ 896.344286][T13522] panic+0xc5/0xd0 [ 896.344306][T13522] ? __pfx_panic+0x10/0x10 [ 896.344339][T13522] __warn+0x315/0x4c0 [ 896.344359][T13522] ? usb_submit_urb+0x1057/0x18b0 [ 896.344376][T13522] ? usb_submit_urb+0x1057/0x18b0 [ 896.344391][T13522] __report_bug+0x331/0x530 [ 896.344438][T13522] ? usb_submit_urb+0x1057/0x18b0 [ 896.344462][T13522] ? __pfx___report_bug+0x10/0x10 [ 896.344489][T13522] ? stack_trace_save+0xa9/0x100 [ 896.344516][T13522] ? stack_depot_save_flags+0x33/0x800 [ 896.344541][T13522] report_bug_entry+0x19a/0x290 [ 896.344581][T13522] ? usb_submit_urb+0x1100/0x18b0 [ 896.344601][T13522] ? usb_submit_urb+0x1105/0x18b0 [ 896.344622][T13522] handle_bug+0xce/0x200 [ 896.344643][T13522] exc_invalid_op+0x1a/0x50 [ 896.344664][T13522] asm_exc_invalid_op+0x1a/0x20 [ 896.344683][T13522] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 896.344705][T13522] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 896.344723][T13522] RSP: 0018:ffffc90004df7718 EFLAGS: 00010246 [ 896.344740][T13522] RAX: 0000000000000000 RBX: ffff8880264be600 RCX: 0000000080006880 [ 896.344762][T13522] RDX: ffff88803f31aa40 RSI: ffffffff8c119800 RDI: ffffffff8fbbd370 [ 896.344778][T13522] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 896.344793][T13522] R10: ffffc90004df7800 R11: fffff520009bef0c R12: 1ffff1100435fad8 [ 896.344808][T13522] R13: ffff888021afd6c0 R14: ffff88803f31aa40 R15: 0000000080006880 [ 896.344837][T13522] ? usb_submit_urb+0x1091/0x18b0 [ 896.344869][T13522] usb_start_wait_urb+0x13f/0x5b0 [ 896.344907][T13522] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 896.344951][T13522] usb_control_msg+0x234/0x3e0 [ 896.344979][T13522] dtv5100_i2c_msg+0x231/0x2f0 [ 896.345011][T13522] dtv5100_i2c_xfer+0x1a5/0x610 [ 896.345041][T13522] __i2c_transfer+0x7be/0x1fe0 [ 896.345066][T13522] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 896.345098][T13522] ? lockdep_hardirqs_on+0x7a/0x110 [ 896.345129][T13522] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 896.345159][T13522] ? rt_mutex_lock_nested+0x156/0x1c0 [ 896.345179][T13522] ? i2c_transfer+0xc8/0x2d0 [ 896.345202][T13522] i2c_transfer+0x1cc/0x2d0 [ 896.345227][T13522] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 896.345255][T13522] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 896.345284][T13522] ? _copy_from_user+0x94/0xb0 [ 896.345313][T13522] i2cdev_write+0x116/0x1e0 [ 896.345339][T13522] vfs_writev+0x4c4/0x990 [ 896.345370][T13522] ? __pfx_i2cdev_write+0x10/0x10 [ 896.345398][T13522] ? __pfx_vfs_writev+0x10/0x10 [ 896.345461][T13522] ? __fget_files+0x2a/0x420 [ 896.345488][T13522] ? __fget_files+0x3a8/0x420 [ 896.345509][T13522] ? __fget_files+0x2a/0x420 [ 896.345540][T13522] do_writev+0x15a/0x2e0 [ 896.345576][T13522] ? __pfx_do_writev+0x10/0x10 [ 896.345617][T13522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.345641][T13522] do_syscall_64+0x174/0x580 [ 896.345672][T13522] ? trace_irq_disable+0x3b/0x140 [ 896.345696][T13522] ? clear_bhb_loop+0x40/0x90 [ 896.345723][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.345767][T13522] RIP: 0033:0x7fa58e6cde59 [ 896.345787][T13522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.345806][T13522] RSP: 002b:00007fa58c926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 896.345829][T13522] RAX: ffffffffffffffda RBX: 00007fa58e955fa0 RCX: 00007fa58e6cde59 [ 896.345846][T13522] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 896.345861][T13522] RBP: 00007fa58e763e6f R08: 0000000000000000 R09: 0000000000000000 [ 896.345875][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.345889][T13522] R13: 00007fa58e956038 R14: 00007fa58e955fa0 R15: 00007ffd8e37dd88 [ 896.345924][T13522] [ 896.346525][T13522] Kernel Offset: disabled